# Flog Txt Version 1
# Analyzer Version: 3.2.2
# Analyzer Build Date: May  6 2020 08:26:37
# Log Creation Date: 07.05.2020 07:20:37.095

Process:
	id = "1"
	image_name = "mor.exe"
	filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mor.exe"
	page_root = "0x41176000"
	os_pid = "0xb3c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x454"
	cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mor.exe\" "
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0xb34

	[0043.283] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x76d30000
	[0043.287] GetProcAddress (hModule=0x76d30000, lpProcName="WriteFile") returned 0x76d41282
	[0043.287] GetProcAddress (hModule=0x76d30000, lpProcName="WriteConsoleW") returned 0x76d67aca
	[0043.287] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForSingleObject") returned 0x76d41136
	[0043.287] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualQuery") returned 0x76d4445a
	[0043.287] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualFree") returned 0x76d4186e
	[0043.287] GetProcAddress (hModule=0x76d30000, lpProcName="VirtualAlloc") returned 0x76d41856
	[0043.288] GetProcAddress (hModule=0x76d30000, lpProcName="SwitchToThread") returned 0x76d5efec
	[0043.288] GetProcAddress (hModule=0x76d30000, lpProcName="SetWaitableTimer") returned 0x76d6bb2f
	[0043.288] GetProcAddress (hModule=0x76d30000, lpProcName="SetUnhandledExceptionFilter") returned 0x76d487c9
	[0043.288] GetProcAddress (hModule=0x76d30000, lpProcName="SetProcessPriorityBoost") returned 0x76d5d97b
	[0043.288] GetProcAddress (hModule=0x76d30000, lpProcName="SetEvent") returned 0x76d416c5
	[0043.288] GetProcAddress (hModule=0x76d30000, lpProcName="SetErrorMode") returned 0x76d41b00
	[0043.288] GetProcAddress (hModule=0x76d30000, lpProcName="SetConsoleCtrlHandler") returned 0x76d48a09
	[0043.288] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryA") returned 0x76d449d7
	[0043.288] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryW") returned 0x76d4492b
	[0043.289] GetProcAddress (hModule=0x76d30000, lpProcName="GetSystemInfo") returned 0x76d449ca
	[0043.289] GetProcAddress (hModule=0x76d30000, lpProcName="GetStdHandle") returned 0x76d451b3
	[0043.289] GetProcAddress (hModule=0x76d30000, lpProcName="GetQueuedCompletionStatus") returned 0x76d5d3c3
	[0043.289] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcessAffinityMask") returned 0x76d4a871
	[0043.289] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcAddress") returned 0x76d41222
	[0043.289] GetProcAddress (hModule=0x76d30000, lpProcName="GetEnvironmentStringsW") returned 0x76d451e3
	[0043.289] GetProcAddress (hModule=0x76d30000, lpProcName="GetConsoleMode") returned 0x76d41328
	[0043.289] GetProcAddress (hModule=0x76d30000, lpProcName="FreeEnvironmentStringsW") returned 0x76d451cb
	[0043.290] GetProcAddress (hModule=0x76d30000, lpProcName="ExitProcess") returned 0x76d47a10
	[0043.290] GetProcAddress (hModule=0x76d30000, lpProcName="DuplicateHandle") returned 0x76d41886
	[0043.290] GetProcAddress (hModule=0x76d30000, lpProcName="CreateThread") returned 0x76d434d5
	[0043.290] GetProcAddress (hModule=0x76d30000, lpProcName="CreateIoCompletionPort") returned 0x76d5eef2
	[0043.290] GetProcAddress (hModule=0x76d30000, lpProcName="CreateEventA") returned 0x76d4328c
	[0043.290] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410
	[0043.290] GetProcAddress (hModule=0x76d30000, lpProcName="AddVectoredExceptionHandler") returned 0x77cb742b
	[0043.290] LoadLibraryA (lpLibFileName="winmm.dll") returned 0x75640000
	[0043.290] GetProcAddress (hModule=0x75640000, lpProcName="timeEndPeriod") returned 0x75649feb
	[0043.291] GetProcAddress (hModule=0x75640000, lpProcName="timeBeginPeriod") returned 0x75649ef7
	[0043.291] LoadLibraryA (lpLibFileName="ws2_32.dll") returned 0x77230000
	[0043.291] GetProcAddress (hModule=0x77230000, lpProcName="WSAGetOverlappedResult") returned 0x77237489
	[0043.291] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x18ff68 | out: lpflOldProtect=0x18ff68*=0x2) returned 1
	[0043.582] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x18ff68 | out: lpflOldProtect=0x18ff68*=0x4) returned 1
	[0043.744] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76d30000
	[0043.744] GetProcAddress (hModule=0x76d30000, lpProcName="AddDllDirectory") returned 0x0
	[0043.745] GetProcAddress (hModule=0x76d30000, lpProcName="AddVectoredContinueHandler") returned 0x77ca37e1
	[0043.745] GetProcAddress (hModule=0x76d30000, lpProcName="GetQueuedCompletionStatusEx") returned 0x76dc43af
	[0043.745] GetProcAddress (hModule=0x76d30000, lpProcName="LoadLibraryExW") returned 0x76d4495d
	[0043.745] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x77710000
	[0043.745] GetProcAddress (hModule=0x77710000, lpProcName="SystemFunction036") returned 0x77711919
	[0043.746] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77c40000
	[0043.746] GetProcAddress (hModule=0x77c40000, lpProcName="NtWaitForSingleObject") returned 0x77c5f8ac
	[0043.746] GetProcAddress (hModule=0x77c40000, lpProcName="wine_get_version") returned 0x0
	[0043.759] SetErrorMode (uMode=0x2) returned 0x0
	[0044.047] SetErrorMode (uMode=0x8003) returned 0x2
	[0044.047] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0x44d3d0) returned 0xa9ee48
	[0044.047] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x44d3e0) returned 0x0
	[0044.048] SetConsoleCtrlHandler (HandlerRoutine=0x44d3f0, Add=1) returned 1
	[0044.051] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0044.183] GetProcessAffinityMask (in: hProcess=0xffffffff, lpProcessAffinityMask=0x18fe9c, lpSystemAffinityMask=0x18fe98 | out: lpProcessAffinityMask=0x18fe9c, lpSystemAffinityMask=0x18fe98) returned 1
	[0044.183] GetSystemInfo (in: lpSystemInfo=0x18fed8 | out: lpSystemInfo=0x18fed8*(dwOemId=0x0, wProcessorArchitecture=0x0, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x24a, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) 
	[0044.184] SetProcessPriorityBoost (hProcess=0xffffffff, bDisablePriorityBoost=1) returned 1
	[0044.326] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x240000
	[0044.641] VirtualAlloc (lpAddress=0x0, dwSize=0x10220000, flAllocationType=0x2000, flProtect=0x4) returned 0x2120000
	[0044.917] VirtualAlloc (lpAddress=0xc00000, dwSize=0x20400000, flAllocationType=0x2000, flProtect=0x4) returned 0x0
	[0044.917] VirtualAlloc (lpAddress=0x0, dwSize=0x20400000, flAllocationType=0x2000, flProtect=0x4) returned 0x12340000
	[0044.961] VirtualFree (lpAddress=0x12340000, dwSize=0x0, dwFreeType=0x8000) returned 1
	[0044.961] VirtualAlloc (lpAddress=0x12400000, dwSize=0x20000000, flAllocationType=0x2000, flProtect=0x4) returned 0x12400000
	[0045.112] VirtualAlloc (lpAddress=0x12400000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0x12400000
	[0045.449] VirtualAlloc (lpAddress=0x2120000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0x2120000
	[0045.462] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x210000
	[0045.785] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x220000
	[0046.096] SystemFunction036 (in: RandomBuffer=0x8ccc00, RandomBufferLength=0x40 | out: RandomBuffer=0x8ccc00) returned 1
	[0046.406] GetEnvironmentStringsW () returned 0xaa4690*
	[0046.685] FreeEnvironmentStringsW (penv=0xaa4690) returned 1
	[0046.785] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x18feb4, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x18feb4*=0x60) returned 1
	[0046.785] VirtualQuery (in: lpAddress=0x18fec4, lpBuffer=0x18fec4, dwLength=0x1c | out: lpBuffer=0x18fec4*(BaseAddress=0x18f000, AllocationBase=0x90000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0046.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x124261c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64
	[0047.099] CloseHandle (hObject=0x64) returned 1
	[0047.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x12426380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x68
	[0047.465] CloseHandle (hObject=0x68) returned 1
	[0047.466] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x12426540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x68
	[0047.469] CloseHandle (hObject=0x68) returned 1
	[0047.469] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x68
	[0047.469] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0047.471] SetEvent (hEvent=0x80) returned 1
	[0047.481] SetEvent (hEvent=0x78) returned 1
	[0048.399] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76d30000
	[0048.412] GetProcAddress (hModule=0x76d30000, lpProcName="GetStdHandle") returned 0x76d451b3
	[0048.412] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0
	[0048.424] GetProcAddress (hModule=0x76d30000, lpProcName="SetHandleInformation") returned 0x76d5195c
	[0048.424] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0048.424] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0
	[0048.424] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0048.424] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0
	[0048.424] SetHandleInformation (hObject=0x0, dwMask=0x1, dwFlags=0x0) returned 0
	[0048.669] LoadLibraryW (lpLibFileName="ws2_32.dll") returned 0x77230000
	[0048.669] GetProcAddress (hModule=0x77230000, lpProcName="WSAStartup") returned 0x77233ab2
	[0048.670] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x12422e28 | out: lpWSAData=0x12422e28) returned 0
	[0048.813] GetProcAddress (hModule=0x76d30000, lpProcName="CancelIoEx") returned 0x76d5efbc
	[0048.867] GetProcAddress (hModule=0x76d30000, lpProcName="SetFileCompletionNotificationModes") returned 0x76dbaeee
	[0048.867] GetProcAddress (hModule=0x77230000, lpProcName="WSAEnumProtocolsW") returned 0x7723c8e1
	[0048.867] WSAEnumProtocolsW (in: lpiProtocols=0x12460f8c, lpProtocolBuffer=0x12460f94, lpdwBufferLength=0x12460f88 | out: lpProtocolBuffer=0x12460f94, lpdwBufferLength=0x12460f88) returned 4
	[0049.472] GetProcAddress (hModule=0x76d30000, lpProcName="GetConsoleMode") returned 0x76d41328
	[0049.472] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0x12465f84 | out: lpMode=0x12465f84) returned 0
	[0049.473] SetEvent (hEvent=0x70) returned 1
	[0049.756] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x12380000
	[0049.766] SetEvent (hEvent=0x78) returned 1
	[0050.045] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0x12465f84 | out: lpMode=0x12465f84) returned 0
	[0050.046] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0x12465f84 | out: lpMode=0x12465f84) returned 0
	[0050.089] GetProcAddress (hModule=0x76d30000, lpProcName="GetCommandLineW") returned 0x76d45223
	[0050.089] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mor.exe\" "
	[0050.255] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x123c0000
	[0051.905] GetProcAddress (hModule=0x76d30000, lpProcName="GetEnvironmentVariableW") returned 0x76d41b48
	[0051.905] GetEnvironmentVariableW (in: lpName="GODEBUG", lpBuffer=0x1248a000, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0051.909] GetEnvironmentVariableW (in: lpName="DEBUG_HTTP2_GOROUTINES", lpBuffer=0x1248a0d0, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0051.910] GetEnvironmentVariableW (in: lpName="GODEBUG", lpBuffer=0x1248a1a0, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0051.911] GetEnvironmentVariableW (in: lpName="ProgramFiles", lpBuffer=0x1248a270, nSize=0x64 | out: lpBuffer="C:\\Program Files (x86)") returned 0x16
	[0051.912] GetEnvironmentVariableW (in: lpName="ProgramFiles", lpBuffer=0x1248a340, nSize=0x64 | out: lpBuffer="C:\\Program Files (x86)") returned 0x16
	[0051.913] GetEnvironmentVariableW (in: lpName="GODEBUG", lpBuffer=0x1248a410, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0051.914] GetEnvironmentVariableW (in: lpName="HTTP_PROXY", lpBuffer=0x1248a4e0, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0051.914] GetEnvironmentVariableW (in: lpName="http_proxy", lpBuffer=0x1248a5b0, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0051.914] GetEnvironmentVariableW (in: lpName="HTTPS_PROXY", lpBuffer=0x1248a680, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0051.914] GetEnvironmentVariableW (in: lpName="https_proxy", lpBuffer=0x1248a750, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0051.914] GetEnvironmentVariableW (in: lpName="NO_PROXY", lpBuffer=0x1248a820, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0051.914] GetEnvironmentVariableW (in: lpName="no_proxy", lpBuffer=0x1248a8f0, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0051.914] GetEnvironmentVariableW (in: lpName="REQUEST_METHOD", lpBuffer=0x1248a9c0, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0051.914] SetEvent (hEvent=0x78) returned 1
	[0051.917] GetProcAddress (hModule=0x77230000, lpProcName="GetAddrInfoW") returned 0x77234889
	[0051.917] GetAddrInfoW (in: pNodeName="api.telegram.org", pServiceName=0x0, pHints=0x124def94*(ai_flags=0, ai_family=0, ai_socktype=1, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x124def50 | out: ppResult=0x124def50*=0xab16c8*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0xaac790*(sa_family=2, sin_port=0x0, sin_addr="149.154.167.220"), ai_next=0x0)) returned 0
	[0082.716] SetEvent (hEvent=0xa0) returned 1
	[0082.717] GetProcAddress (hModule=0x77230000, lpProcName="FreeAddrInfoW") returned 0x77234b1b
	[0082.717] FreeAddrInfoW (pAddrInfo=0xab16c8*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0xaac790*(sa_family=2, sin_port=0x0, sin_addr="149.154.167.220"), ai_next=0x0)) 
	[0082.718] SetEvent (hEvent=0x80) returned 1
	[0082.719] LoadLibraryW (lpLibFileName="ws2_32.dll") returned 0x77230000
	[0082.720] GetProcAddress (hModule=0x77230000, lpProcName="WSASocketW") returned 0x77233cd3
	[0082.720] WSASocketW (af=2, type=1, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x81) returned 0x108
	[0082.721] GetProcAddress (hModule=0x77230000, lpProcName="setsockopt") returned 0x772341b6
	[0082.721] setsockopt (s=0x108, level=65535, optname=32, optval="\x01", optlen=4) returned -1
	[0082.731] CreateIoCompletionPort (FileHandle=0xffffffff, ExistingCompletionPort=0x0, CompletionKey=0x0, NumberOfConcurrentThreads=0xffffffff) returned 0x10c
	[0082.731] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x330d0000
	[0082.732] CreateIoCompletionPort (FileHandle=0x108, ExistingCompletionPort=0x10c, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x10c
	[0082.751] SetFileCompletionNotificationModes (FileHandle=0x108, Flags=0x3) returned 1
	[0082.751] SetEvent (hEvent=0x80) returned 1
	[0082.751] GetProcAddress (hModule=0x77230000, lpProcName="bind") returned 0x77234582
	[0082.752] bind (s=0x108, addr=0x1244c0c8*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0
	[0082.753] GetProcAddress (hModule=0x77230000, lpProcName="socket") returned 0x77233eb8
	[0082.755] socket (af=2, type=1, protocol=6) returned 0x110
	[0082.756] GetProcAddress (hModule=0x77230000, lpProcName="WSAIoctl") returned 0x77232fe7
	[0082.756] WSAIoctl (in: s=0x110, dwIoControlCode=0xc8000006, lpvInBuffer=0x88b760, cbInBuffer=0x10, lpvOutBuffer=0x8bbbac, cbOutBuffer=0x4, lpcbBytesReturned=0x1242f78c, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x8bbbac, lpcbBytesReturned=0x1242f78c, lpOverlapped=0x0) returned 0
	[0082.756] GetProcAddress (hModule=0x76d30000, lpProcName="CloseHandle") returned 0x76d41410
	[0082.756] CloseHandle (hObject=0x110) returned 1
	[0082.757] ConnectEx (in: s=0x108, name=0x1244c0a8*(sa_family=2, sin_port=0x1bb, sin_addr="149.154.167.220"), namelen=16, lpSendBuffer=0x0, dwSendDataLength=0x0, lpdwBytesSent=0x0, lpOverlapped=0x124e2088 | out: lpdwBytesSent=0x0) returned 0
	[0082.762] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x396) returned 0x102
	[0083.925] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0085.590] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0106.169] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18fa50, ulCount=0x10, ulNumEntriesRemoved=0x18fa34, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18fa50, ulNumEntriesRemoved=0x18fa34) returned 0
	[0106.169] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18fa50, ulCount=0x10, ulNumEntriesRemoved=0x18fa34, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x18fa50, ulNumEntriesRemoved=0x18fa34) returned 1
	[0106.816] WSAGetOverlappedResult (in: s=0x2f8, lpOverlapped=0x12510c88, lpcbTransfer=0x18fa30, fWait=0, lpdwFlags=0x18fa40 | out: lpcbTransfer=0x18fa30, lpdwFlags=0x18fa40) returned 1
	[0106.816] setsockopt (s=0x2f8, level=65535, optname=28688, optval="ø\x02", optlen=4) returned 0
	[0106.816] getsockname (in: s=0x2f8, name=0x124f3890, namelen=0x124f388c | out: name=0x124f3890*(sa_family=2, sin_port=0xc007, sin_addr="192.168.0.109"), namelen=0x124f388c) returned 0
	[0106.817] getpeername (in: s=0x2f8, name=0x124f3890, namelen=0x124f388c | out: name=0x124f3890*(sa_family=2, sin_port=0x50, sin_addr="37.48.65.182"), namelen=0x124f388c) returned 0
	[0106.817] setsockopt (s=0x2f8, level=6, optname=1, optval="\x01", optlen=4) returned 0
	[0106.817] setsockopt (s=0x2f8, level=65535, optname=8, optval="\x01", optlen=4) returned 0
	[0106.817] WSAIoctl (in: s=0x2f8, dwIoControlCode=0x98000004, lpvInBuffer=0x124f3b80, cbInBuffer=0xc, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x124f3b78, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x124f3b78, lpOverlapped=0x0) returned 0
	[0106.818] WSARecv (in: s=0x2f8, lpBuffers=0x12510c40, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x12510c34, lpFlags=0x12510c78*=0x0, lpOverlapped=0x12510c14, lpCompletionRoutine=0x0 | out: lpBuffers=0x12510c40*=((len=0x1000, buf=0x12736000*)), lpNumberOfBytesRecvd=0x12510c34*=0x0, lpFlags=0x12510c78*=0x0, lpOverlapped=0x12510c14) returned 0
	[0106.818] WSASend (in: s=0x2f8, lpBuffers=0x12510cb4*=((len=0x6b, buf=0x12737000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x12510ca8, dwFlags=0x0, lpOverlapped=0x12510c88, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x12510ca8*=0x6b, lpOverlapped=0x12510c88) returned 0
	[0106.819] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18fa50, ulCount=0x10, ulNumEntriesRemoved=0x18fa34, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18fa50, ulNumEntriesRemoved=0x18fa34) returned 0
	[0106.819] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18fa50, ulCount=0x10, ulNumEntriesRemoved=0x18fa34, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x18fa50, ulNumEntriesRemoved=0x18fa34) returned 1
	[0106.861] WSAGetOverlappedResult (in: s=0x2f8, lpOverlapped=0x12510c14, lpcbTransfer=0x18fa30, fWait=0, lpdwFlags=0x18fa40 | out: lpcbTransfer=0x18fa30, lpdwFlags=0x18fa40) returned 1
	[0106.861] WSARecv (in: s=0x2f8, lpBuffers=0x12510c40, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x12510c34, lpFlags=0x12510c78*=0x0, lpOverlapped=0x12510c14, lpCompletionRoutine=0x0 | out: lpBuffers=0x12510c40*=((len=0x1000, buf=0x12736000)), lpNumberOfBytesRecvd=0x12510c34*=0x2a0, lpFlags=0x12510c78*=0x0, lpOverlapped=0x12510c14) returned 0xffffffff
	[0106.862] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x1248add0, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0106.863] GetFileAttributesExW (in: lpFileName="cmd.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.com"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.863] CreateFileW (lpFileName="cmd.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.863] GetFileAttributesExW (in: lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.863] CreateFileW (lpFileName="cmd.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.exe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.863] GetFileAttributesExW (in: lpFileName="cmd.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.bat"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.863] CreateFileW (lpFileName="cmd.bat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.bat"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.863] GetFileAttributesExW (in: lpFileName="cmd.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.cmd"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.864] CreateFileW (lpFileName="cmd.cmd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.cmd"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.864] GetFileAttributesExW (in: lpFileName="cmd.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.vbs"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.864] CreateFileW (lpFileName="cmd.vbs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.vbs"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.864] GetFileAttributesExW (in: lpFileName="cmd.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.vbe"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.864] CreateFileW (lpFileName="cmd.vbe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.vbe"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.865] GetFileAttributesExW (in: lpFileName="cmd.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.js"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.865] CreateFileW (lpFileName="cmd.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.js"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.865] GetFileAttributesExW (in: lpFileName="cmd.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.jse"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.865] CreateFileW (lpFileName="cmd.jse" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.jse"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.865] GetFileAttributesExW (in: lpFileName="cmd.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.wsf"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.865] CreateFileW (lpFileName="cmd.wsf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.wsf"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.865] GetFileAttributesExW (in: lpFileName="cmd.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.wsh"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.866] CreateFileW (lpFileName="cmd.wsh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.wsh"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.866] GetFileAttributesExW (in: lpFileName="cmd.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.msc"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.866] CreateFileW (lpFileName="cmd.msc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cmd.msc"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.866] GetEnvironmentVariableW (in: lpName="path", lpBuffer=0x1248aea0, nSize=0x64 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0106.866] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.com" (normalized: "c:\\windows\\system32\\cmd.com"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.867] CreateFileW (lpFileName="C:\\Windows\\system32\\cmd.com" (normalized: "c:\\windows\\system32\\cmd.com"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.867] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f19bc | out: lpFileInformation=0x124f19bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0106.883] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x1248af70, nSize=0x64 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0106.883] GetFileAttributesExW (in: lpFileName="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f18bc | out: lpFileInformation=0x124f18bc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bdd4861, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x8bdd4861, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x8bdd4861, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x49e00)) returned 1
	[0106.884] CreateFileW (lpFileName="NUL" (normalized: "\\device\\null"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0106.884] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1bf8 | out: lpMode=0x124f1bf8) returned 0
	[0106.884] GetProcAddress (hModule=0x76d30000, lpProcName="CreatePipe") returned 0x76dc415b
	[0106.884] CreatePipe (in: hReadPipe=0x124f1c3c, hWritePipe=0x124f1c40, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x124f1c3c*=0x304, hWritePipe=0x124f1c40*=0x308) returned 1
	[0106.885] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x124f1c14 | out: lpMode=0x124f1c14) returned 0
	[0106.885] GetConsoleMode (in: hConsoleHandle=0x308, lpMode=0x124f1c14 | out: lpMode=0x124f1c14) returned 0
	[0106.885] CreatePipe (in: hReadPipe=0x124f1c3c, hWritePipe=0x124f1c40, lpPipeAttributes=0x0, nSize=0x0 | out: hReadPipe=0x124f1c3c*=0x30c, hWritePipe=0x124f1c40*=0x310) returned 1
	[0106.886] GetConsoleMode (in: hConsoleHandle=0x30c, lpMode=0x124f1c14 | out: lpMode=0x124f1c14) returned 0
	[0106.886] GetConsoleMode (in: hConsoleHandle=0x310, lpMode=0x124f1c14 | out: lpMode=0x124f1c14) returned 0
	[0106.886] GetProcAddress (hModule=0x76d30000, lpProcName="GetEnvironmentStringsW") returned 0x76d451e3
	[0106.886] GetEnvironmentStringsW () returned 0xabb4b0*
	[0106.887] GetProcAddress (hModule=0x76d30000, lpProcName="FreeEnvironmentStringsW") returned 0x76d451cb
	[0106.887] FreeEnvironmentStringsW (penv=0xabb4b0) returned 1
	[0106.887] GetProcAddress (hModule=0x76d30000, lpProcName="GetCurrentProcess") returned 0x76d41809
	[0106.887] GetCurrentProcess () returned 0xffffffff
	[0106.887] GetProcAddress (hModule=0x76d30000, lpProcName="DuplicateHandle") returned 0x76d41886
	[0106.887] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x2fc, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x127882d0, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x127882d0*=0x314) returned 1
	[0106.887] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x308, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x127882d4, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x127882d4*=0x318) returned 1
	[0106.887] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0x310, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x127882d8, dwDesiredAccess=0x0, bInheritHandle=1, dwOptions=0x2 | out: lpTargetHandle=0x127882d8*=0x31c) returned 1
	[0106.888] GetProcAddress (hModule=0x76d30000, lpProcName="CreateProcessW") returned 0x76d4103d
	[0106.888] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\cmd.exe", lpCommandLine="cmd /c ver", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x400, lpEnvironment=0x12796000, lpCurrentDirectory=0x0, lpStartupInfo=0x124f1bc4*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x314, hStdOutput=0x318, hStdError=0x31c), lpProcessInformation=0x124f1ba0 | out: lpCommandLine="cmd /c ver", lpProcessInformation=0x124f1ba0*(hProcess=0x324, hThread=0x320, dwProcessId=0x98c, dwThreadId=0x99c)) returned 1
	[0107.573] CloseHandle (hObject=0x320) returned 1
	[0107.573] CloseHandle (hObject=0x31c) returned 1
	[0107.573] CloseHandle (hObject=0x318) returned 1
	[0107.573] CloseHandle (hObject=0x314) returned 1
	[0107.573] CloseHandle (hObject=0x2fc) returned 1
	[0107.574] CloseHandle (hObject=0x308) returned 1
	[0107.574] CloseHandle (hObject=0x310) returned 1
	[0107.574] GetProcAddress (hModule=0x76d30000, lpProcName="WaitForSingleObject") returned 0x76d41136
	[0107.574] WaitForSingleObject (hHandle=0x324, dwMilliseconds=0xffffffff) returned 0x0
	[0109.143] GetProcAddress (hModule=0x76d30000, lpProcName="GetExitCodeProcess") returned 0x76d5174d
	[0109.143] GetExitCodeProcess (in: hProcess=0x324, lpExitCode=0x124f1cfc | out: lpExitCode=0x124f1cfc*=0x0) returned 1
	[0109.144] GetProcAddress (hModule=0x76d30000, lpProcName="GetProcessTimes") returned 0x76d5d60f
	[0109.144] GetProcessTimes (in: hProcess=0x324, lpCreationTime=0x12790220, lpExitTime=0x12790228, lpKernelTime=0x12790230, lpUserTime=0x12790238 | out: lpCreationTime=0x12790220, lpExitTime=0x12790228, lpKernelTime=0x12790230, lpUserTime=0x12790238) returned 1
	[0109.144] CloseHandle (hObject=0x324) returned 1
	[0109.144] SetEvent (hEvent=0x78) returned 1
	[0109.144] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0109.411] GetEnvironmentVariableW (in: lpName="PROCESSOR_ARCHITECTURE", lpBuffer=0x1285e000, nSize=0x64 | out: lpBuffer="x86") returned 0x3
	[0109.414] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0x2b4, buf=0x12618000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0x2b4, lpOverlapped=0x124e2088) returned 0
	[0109.415] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0109.864] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0109.864] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f5a94 | out: lpFindFileData=0x124f5a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0111.633] SetEvent (hEvent=0xa0) returned 1
	[0111.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0111.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.msi", cAlternateFileName="PUBLIS~1.MSI")) returned 1
	[0111.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublisherMUI.xml", cAlternateFileName="PUBLIS~1.XML")) returned 1
	[0111.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PubLR.cab", cAlternateFileName="")) returned 1
	[0111.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0111.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0111.633] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0111.635] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f575c | out: lpFileInformation=0x124f575c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0111.636] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0111.636] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0111.637] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f596c | out: lpMode=0x124f596c) returned 0
	[0111.637] WriteFile (in: hFile=0x338, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f596c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f596c*=0x1180, lpOverlapped=0x0) returned 1
	[0112.661] SetEvent (hEvent=0xa0) returned 1
	[0112.661] CloseHandle (hObject=0x338) returned 1
	[0112.661] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4)) returned 1
	[0112.710] SetEvent (hEvent=0x2e4) returned 1
	[0112.710] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00)) returned 1
	[0112.710] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0112.711] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1
	[0112.711] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0112.711] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0112.711] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0112.711] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e360 | out: pbBuffer=0x1252e360) returned 1
	[0112.712] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e778 | out: pbBuffer=0x1251e778) returned 1
	[0112.712] VirtualAlloc (lpAddress=0x128b4000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x128b4000
	[0112.713] VirtualAlloc (lpAddress=0x128d4000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x128d4000
	[0112.714] ReadFile (in: hFile=0x338, lpBuffer=0x128b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x128b4000*, lpNumberOfBytesRead=0x126ebd1c*=0x5aa, lpOverlapped=0x0) returned 1
	[0113.010] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0113.827] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0114.535] SetEvent (hEvent=0x30c) returned 1
	[0114.536] SetEvent (hEvent=0x11c) returned 1
	[0114.536] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0116.254] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0116.507] SetEvent (hEvent=0x308) returned 1
	[0116.509] GetFileType (hFile=0x33c) returned 0x1
	[0116.509] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124e1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0116.509] WriteFile (in: hFile=0x33c, lpBuffer=0x128e2000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124e1d00, lpOverlapped=0x124e1d0c | out: lpBuffer=0x128e2000*, lpNumberOfBytesWritten=0x124e1d00*=0x20000, lpOverlapped=0x124e1d0c) returned 1
	[0116.511] GetFileType (hFile=0x33c) returned 0x1
	[0116.511] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124e1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0116.511] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0116.511] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0116.511] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0116.512] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410648 | out: pbBuffer=0x12410648) returned 1
	[0116.512] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0116.512] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7d0c | out: lpMode=0x124f7d0c) returned 0
	[0116.513] WriteFile (in: hFile=0x2fc, lpBuffer=0x12606500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12606500*, lpNumberOfBytesWritten=0x124f7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0116.581] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0116.662] SetEvent (hEvent=0xa0) returned 1
	[0116.662] SetEvent (hEvent=0x2f4) returned 1
	[0116.662] CloseHandle (hObject=0x2fc) returned 1
	[0119.601] SetEvent (hEvent=0xa0) returned 1
	[0119.603] CloseHandle (hObject=0x33c) returned 1
	[0119.604] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0119.605] SetEvent (hEvent=0x2e4) returned 1
	[0119.605] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0119.605] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7d0c | out: lpMode=0x124f7d0c) returned 0
	[0119.605] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7ad0 | out: lpFileInformation=0x124f7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0119.605] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0119.606] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441b8 | out: pbBuffer=0x127441b8) returned 1
	[0119.606] ReadFile (in: hFile=0x33c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f7d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0119.656] GetFileType (hFile=0x33c) returned 0x1
	[0119.656] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0119.656] WriteFile (in: hFile=0x33c, lpBuffer=0x12942000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f7d00, lpOverlapped=0x124f7d0c | out: lpBuffer=0x12942000*, lpNumberOfBytesWritten=0x124f7d00*=0x20000, lpOverlapped=0x124f7d0c) returned 1
	[0119.657] GetFileType (hFile=0x33c) returned 0x1
	[0119.657] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0119.657] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0119.657] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0119.658] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0119.658] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744280 | out: pbBuffer=0x12744280) returned 1
	[0119.658] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0119.658] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7d0c | out: lpMode=0x124f7d0c) returned 0
	[0119.658] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0119.695] CloseHandle (hObject=0x2cc) returned 1
	[0119.753] CloseHandle (hObject=0x33c) returned 1
	[0119.754] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0119.755] SetEvent (hEvent=0x30c) returned 1
	[0119.755] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0119.755] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7d0c | out: lpMode=0x124f7d0c) returned 0
	[0119.755] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7ad0 | out: lpFileInformation=0x124f7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b)) returned 1
	[0119.755] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127326c0 | out: pbBuffer=0x127326c0) returned 1
	[0119.755] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744298 | out: pbBuffer=0x12744298) returned 1
	[0119.756] ReadFile (in: hFile=0x33c, lpBuffer=0x12962000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12962000*, lpNumberOfBytesRead=0x124f7d1c*=0x32b, lpOverlapped=0x0) returned 1
	[0119.805] GetFileType (hFile=0x33c) returned 0x1
	[0119.805] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0119.805] WriteFile (in: hFile=0x33c, lpBuffer=0x1260e000*, nNumberOfBytesToWrite=0x32b, lpNumberOfBytesWritten=0x124f7d00, lpOverlapped=0x124f7d0c | out: lpBuffer=0x1260e000*, lpNumberOfBytesWritten=0x124f7d00*=0x32b, lpOverlapped=0x124f7d0c) returned 1
	[0119.805] GetFileType (hFile=0x33c) returned 0x1
	[0119.805] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x32b, lpNewFilePointer=0x0, dwMoveMethod=0x124f7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0119.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0119.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0119.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0119.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744350 | out: pbBuffer=0x12744350) returned 1
	[0119.806] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0119.806] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7d0c | out: lpMode=0x124f7d0c) returned 0
	[0119.807] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0119.807] CloseHandle (hObject=0x2cc) returned 1
	[0119.808] CloseHandle (hObject=0x33c) returned 1
	[0119.808] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0119.809] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0119.809] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7d0c | out: lpMode=0x124f7d0c) returned 0
	[0119.809] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7ad0 | out: lpFileInformation=0x124f7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1
	[0119.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127328e0 | out: pbBuffer=0x127328e0) returned 1
	[0119.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744368 | out: pbBuffer=0x12744368) returned 1
	[0119.809] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f7d1c*=0x16fc, lpOverlapped=0x0) returned 1
	[0119.918] GetFileType (hFile=0x33c) returned 0x1
	[0119.918] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0119.918] WriteFile (in: hFile=0x33c, lpBuffer=0x12507800*, nNumberOfBytesToWrite=0x16fc, lpNumberOfBytesWritten=0x124f7d00, lpOverlapped=0x124f7d0c | out: lpBuffer=0x12507800*, lpNumberOfBytesWritten=0x124f7d00*=0x16fc, lpOverlapped=0x124f7d0c) returned 1
	[0119.918] GetFileType (hFile=0x33c) returned 0x1
	[0119.918] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x16fc, lpNewFilePointer=0x0, dwMoveMethod=0x124f7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0119.918] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0119.919] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0119.919] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0119.919] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744420 | out: pbBuffer=0x12744420) returned 1
	[0119.919] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0119.919] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7d0c | out: lpMode=0x124f7d0c) returned 0
	[0119.919] WriteFile (in: hFile=0x2fc, lpBuffer=0x1262c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f7d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262c000*, lpNumberOfBytesWritten=0x124f7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0119.919] CloseHandle (hObject=0x2fc) returned 1
	[0119.925] CloseHandle (hObject=0x33c) returned 1
	[0119.925] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0119.927] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0120.022] SetEvent (hEvent=0x2e4) returned 1
	[0120.023] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0120.023] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0120.023] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b)) returned 1
	[0120.024] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732b00 | out: pbBuffer=0x12732b00) returned 1
	[0120.024] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744438 | out: pbBuffer=0x12744438) returned 1
	[0120.024] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0120.059] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0120.060] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0120.060] SetEvent (hEvent=0xa0) returned 1
	[0120.060] SetEvent (hEvent=0x2e4) returned 1
	[0120.061] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0120.114] GetFileType (hFile=0x33c) returned 0x1
	[0120.114] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.114] WriteFile (in: hFile=0x33c, lpBuffer=0x12878000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12878000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0120.115] GetFileType (hFile=0x33c) returned 0x1
	[0120.116] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401481 | out: pbBuffer=0x12401481) returned 1
	[0120.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401581 | out: pbBuffer=0x12401581) returned 1
	[0120.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401681 | out: pbBuffer=0x12401681) returned 1
	[0120.119] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444f0 | out: pbBuffer=0x127444f0) returned 1
	[0120.119] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0120.120] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0120.120] WriteFile (in: hFile=0x2fc, lpBuffer=0x1262c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262c500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.159] CloseHandle (hObject=0x2fc) returned 1
	[0120.315] CloseHandle (hObject=0x33c) returned 1
	[0120.316] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.317] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0120.317] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0120.317] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1
	[0120.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3a0 | out: pbBuffer=0x1240e3a0) returned 1
	[0120.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124100f0 | out: pbBuffer=0x124100f0) returned 1
	[0120.317] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x93a, lpOverlapped=0x0) returned 1
	[0120.426] GetFileType (hFile=0x33c) returned 0x1
	[0120.426] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.427] WriteFile (in: hFile=0x33c, lpBuffer=0x12644a80*, nNumberOfBytesToWrite=0x93a, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12644a80*, lpNumberOfBytesWritten=0x12429d00*=0x93a, lpOverlapped=0x12429d0c) returned 1
	[0120.427] GetFileType (hFile=0x33c) returned 0x1
	[0120.427] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x93a, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.427] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0120.427] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0120.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0120.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0120.428] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0120.428] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0120.428] WriteFile (in: hFile=0x32c, lpBuffer=0x1277a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277a000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.428] CloseHandle (hObject=0x32c) returned 1
	[0120.433] CloseHandle (hObject=0x33c) returned 1
	[0120.433] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.434] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf)) returned 1
	[0120.434] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c)) returned 1
	[0120.435] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0120.435] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0120.435] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf)) returned 1
	[0120.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0120.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0120.436] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x12429d1c*=0x4cf, lpOverlapped=0x0) returned 1
	[0120.507] GetFileType (hFile=0x33c) returned 0x1
	[0120.507] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.508] WriteFile (in: hFile=0x33c, lpBuffer=0x1277a500*, nNumberOfBytesToWrite=0x4cf, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1277a500*, lpNumberOfBytesWritten=0x12429d00*=0x4cf, lpOverlapped=0x12429d0c) returned 1
	[0120.508] GetFileType (hFile=0x33c) returned 0x1
	[0120.508] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4cf, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0120.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0120.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0120.509] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0120.509] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0120.509] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0120.509] WriteFile (in: hFile=0x2fc, lpBuffer=0x1277aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277aa00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.509] CloseHandle (hObject=0x2fc) returned 1
	[0120.513] CloseHandle (hObject=0x33c) returned 1
	[0120.513] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.514] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0120.571] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0120.571] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f5a94 | out: lpFindFileData=0x124f5a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0120.571] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0120.571] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0120.571] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLR.cab", cAlternateFileName="")) returned 1
	[0120.571] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.msi", cAlternateFileName="")) returned 1
	[0120.571] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioMUI.xml", cAlternateFileName="")) returned 1
	[0120.571] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0120.572] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0120.572] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f575c | out: lpFileInformation=0x124f575c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0120.572] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0120.572] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0120.625] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f596c | out: lpMode=0x124f596c) returned 0
	[0120.625] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f596c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f596c*=0x1180, lpOverlapped=0x0) returned 1
	[0120.626] CloseHandle (hObject=0x2cc) returned 1
	[0120.627] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861)) returned 1
	[0120.816] SetEvent (hEvent=0x70) returned 1
	[0120.816] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd)) returned 1
	[0120.816] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000)) returned 1
	[0120.816] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f)) returned 1
	[0120.817] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0120.817] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0120.817] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x272b1e70, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x272b1e70, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x435c1d00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2ab000)) returned 1
	[0120.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0120.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e6d8 | out: pbBuffer=0x1251e6d8) returned 1
	[0120.817] ReadFile (in: hFile=0x304, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0120.852] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0120.864] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0120.885] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0120.905] SetEvent (hEvent=0x2f4) returned 1
	[0120.905] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0120.905] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0120.905] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646)) returned 1
	[0120.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0120.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0120.906] ReadFile (in: hFile=0x328, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x126ebd1c*=0x646, lpOverlapped=0x0) returned 1
	[0120.919] GetFileType (hFile=0x328) returned 0x1
	[0120.919] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.919] WriteFile (in: hFile=0x328, lpBuffer=0x12518700*, nNumberOfBytesToWrite=0x646, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x12518700*, lpNumberOfBytesWritten=0x126ebd00*=0x646, lpOverlapped=0x126ebd0c) returned 1
	[0120.919] GetFileType (hFile=0x328) returned 0x1
	[0120.920] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x646, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0120.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0120.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0120.921] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0120.921] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0120.921] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0120.921] WriteFile (in: hFile=0x33c, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.921] CloseHandle (hObject=0x33c) returned 1
	[0120.921] CloseHandle (hObject=0x328) returned 1
	[0120.922] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.922] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0120.922] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0120.922] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4)) returned 1
	[0120.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0120.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0120.923] ReadFile (in: hFile=0x328, lpBuffer=0x12958000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12958000*, lpNumberOfBytesRead=0x126e7d1c*=0x7c4, lpOverlapped=0x0) returned 1
	[0120.941] GetFileType (hFile=0x328) returned 0x1
	[0120.941] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.941] WriteFile (in: hFile=0x328, lpBuffer=0x124b4000*, nNumberOfBytesToWrite=0x7c4, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x124b4000*, lpNumberOfBytesWritten=0x126e7d00*=0x7c4, lpOverlapped=0x126e7d0c) returned 1
	[0120.941] GetFileType (hFile=0x328) returned 0x1
	[0120.941] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x7c4, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0120.942] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0120.942] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0120.942] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0120.942] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0120.942] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0120.942] WriteFile (in: hFile=0x32c, lpBuffer=0x1276e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x1276e500*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.943] CloseHandle (hObject=0x32c) returned 1
	[0120.943] CloseHandle (hObject=0x328) returned 1
	[0120.943] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.944] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0120.958] SetEvent (hEvent=0x70) returned 1
	[0120.958] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0120.961] SetEvent (hEvent=0x11c) returned 1
	[0120.961] SetEvent (hEvent=0x308) returned 1
	[0120.961] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0120.962] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.088] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0x2ca, buf=0x1260a000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0x2ca, lpOverlapped=0x124e2088) returned 0
	[0121.090] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.090] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.090] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1
	[0121.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e0e0 | out: pbBuffer=0x1252e0e0) returned 1
	[0121.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e140 | out: pbBuffer=0x1251e140) returned 1
	[0121.090] ReadFile (in: hFile=0x328, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x126e5d1c*=0x5ac, lpOverlapped=0x0) returned 1
	[0121.102] GetFileType (hFile=0x328) returned 0x1
	[0121.102] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.102] WriteFile (in: hFile=0x328, lpBuffer=0x12462000*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12462000*, lpNumberOfBytesWritten=0x126e5d00*=0x5ac, lpOverlapped=0x126e5d0c) returned 1
	[0121.102] GetFileType (hFile=0x328) returned 0x1
	[0121.102] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x5ac, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0121.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0121.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0121.103] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e768 | out: pbBuffer=0x1251e768) returned 1
	[0121.103] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.103] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.103] WriteFile (in: hFile=0x32c, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.103] CloseHandle (hObject=0x32c) returned 1
	[0121.103] CloseHandle (hObject=0x328) returned 1
	[0121.103] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.105] SetEvent (hEvent=0x2e8) returned 1
	[0121.105] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.138] SetEvent (hEvent=0x70) returned 1
	[0121.141] SetEvent (hEvent=0x308) returned 1
	[0121.141] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0121.146] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0121.147] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0121.147] SetEvent (hEvent=0x30c) returned 1
	[0121.147] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0121.150] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.150] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.150] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741)) returned 1
	[0121.150] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0121.150] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0121.150] ReadFile (in: hFile=0x340, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f3d1c*=0x741, lpOverlapped=0x0) returned 1
	[0121.168] GetFileType (hFile=0x340) returned 0x1
	[0121.168] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.168] WriteFile (in: hFile=0x340, lpBuffer=0x124b8000*, nNumberOfBytesToWrite=0x741, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124b8000*, lpNumberOfBytesWritten=0x124f3d00*=0x741, lpOverlapped=0x124f3d0c) returned 1
	[0121.168] GetFileType (hFile=0x340) returned 0x1
	[0121.168] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x741, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.168] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0121.168] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0121.169] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0121.169] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0121.169] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.169] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.169] WriteFile (in: hFile=0x338, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.169] CloseHandle (hObject=0x338) returned 1
	[0121.169] CloseHandle (hObject=0x340) returned 1
	[0121.170] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.171] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5)) returned 1
	[0121.171] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0121.171] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.171] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.171] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5)) returned 1
	[0121.171] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0121.171] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0121.172] ReadFile (in: hFile=0x340, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f3d1c*=0x15b5, lpOverlapped=0x0) returned 1
	[0121.185] GetFileType (hFile=0x340) returned 0x1
	[0121.186] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.186] WriteFile (in: hFile=0x340, lpBuffer=0x12507800*, nNumberOfBytesToWrite=0x15b5, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12507800*, lpNumberOfBytesWritten=0x124f3d00*=0x15b5, lpOverlapped=0x124f3d0c) returned 1
	[0121.186] GetFileType (hFile=0x340) returned 0x1
	[0121.186] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x15b5, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.186] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0121.186] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0121.186] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0121.187] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0121.187] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.187] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.187] WriteFile (in: hFile=0x328, lpBuffer=0x1263a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.187] CloseHandle (hObject=0x328) returned 1
	[0121.187] CloseHandle (hObject=0x340) returned 1
	[0121.187] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.190] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1
	[0121.190] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488)) returned 1
	[0121.191] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0121.191] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.191] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.191] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488)) returned 1
	[0121.191] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c480 | out: pbBuffer=0x1244c480) returned 1
	[0121.191] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0121.191] ReadFile (in: hFile=0x340, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f3d1c*=0x2488, lpOverlapped=0x0) returned 1
	[0121.209] GetFileType (hFile=0x340) returned 0x1
	[0121.209] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.209] WriteFile (in: hFile=0x340, lpBuffer=0x128d4000*, nNumberOfBytesToWrite=0x2488, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x128d4000*, lpNumberOfBytesWritten=0x124f3d00*=0x2488, lpOverlapped=0x124f3d0c) returned 1
	[0121.209] GetFileType (hFile=0x340) returned 0x1
	[0121.209] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x2488, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0121.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0121.210] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0121.210] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0121.210] SetEvent (hEvent=0x320) returned 1
	[0121.210] SetEvent (hEvent=0x70) returned 1
	[0121.211] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0121.211] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0121.211] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.211] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263aa00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.211] CloseHandle (hObject=0x2fc) returned 1
	[0121.211] CloseHandle (hObject=0x340) returned 1
	[0121.212] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.213] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0121.215] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.215] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0121.215] SetEvent (hEvent=0x70) returned 1
	[0121.215] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0121.219] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1
	[0121.226] SetEvent (hEvent=0x30c) returned 1
	[0121.226] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760)) returned 1
	[0121.239] SetEvent (hEvent=0x320) returned 1
	[0121.240] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0)) returned 1
	[0121.252] SetEvent (hEvent=0x80) returned 1
	[0121.252] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200)) returned 1
	[0121.267] SetEvent (hEvent=0x30c) returned 1
	[0121.267] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80)) returned 1
	[0121.280] SetEvent (hEvent=0x320) returned 1
	[0121.280] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b)) returned 1
	[0121.291] SetEvent (hEvent=0x80) returned 1
	[0121.291] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676)) returned 1
	[0121.298] SetEvent (hEvent=0x30c) returned 1
	[0121.298] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0121.301] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0121.301] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0121.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.en-us", cAlternateFileName="ACCESS~1.EN-")) returned 1
	[0121.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0121.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUISet.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0121.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0121.308] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0121.308] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0121.309] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.310] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0121.310] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.310] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0121.310] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0121.312] CloseHandle (hObject=0x2cc) returned 1
	[0121.312] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0121.314] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0121.314] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0121.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfa2b92d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc0c6890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc0c6890, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.msi", cAlternateFileName="ACCESS~1.MSI")) returned 1
	[0121.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessMUI.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0121.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccLR.cab", cAlternateFileName="")) returned 1
	[0121.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0121.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0121.316] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0121.317] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.318] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0121.319] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.319] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0121.319] WriteFile (in: hFile=0x328, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0121.321] CloseHandle (hObject=0x328) returned 1
	[0121.322] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94)) returned 1
	[0121.323] SetEvent (hEvent=0x320) returned 1
	[0121.323] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00)) returned 1
	[0121.325] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.331] SetEvent (hEvent=0x80) returned 1
	[0121.331] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.335] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.336] SetEvent (hEvent=0x2e8) returned 1
	[0121.336] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.336] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.336] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545)) returned 1
	[0121.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0121.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0121.337] ReadFile (in: hFile=0x338, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x126e7d1c*=0x545, lpOverlapped=0x0) returned 1
	[0121.377] GetFileType (hFile=0x338) returned 0x1
	[0121.377] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.377] WriteFile (in: hFile=0x338, lpBuffer=0x12740000*, nNumberOfBytesToWrite=0x545, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12740000*, lpNumberOfBytesWritten=0x126e7d00*=0x545, lpOverlapped=0x126e7d0c) returned 1
	[0121.378] GetFileType (hFile=0x338) returned 0x1
	[0121.378] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x545, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.378] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0121.378] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0121.378] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0121.378] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0121.378] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0121.379] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.379] WriteFile (in: hFile=0x2fc, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.379] CloseHandle (hObject=0x2fc) returned 1
	[0121.379] CloseHandle (hObject=0x338) returned 1
	[0121.379] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.380] SetEvent (hEvent=0x2e8) returned 1
	[0121.380] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.381] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.381] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0121.381] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0121.381] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0121.381] ReadFile (in: hFile=0x338, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.406] GetFileType (hFile=0x338) returned 0x1
	[0121.407] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.407] WriteFile (in: hFile=0x338, lpBuffer=0x1270c000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x1270c000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0121.407] GetFileType (hFile=0x338) returned 0x1
	[0121.408] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.408] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0121.408] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0121.408] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0121.408] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0121.408] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.408] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.409] WriteFile (in: hFile=0x32c, lpBuffer=0x124b0500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b0500*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.435] CloseHandle (hObject=0x32c) returned 1
	[0121.435] CloseHandle (hObject=0x338) returned 1
	[0121.435] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.437] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.615] SetEvent (hEvent=0x2e8) returned 1
	[0121.615] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.619] SetEvent (hEvent=0x2e4) returned 1
	[0121.619] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0121.621] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0121.625] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0121.626] SetEvent (hEvent=0x2e8) returned 1
	[0121.626] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0121.631] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.631] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.631] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0121.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0121.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0121.631] ReadFile (in: hFile=0x338, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.651] GetFileType (hFile=0x338) returned 0x1
	[0121.651] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.651] WriteFile (in: hFile=0x338, lpBuffer=0x1270c000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x1270c000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0121.652] GetFileType (hFile=0x338) returned 0x1
	[0121.652] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.652] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0121.653] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0121.653] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0121.653] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0121.653] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.653] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.653] WriteFile (in: hFile=0x340, lpBuffer=0x127ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.669] CloseHandle (hObject=0x340) returned 1
	[0121.670] CloseHandle (hObject=0x338) returned 1
	[0121.677] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.709] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.745] SetEvent (hEvent=0x80) returned 1
	[0121.745] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.746] SetEvent (hEvent=0x80) returned 1
	[0121.746] SwitchToThread () returned 1
	[0121.747] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.748] SetEvent (hEvent=0x80) returned 1
	[0121.748] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.748] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0121.748] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0121.749] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0121.749] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0121.749] ReadFile (in: hFile=0x328, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.755] GetFileType (hFile=0x328) returned 0x1
	[0121.755] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.755] WriteFile (in: hFile=0x328, lpBuffer=0x1270c000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1270c000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0121.756] GetFileType (hFile=0x328) returned 0x1
	[0121.756] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0121.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0121.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0121.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0121.757] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.757] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0121.757] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.758] CloseHandle (hObject=0x340) returned 1
	[0121.758] CloseHandle (hObject=0x328) returned 1
	[0121.759] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.828] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.832] SetEvent (hEvent=0x80) returned 1
	[0121.833] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.833] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.833] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0121.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e280 | out: pbBuffer=0x1252e280) returned 1
	[0121.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0121.833] ReadFile (in: hFile=0x2cc, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.847] GetFileType (hFile=0x2cc) returned 0x1
	[0121.847] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.847] WriteFile (in: hFile=0x2cc, lpBuffer=0x1290a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1290a000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0121.848] GetFileType (hFile=0x2cc) returned 0x1
	[0121.848] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.848] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0121.848] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0121.848] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0121.849] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e6f0 | out: pbBuffer=0x1251e6f0) returned 1
	[0121.849] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.849] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.849] WriteFile (in: hFile=0x328, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.859] CloseHandle (hObject=0x328) returned 1
	[0121.860] CloseHandle (hObject=0x2cc) returned 1
	[0121.860] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.861] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.875] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.875] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.875] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0121.875] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e520 | out: pbBuffer=0x1252e520) returned 1
	[0121.876] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e708 | out: pbBuffer=0x1251e708) returned 1
	[0121.876] ReadFile (in: hFile=0x340, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x126e5d1c*=0x10b2, lpOverlapped=0x0) returned 1
	[0121.887] GetFileType (hFile=0x340) returned 0x1
	[0121.887] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.888] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x126e5d00*=0x10b2, lpOverlapped=0x126e5d0c) returned 1
	[0121.888] GetFileType (hFile=0x340) returned 0x1
	[0121.888] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x10b2, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.888] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0121.888] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0121.888] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0121.888] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e800 | out: pbBuffer=0x1251e800) returned 1
	[0121.889] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.889] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.889] WriteFile (in: hFile=0x32c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.889] CloseHandle (hObject=0x32c) returned 1
	[0121.894] CloseHandle (hObject=0x340) returned 1
	[0121.904] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.932] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.954] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0121.956] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.956] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0121.956] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0121.956] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0121.956] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0121.956] ReadFile (in: hFile=0x2cc, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.050] GetFileType (hFile=0x2cc) returned 0x1
	[0122.050] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.050] WriteFile (in: hFile=0x2cc, lpBuffer=0x12878000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12878000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0122.051] GetFileType (hFile=0x2cc) returned 0x1
	[0122.051] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0122.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0122.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0122.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410588 | out: pbBuffer=0x12410588) returned 1
	[0122.052] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.052] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0122.052] WriteFile (in: hFile=0x33c, lpBuffer=0x125fea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fea00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.052] CloseHandle (hObject=0x33c) returned 1
	[0122.052] CloseHandle (hObject=0x2cc) returned 1
	[0122.053] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.054] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0122.054] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.081] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0122.492] SetEvent (hEvent=0x318) returned 1
	[0122.492] SetEvent (hEvent=0x80) returned 1
	[0122.492] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0123.252] SetEvent (hEvent=0x2e4) returned 1
	[0123.252] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0123.257] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0123.327] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0123.328] SetEvent (hEvent=0x2e8) returned 1
	[0123.329] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0123.329] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0123.329] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1
	[0123.329] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0123.329] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0123.329] ReadFile (in: hFile=0x2fc, lpBuffer=0x1270c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x1270c000*, lpNumberOfBytesRead=0x126e9d1c*=0x627e, lpOverlapped=0x0) returned 1
	[0123.349] GetFileType (hFile=0x2fc) returned 0x1
	[0123.349] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.349] WriteFile (in: hFile=0x2fc, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x627e, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x126e9d00*=0x627e, lpOverlapped=0x126e9d0c) returned 1
	[0123.350] GetFileType (hFile=0x2fc) returned 0x1
	[0123.350] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x627e, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0123.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0123.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0123.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e890 | out: pbBuffer=0x1251e890) returned 1
	[0123.350] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.350] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0123.350] WriteFile (in: hFile=0x338, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.351] CloseHandle (hObject=0x338) returned 1
	[0123.351] CloseHandle (hObject=0x2fc) returned 1
	[0123.351] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.352] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1
	[0123.361] SetEvent (hEvent=0x2e8) returned 1
	[0123.361] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1
	[0123.369] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0123.380] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0123.384] SetEvent (hEvent=0x318) returned 1
	[0123.384] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.384] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0123.384] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1
	[0123.384] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0123.384] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0123.384] ReadFile (in: hFile=0x338, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x126e9d1c*=0x627e, lpOverlapped=0x0) returned 1
	[0123.404] SetEvent (hEvent=0xa0) returned 1
	[0123.404] GetFileType (hFile=0x338) returned 0x1
	[0123.404] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.405] WriteFile (in: hFile=0x338, lpBuffer=0x127d8a80*, nNumberOfBytesToWrite=0x627e, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x127d8a80*, lpNumberOfBytesWritten=0x126e9d00*=0x627e, lpOverlapped=0x126e9d0c) returned 1
	[0123.405] GetFileType (hFile=0x338) returned 0x1
	[0123.405] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x627e, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0123.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0123.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0123.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788220 | out: pbBuffer=0x12788220) returned 1
	[0123.405] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0123.406] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0123.406] WriteFile (in: hFile=0x2cc, lpBuffer=0x12770500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12770500*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.406] CloseHandle (hObject=0x2cc) returned 1
	[0123.406] CloseHandle (hObject=0x338) returned 1
	[0123.406] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.407] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0123.535] SetEvent (hEvent=0x80) returned 1
	[0123.535] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.535] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.535] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1
	[0123.535] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3a0 | out: pbBuffer=0x1240e3a0) returned 1
	[0123.535] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744028 | out: pbBuffer=0x12744028) returned 1
	[0123.535] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0123.536] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0123.536] SetEvent (hEvent=0x80) returned 1
	[0123.536] ReadFile (in: hFile=0x338, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x126e7d1c*=0x3960, lpOverlapped=0x0) returned 1
	[0123.619] SetEvent (hEvent=0xa0) returned 1
	[0123.619] GetFileType (hFile=0x338) returned 0x1
	[0123.619] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.619] WriteFile (in: hFile=0x338, lpBuffer=0x1248a000*, nNumberOfBytesToWrite=0x3960, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x1248a000*, lpNumberOfBytesWritten=0x126e7d00*=0x3960, lpOverlapped=0x126e7d0c) returned 1
	[0123.620] GetFileType (hFile=0x338) returned 0x1
	[0123.620] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x3960, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.620] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0123.620] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0123.620] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0123.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0123.621] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0123.621] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.621] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.621] CloseHandle (hObject=0x2fc) returned 1
	[0123.621] CloseHandle (hObject=0x338) returned 1
	[0123.622] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.622] SetEvent (hEvent=0x2e8) returned 1
	[0123.622] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.623] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.623] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960)) returned 1
	[0123.623] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322e0 | out: pbBuffer=0x127322e0) returned 1
	[0123.623] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0123.623] ReadFile (in: hFile=0x338, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0123.936] GetFileType (hFile=0x338) returned 0x1
	[0123.936] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.936] WriteFile (in: hFile=0x338, lpBuffer=0x12898000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12898000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0123.936] GetFileType (hFile=0x338) returned 0x1
	[0123.936] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0123.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0123.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0123.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127882b0 | out: pbBuffer=0x127882b0) returned 1
	[0123.937] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0123.937] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.937] WriteFile (in: hFile=0x2fc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.012] CloseHandle (hObject=0x2fc) returned 1
	[0124.135] CloseHandle (hObject=0x338) returned 1
	[0124.221] SetEvent (hEvent=0xa0) returned 1
	[0124.221] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.250] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.255] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.265] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.270] SetEvent (hEvent=0x318) returned 1
	[0124.270] SetEvent (hEvent=0x80) returned 1
	[0124.270] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0124.271] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.271] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0124.272] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0124.272] SetEvent (hEvent=0x318) returned 1
	[0124.272] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0124.273] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.273] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.478] SetEvent (hEvent=0x70) returned 1
	[0124.478] SetEvent (hEvent=0x30c) returned 1
	[0124.479] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.659] SetEvent (hEvent=0x80) returned 1
	[0124.659] SetEvent (hEvent=0x30c) returned 1
	[0124.660] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.663] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.715] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.738] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.746] SetEvent (hEvent=0x70) returned 1
	[0124.746] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.750] SetEvent (hEvent=0x80) returned 1
	[0124.750] SetEvent (hEvent=0x30c) returned 1
	[0124.750] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.870] SetEvent (hEvent=0x80) returned 1
	[0124.870] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.871] SetEvent (hEvent=0x80) returned 1
	[0124.871] SetEvent (hEvent=0x30c) returned 1
	[0124.872] GetFileType (hFile=0x338) returned 0x1
	[0124.872] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.873] WriteFile (in: hFile=0x338, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0124.873] GetFileType (hFile=0x338) returned 0x1
	[0124.874] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.874] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0124.874] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0124.874] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0124.874] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0124.875] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.875] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.875] WriteFile (in: hFile=0x32c, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.892] CloseHandle (hObject=0x32c) returned 1
	[0124.892] CloseHandle (hObject=0x338) returned 1
	[0124.892] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.894] GetFileType (hFile=0x33c) returned 0x1
	[0124.894] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.894] WriteFile (in: hFile=0x33c, lpBuffer=0x126b4000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x126b4000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0124.895] GetFileType (hFile=0x33c) returned 0x1
	[0124.895] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.895] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0124.895] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0124.895] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0124.895] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e890 | out: pbBuffer=0x1251e890) returned 1
	[0124.896] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.896] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.896] WriteFile (in: hFile=0x338, lpBuffer=0x1245aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245aa00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.914] CloseHandle (hObject=0x338) returned 1
	[0124.914] CloseHandle (hObject=0x33c) returned 1
	[0124.915] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.916] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.916] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.916] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360)) returned 1
	[0124.916] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f600 | out: pbBuffer=0x1240f600) returned 1
	[0124.916] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e8a8 | out: pbBuffer=0x1251e8a8) returned 1
	[0124.916] ReadFile (in: hFile=0x33c, lpBuffer=0x126ec000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ec000*, lpNumberOfBytesRead=0x124f5d1c*=0x4360, lpOverlapped=0x0) returned 1
	[0124.932] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0124.937] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.937] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0124.937] SetEvent (hEvent=0xa0) returned 1
	[0124.937] SetEvent (hEvent=0x30c) returned 1
	[0124.937] GetFileType (hFile=0x33c) returned 0x1
	[0124.937] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.938] WriteFile (in: hFile=0x33c, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x124f5d00*=0x4360, lpOverlapped=0x124f5d0c) returned 1
	[0124.938] GetFileType (hFile=0x33c) returned 0x1
	[0124.938] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4360, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0124.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0124.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0124.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e9e0 | out: pbBuffer=0x1251e9e0) returned 1
	[0124.939] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.939] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.939] WriteFile (in: hFile=0x32c, lpBuffer=0x1245af00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245af00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.940] CloseHandle (hObject=0x32c) returned 1
	[0124.940] CloseHandle (hObject=0x33c) returned 1
	[0124.941] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.942] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.942] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.942] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360)) returned 1
	[0124.942] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f820 | out: pbBuffer=0x1240f820) returned 1
	[0124.942] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ea18 | out: pbBuffer=0x1251ea18) returned 1
	[0124.943] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.948] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.953] SetEvent (hEvent=0x30c) returned 1
	[0124.953] GetFileType (hFile=0x33c) returned 0x1
	[0124.953] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.953] WriteFile (in: hFile=0x33c, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0124.954] GetFileType (hFile=0x33c) returned 0x1
	[0124.954] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0124.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0124.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0124.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104d0 | out: pbBuffer=0x124104d0) returned 1
	[0124.955] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.955] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.955] WriteFile (in: hFile=0x32c, lpBuffer=0x127e2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.955] CloseHandle (hObject=0x32c) returned 1
	[0124.956] CloseHandle (hObject=0x33c) returned 1
	[0124.956] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.957] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0124.957] SetEvent (hEvent=0x30c) returned 1
	[0124.957] SetEvent (hEvent=0x2e4) returned 1
	[0124.957] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60)) returned 1
	[0124.965] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960)) returned 1
	[0124.965] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.965] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.966] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60)) returned 1
	[0124.966] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0124.966] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0124.966] ReadFile (in: hFile=0x338, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0125.008] GetFileType (hFile=0x338) returned 0x1
	[0125.008] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.009] WriteFile (in: hFile=0x338, lpBuffer=0x12694000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12694000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0125.009] GetFileType (hFile=0x338) returned 0x1
	[0125.009] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0125.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0125.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0125.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440f0 | out: pbBuffer=0x127440f0) returned 1
	[0125.010] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.010] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.010] WriteFile (in: hFile=0x340, lpBuffer=0x12638000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12638000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.020] CloseHandle (hObject=0x340) returned 1
	[0125.020] CloseHandle (hObject=0x338) returned 1
	[0125.021] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.021] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.032] SetEvent (hEvent=0x30c) returned 1
	[0125.032] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.035] SetEvent (hEvent=0x2e4) returned 1
	[0125.036] SetEvent (hEvent=0x80) returned 1
	[0125.036] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.043] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.050] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.153] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.194] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.214] SetEvent (hEvent=0x2e4) returned 1
	[0125.214] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.214] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.214] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.215] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp\\*", lpFindFileData=0x126e5a44 | out: lpFindFileData=0x126e5a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.215] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.215] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.215] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.215] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.215] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.221] SetEvent (hEvent=0x2e4) returned 1
	[0125.221] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.221] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.221] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.221] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp\\*", lpFindFileData=0x126e5a44 | out: lpFindFileData=0x126e5a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.222] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.222] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.222] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.222] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.222] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.227] SetEvent (hEvent=0x2e4) returned 1
	[0125.227] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.227] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.227] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.228] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp\\*", lpFindFileData=0x126e5a44 | out: lpFindFileData=0x126e5a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.228] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.228] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.228] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.228] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.228] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.242] SetEvent (hEvent=0x2e4) returned 1
	[0125.242] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.242] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.242] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.242] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.242] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0125.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410370 | out: pbBuffer=0x12410370) returned 1
	[0125.243] ReadFile (in: hFile=0x338, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x124f3d1c*=0xc038, lpOverlapped=0x0) returned 1
	[0125.251] GetFileType (hFile=0x338) returned 0x1
	[0125.251] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.251] WriteFile (in: hFile=0x338, lpBuffer=0x12586000*, nNumberOfBytesToWrite=0xc038, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12586000*, lpNumberOfBytesWritten=0x124f3d00*=0xc038, lpOverlapped=0x124f3d0c) returned 1
	[0125.251] GetFileType (hFile=0x338) returned 0x1
	[0125.251] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xc038, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.251] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0125.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0125.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0125.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410428 | out: pbBuffer=0x12410428) returned 1
	[0125.252] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.252] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.252] WriteFile (in: hFile=0x2cc, lpBuffer=0x125b0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125b0000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.252] CloseHandle (hObject=0x2cc) returned 1
	[0125.253] CloseHandle (hObject=0x338) returned 1
	[0125.253] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.253] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.308] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.315] SetEvent (hEvent=0x2e8) returned 1
	[0125.315] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.315] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.315] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0125.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0125.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0125.315] ReadFile (in: hFile=0x338, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0x15e, lpOverlapped=0x0) returned 1
	[0125.317] GetFileType (hFile=0x338) returned 0x1
	[0125.317] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.317] WriteFile (in: hFile=0x338, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x12429d00*=0x15e, lpOverlapped=0x12429d0c) returned 1
	[0125.317] GetFileType (hFile=0x338) returned 0x1
	[0125.317] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x15e, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0125.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0125.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0125.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0125.318] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.318] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.318] WriteFile (in: hFile=0x2cc, lpBuffer=0x12638000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12638000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.318] CloseHandle (hObject=0x2cc) returned 1
	[0125.319] CloseHandle (hObject=0x338) returned 1
	[0125.320] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.339] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.340] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.340] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.340] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1
	[0125.341] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0125.341] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0125.341] ReadFile (in: hFile=0x338, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f3d1c*=0x158, lpOverlapped=0x0) returned 1
	[0125.343] GetFileType (hFile=0x338) returned 0x1
	[0125.343] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.343] WriteFile (in: hFile=0x338, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x124f3d00*=0x158, lpOverlapped=0x124f3d0c) returned 1
	[0125.343] GetFileType (hFile=0x338) returned 0x1
	[0125.343] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.343] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0125.343] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0125.343] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0125.344] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0125.344] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.344] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.344] WriteFile (in: hFile=0x340, lpBuffer=0x127d2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d2000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.344] CloseHandle (hObject=0x340) returned 1
	[0125.345] CloseHandle (hObject=0x338) returned 1
	[0125.345] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.362] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.364] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.364] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.364] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1
	[0125.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0125.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0125.365] ReadFile (in: hFile=0x2cc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f5d1c*=0x170, lpOverlapped=0x0) returned 1
	[0125.366] GetFileType (hFile=0x2cc) returned 0x1
	[0125.366] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.366] WriteFile (in: hFile=0x2cc, lpBuffer=0x1272a000*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1272a000*, lpNumberOfBytesWritten=0x124f5d00*=0x170, lpOverlapped=0x124f5d0c) returned 1
	[0125.367] GetFileType (hFile=0x2cc) returned 0x1
	[0125.367] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0125.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0125.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0125.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441b0 | out: pbBuffer=0x127441b0) returned 1
	[0125.367] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.368] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.368] WriteFile (in: hFile=0x340, lpBuffer=0x127d2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d2500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.368] CloseHandle (hObject=0x340) returned 1
	[0125.369] CloseHandle (hObject=0x2cc) returned 1
	[0125.369] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.388] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.389] SetEvent (hEvent=0x318) returned 1
	[0125.389] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.389] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.389] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0125.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0125.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0125.390] ReadFile (in: hFile=0x2cc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f1d1c*=0x15e, lpOverlapped=0x0) returned 1
	[0125.391] GetFileType (hFile=0x2cc) returned 0x1
	[0125.391] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.392] WriteFile (in: hFile=0x2cc, lpBuffer=0x1247c580*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1247c580*, lpNumberOfBytesWritten=0x124f1d00*=0x15e, lpOverlapped=0x124f1d0c) returned 1
	[0125.392] GetFileType (hFile=0x2cc) returned 0x1
	[0125.392] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x15e, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0125.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0125.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0125.393] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0125.393] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.393] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.393] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.393] CloseHandle (hObject=0x340) returned 1
	[0125.394] CloseHandle (hObject=0x2cc) returned 1
	[0125.395] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.454] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.456] SetEvent (hEvent=0x318) returned 1
	[0125.456] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.456] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.456] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0125.456] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0125.456] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0125.456] ReadFile (in: hFile=0x338, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0x152, lpOverlapped=0x0) returned 1
	[0125.458] GetFileType (hFile=0x338) returned 0x1
	[0125.458] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.458] WriteFile (in: hFile=0x338, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x12429d00*=0x152, lpOverlapped=0x12429d0c) returned 1
	[0125.458] GetFileType (hFile=0x338) returned 0x1
	[0125.459] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x152, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0125.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0125.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0125.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0125.459] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.459] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.460] WriteFile (in: hFile=0x340, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.460] CloseHandle (hObject=0x340) returned 1
	[0125.461] CloseHandle (hObject=0x338) returned 1
	[0125.461] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.475] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.481] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.495] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.510] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.523] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.526] SetEvent (hEvent=0x2e8) returned 1
	[0125.526] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.534] SetEvent (hEvent=0x70) returned 1
	[0125.534] SetEvent (hEvent=0x80) returned 1
	[0125.534] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0125.540] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.540] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0125.542] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0125.542] SetEvent (hEvent=0x30c) returned 1
	[0125.542] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0125.544] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0125.544] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0128.559] SetEvent (hEvent=0x30c) returned 1
	[0128.559] SetEvent (hEvent=0x318) returned 1
	[0128.559] SetEvent (hEvent=0x2e4) returned 1
	[0128.559] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0128.630] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0128.814] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0128.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0128.817] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1
	[0128.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732420 | out: pbBuffer=0x12732420) returned 1
	[0128.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0128.817] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f3d1c*=0x1400, lpOverlapped=0x0) returned 1
	[0128.828] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0128.851] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0128.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0128.883] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0128.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0)) returned 1
	[0128.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0128.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0128.884] ReadFile (in: hFile=0x338, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1242bd1c*=0x102a0, lpOverlapped=0x0) returned 1
	[0128.900] GetFileType (hFile=0x338) returned 0x1
	[0128.900] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.900] WriteFile (in: hFile=0x338, lpBuffer=0x127d4000*, nNumberOfBytesToWrite=0x102a0, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127d4000*, lpNumberOfBytesWritten=0x1242bd00*=0x102a0, lpOverlapped=0x1242bd0c) returned 1
	[0128.900] GetFileType (hFile=0x338) returned 0x1
	[0128.900] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x102a0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.900] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0128.901] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0128.901] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0128.901] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103e0 | out: pbBuffer=0x124103e0) returned 1
	[0128.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0128.901] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0128.901] WriteFile (in: hFile=0x33c, lpBuffer=0x124b2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x124b2000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.901] CloseHandle (hObject=0x33c) returned 1
	[0128.905] CloseHandle (hObject=0x338) returned 1
	[0128.931] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1
	[0128.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1
	[0128.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.990] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms", cAlternateFileName="CLICEX~1.CDF")) returned 1
	[0129.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest", cAlternateFileName="CLICEX~1.MAN")) returned 1
	[0129.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms", cAlternateFileName="GOOGAP~1.CDF")) returned 1
	[0129.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest", cAlternateFileName="GOOGAP~1.MAN")) returned 1
	[0129.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.002] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.005] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0129.005] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0129.007] CloseHandle (hObject=0x32c) returned 1
	[0129.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3bbf54b0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x4546)) returned 1
	[0129.007] SetEvent (hEvent=0x2e8) returned 1
	[0129.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3bbcf350, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x37c1)) returned 1
	[0129.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0)) returned 1
	[0129.021] SetEvent (hEvent=0x2e8) returned 1
	[0129.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30)) returned 1
	[0129.027] SetEvent (hEvent=0x2e4) returned 1
	[0129.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.027] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.027] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.027] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.028] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CJW3O3KP.BX7", cAlternateFileName="")) returned 1
	[0129.028] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.028] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.028] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0129.028] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0129.030] CloseHandle (hObject=0x340) returned 1
	[0129.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.030] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.030] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.031] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6NG60CXZ.9GJ", cAlternateFileName="")) returned 1
	[0129.031] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.031] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.031] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0129.031] WriteFile (in: hFile=0x340, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0129.033] CloseHandle (hObject=0x340) returned 1
	[0129.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.034] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.034] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1
	[0129.034] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.034] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.035] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0129.035] WriteFile (in: hFile=0x340, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0129.036] CloseHandle (hObject=0x340) returned 1
	[0129.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.040] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.040] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
	[0129.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.041] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.041] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.041] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.041] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0129.042] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0129.043] CloseHandle (hObject=0x340) returned 1
	[0129.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.043] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.044] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a3a0420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.044] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.044] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\Data\\CJW3O3KP.BX7\\6NG60CXZ.9GJ\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\Data\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\data\\cjw3o3kp.bx7\\6ng60cxz.9gj\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\data\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.044] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0129.044] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0129.046] CloseHandle (hObject=0x340) returned 1
	[0129.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.047] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.047] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.047] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.047] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Deployment\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\deployment\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.048] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0129.048] WriteFile (in: hFile=0x340, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0129.050] CloseHandle (hObject=0x340) returned 1
	[0129.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918)) returned 1
	[0129.051] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.062] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.105] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.109] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.155] SetEvent (hEvent=0x2e4) returned 1
	[0129.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.155] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1
	[0129.155] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0129.155] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788028 | out: pbBuffer=0x12788028) returned 1
	[0129.155] ReadFile (in: hFile=0x340, lpBuffer=0x126ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ba000*, lpNumberOfBytesRead=0x124f5d1c*=0xb000, lpOverlapped=0x0) returned 1
	[0129.178] GetFileType (hFile=0x340) returned 0x1
	[0129.178] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.178] WriteFile (in: hFile=0x340, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0xb000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x124f5d00*=0xb000, lpOverlapped=0x124f5d0c) returned 1
	[0129.178] GetFileType (hFile=0x340) returned 0x1
	[0129.178] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xb000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.178] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0129.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0129.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0129.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880e0 | out: pbBuffer=0x127880e0) returned 1
	[0129.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0129.179] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.179] WriteFile (in: hFile=0x2cc, lpBuffer=0x12980000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12980000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.180] CloseHandle (hObject=0x2cc) returned 1
	[0129.180] CloseHandle (hObject=0x340) returned 1
	[0129.180] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.181] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1
	[0129.181] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0129.181] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0129.182] ReadFile (in: hFile=0x340, lpBuffer=0x126da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126da000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0129.248] GetFileType (hFile=0x340) returned 0x1
	[0129.248] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.248] WriteFile (in: hFile=0x340, lpBuffer=0x12928000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12928000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0129.249] GetFileType (hFile=0x340) returned 0x1
	[0129.249] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.249] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434501 | out: pbBuffer=0x12434501) returned 1
	[0129.249] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434601 | out: pbBuffer=0x12434601) returned 1
	[0129.249] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434701 | out: pbBuffer=0x12434701) returned 1
	[0129.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445b0 | out: pbBuffer=0x127445b0) returned 1
	[0129.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0129.250] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.250] WriteFile (in: hFile=0x328, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.253] CloseHandle (hObject=0x328) returned 1
	[0129.253] CloseHandle (hObject=0x340) returned 1
	[0129.253] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.254] SetEvent (hEvent=0x80) returned 1
	[0129.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.254] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1
	[0129.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244ca20 | out: pbBuffer=0x1244ca20) returned 1
	[0129.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127445d8 | out: pbBuffer=0x127445d8) returned 1
	[0129.254] ReadFile (in: hFile=0x340, lpBuffer=0x12948000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12948000*, lpNumberOfBytesRead=0x124f5d1c*=0x1c00, lpOverlapped=0x0) returned 1
	[0129.268] GetFileType (hFile=0x340) returned 0x1
	[0129.268] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.268] WriteFile (in: hFile=0x340, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x124f5d00*=0x1c00, lpOverlapped=0x124f5d0c) returned 1
	[0129.269] GetFileType (hFile=0x340) returned 0x1
	[0129.269] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x1c00, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0129.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434901 | out: pbBuffer=0x12434901) returned 1
	[0129.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0129.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744690 | out: pbBuffer=0x12744690) returned 1
	[0129.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0129.270] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.270] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.270] CloseHandle (hObject=0x2cc) returned 1
	[0129.270] CloseHandle (hObject=0x340) returned 1
	[0129.270] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.334] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126)) returned 1
	[0129.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cc60 | out: pbBuffer=0x1244cc60) returned 1
	[0129.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446a8 | out: pbBuffer=0x127446a8) returned 1
	[0129.334] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0129.334] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0129.335] SetEvent (hEvent=0x318) returned 1
	[0129.335] ReadFile (in: hFile=0x338, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f1d1c*=0x126, lpOverlapped=0x0) returned 1
	[0129.336] GetFileType (hFile=0x338) returned 0x1
	[0129.336] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.336] WriteFile (in: hFile=0x338, lpBuffer=0x127ea280*, nNumberOfBytesToWrite=0x126, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127ea280*, lpNumberOfBytesWritten=0x124f1d00*=0x126, lpOverlapped=0x124f1d0c) returned 1
	[0129.336] GetFileType (hFile=0x338) returned 0x1
	[0129.336] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x126, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0129.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0129.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d01 | out: pbBuffer=0x12434d01) returned 1
	[0129.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744760 | out: pbBuffer=0x12744760) returned 1
	[0129.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.337] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.337] WriteFile (in: hFile=0x340, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.338] CloseHandle (hObject=0x340) returned 1
	[0129.339] CloseHandle (hObject=0x338) returned 1
	[0129.340] SwitchToThread () returned 1
	[0129.340] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.352] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1
	[0129.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0129.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744180 | out: pbBuffer=0x12744180) returned 1
	[0129.353] ReadFile (in: hFile=0x338, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12429d1c*=0x156, lpOverlapped=0x0) returned 1
	[0129.354] GetFileType (hFile=0x338) returned 0x1
	[0129.354] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.354] WriteFile (in: hFile=0x338, lpBuffer=0x1247c6e0*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1247c6e0*, lpNumberOfBytesWritten=0x12429d00*=0x156, lpOverlapped=0x12429d0c) returned 1
	[0129.355] GetFileType (hFile=0x338) returned 0x1
	[0129.355] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x156, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0129.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0129.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0129.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744388 | out: pbBuffer=0x12744388) returned 1
	[0129.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.355] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.356] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.356] CloseHandle (hObject=0x340) returned 1
	[0129.356] CloseHandle (hObject=0x338) returned 1
	[0129.356] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.367] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.379] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.388] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.409] SetEvent (hEvent=0x2e4) returned 1
	[0129.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.410] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0129.410] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6c0 | out: pbBuffer=0x1244c6c0) returned 1
	[0129.410] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a0 | out: pbBuffer=0x127443a0) returned 1
	[0129.410] ReadFile (in: hFile=0x340, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f5d1c*=0x10, lpOverlapped=0x0) returned 1
	[0129.411] GetFileType (hFile=0x340) returned 0x1
	[0129.411] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.411] WriteFile (in: hFile=0x340, lpBuffer=0x127443b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127443b0*, lpNumberOfBytesWritten=0x124f5d00*=0x10, lpOverlapped=0x124f5d0c) returned 1
	[0129.412] GetFileType (hFile=0x340) returned 0x1
	[0129.412] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.412] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0129.412] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0129.412] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0129.412] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744528 | out: pbBuffer=0x12744528) returned 1
	[0129.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.413] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.413] WriteFile (in: hFile=0x338, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.413] CloseHandle (hObject=0x338) returned 1
	[0129.413] CloseHandle (hObject=0x340) returned 1
	[0129.413] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.420] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.471] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.474] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.485] SetEvent (hEvent=0x2e4) returned 1
	[0129.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.486] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1
	[0129.486] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0129.486] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0129.486] ReadFile (in: hFile=0x32c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f1d1c*=0x110, lpOverlapped=0x0) returned 1
	[0129.488] GetFileType (hFile=0x32c) returned 0x1
	[0129.488] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.488] WriteFile (in: hFile=0x32c, lpBuffer=0x1271a000*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1271a000*, lpNumberOfBytesWritten=0x124f1d00*=0x110, lpOverlapped=0x124f1d0c) returned 1
	[0129.488] GetFileType (hFile=0x32c) returned 0x1
	[0129.488] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0129.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0129.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0129.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0129.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.489] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.489] WriteFile (in: hFile=0x338, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.490] CloseHandle (hObject=0x338) returned 1
	[0129.490] CloseHandle (hObject=0x32c) returned 1
	[0129.490] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.492] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0129.492] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0129.492] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0129.492] ReadFile (in: hFile=0x32c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f3d1c*=0xe0, lpOverlapped=0x0) returned 1
	[0129.494] GetFileType (hFile=0x32c) returned 0x1
	[0129.494] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.494] WriteFile (in: hFile=0x32c, lpBuffer=0x124622a0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124622a0*, lpNumberOfBytesWritten=0x124f3d00*=0xe0, lpOverlapped=0x124f3d0c) returned 1
	[0129.494] GetFileType (hFile=0x32c) returned 0x1
	[0129.494] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0129.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0129.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0129.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0129.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.495] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.495] WriteFile (in: hFile=0x338, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.496] CloseHandle (hObject=0x338) returned 1
	[0129.496] CloseHandle (hObject=0x32c) returned 1
	[0129.496] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.497] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.519] SetEvent (hEvent=0x2e4) returned 1
	[0129.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.519] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1
	[0129.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0129.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744548 | out: pbBuffer=0x12744548) returned 1
	[0129.519] ReadFile (in: hFile=0x32c, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x124f1d1c*=0xea, lpOverlapped=0x0) returned 1
	[0129.521] GetFileType (hFile=0x32c) returned 0x1
	[0129.521] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.521] WriteFile (in: hFile=0x32c, lpBuffer=0x125fa000*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x125fa000*, lpNumberOfBytesWritten=0x124f1d00*=0xea, lpOverlapped=0x124f1d0c) returned 1
	[0129.521] GetFileType (hFile=0x32c) returned 0x1
	[0129.521] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xea, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.521] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0129.521] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0129.521] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0129.522] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744600 | out: pbBuffer=0x12744600) returned 1
	[0129.522] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.522] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.522] WriteFile (in: hFile=0x338, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.522] CloseHandle (hObject=0x338) returned 1
	[0129.522] CloseHandle (hObject=0x32c) returned 1
	[0129.522] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.523] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.524] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1
	[0129.524] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732760 | out: pbBuffer=0x12732760) returned 1
	[0129.524] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744618 | out: pbBuffer=0x12744618) returned 1
	[0129.524] ReadFile (in: hFile=0x32c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f3d1c*=0x112, lpOverlapped=0x0) returned 1
	[0129.526] GetFileType (hFile=0x32c) returned 0x1
	[0129.526] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.526] WriteFile (in: hFile=0x32c, lpBuffer=0x124ef8c0*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124ef8c0*, lpNumberOfBytesWritten=0x124f3d00*=0x112, lpOverlapped=0x124f3d0c) returned 1
	[0129.527] GetFileType (hFile=0x32c) returned 0x1
	[0129.527] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.527] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0129.527] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0129.527] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0129.527] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446d0 | out: pbBuffer=0x127446d0) returned 1
	[0129.527] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.527] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.527] WriteFile (in: hFile=0x338, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.528] CloseHandle (hObject=0x338) returned 1
	[0129.528] CloseHandle (hObject=0x32c) returned 1
	[0129.528] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.529] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.543] SetEvent (hEvent=0x2e8) returned 1
	[0129.543] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.543] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0129.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732980 | out: pbBuffer=0x12732980) returned 1
	[0129.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446e8 | out: pbBuffer=0x127446e8) returned 1
	[0129.544] ReadFile (in: hFile=0x340, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f5d1c*=0xd7, lpOverlapped=0x0) returned 1
	[0129.545] GetFileType (hFile=0x340) returned 0x1
	[0129.545] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.545] WriteFile (in: hFile=0x340, lpBuffer=0x12462e00*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12462e00*, lpNumberOfBytesWritten=0x124f5d00*=0xd7, lpOverlapped=0x124f5d0c) returned 1
	[0129.548] GetFileType (hFile=0x340) returned 0x1
	[0129.548] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xd7, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0129.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0129.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e81 | out: pbBuffer=0x127e8e81) returned 1
	[0129.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127447a0 | out: pbBuffer=0x127447a0) returned 1
	[0129.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.549] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.549] WriteFile (in: hFile=0x338, lpBuffer=0x127de000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127de000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.551] CloseHandle (hObject=0x338) returned 1
	[0129.551] CloseHandle (hObject=0x340) returned 1
	[0129.554] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.560] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.563] SetEvent (hEvent=0x2e8) returned 1
	[0129.563] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.568] SetEvent (hEvent=0x2e8) returned 1
	[0129.568] SetEvent (hEvent=0x2e4) returned 1
	[0129.568] SetEvent (hEvent=0x70) returned 1
	[0129.568] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.679] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.689] SetEvent (hEvent=0x2e4) returned 1
	[0129.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.689] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0129.689] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0129.689] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0129.690] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0129.690] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0129.690] SetEvent (hEvent=0xa0) returned 1
	[0129.691] SetEvent (hEvent=0x2e4) returned 1
	[0129.691] SetEvent (hEvent=0x2e8) returned 1
	[0129.691] ReadFile (in: hFile=0x2fc, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x1242bd1c*=0xe6, lpOverlapped=0x0) returned 1
	[0129.693] GetFileType (hFile=0x2fc) returned 0x1
	[0129.693] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.693] WriteFile (in: hFile=0x2fc, lpBuffer=0x1298e000*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1298e000*, lpNumberOfBytesWritten=0x1242bd00*=0xe6, lpOverlapped=0x1242bd0c) returned 1
	[0129.693] GetFileType (hFile=0x2fc) returned 0x1
	[0129.693] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xe6, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0129.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0129.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0129.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0129.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.694] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.694] WriteFile (in: hFile=0x340, lpBuffer=0x128da000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128da000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.695] CloseHandle (hObject=0x340) returned 1
	[0129.695] CloseHandle (hObject=0x2fc) returned 1
	[0129.695] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.697] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0129.726] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0129.726] SetEvent (hEvent=0x70) returned 1
	[0129.726] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0129.776] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.777] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1
	[0129.777] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0129.777] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0129.777] ReadFile (in: hFile=0x2fc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1242bd1c*=0xe9, lpOverlapped=0x0) returned 1
	[0129.779] GetFileType (hFile=0x2fc) returned 0x1
	[0129.779] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.779] WriteFile (in: hFile=0x2fc, lpBuffer=0x124fa000*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124fa000*, lpNumberOfBytesWritten=0x1242bd00*=0xe9, lpOverlapped=0x1242bd0c) returned 1
	[0129.779] GetFileType (hFile=0x2fc) returned 0x1
	[0129.779] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xe9, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.779] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0129.780] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0129.780] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0129.780] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0129.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.780] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.780] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.781] CloseHandle (hObject=0x340) returned 1
	[0129.781] CloseHandle (hObject=0x2fc) returned 1
	[0129.781] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.782] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0129.782] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0129.782] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0129.782] ReadFile (in: hFile=0x2fc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0xd2, lpOverlapped=0x0) returned 1
	[0129.784] GetFileType (hFile=0x2fc) returned 0x1
	[0129.784] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.784] WriteFile (in: hFile=0x2fc, lpBuffer=0x1262e2a0*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1262e2a0*, lpNumberOfBytesWritten=0x12429d00*=0xd2, lpOverlapped=0x12429d0c) returned 1
	[0129.784] GetFileType (hFile=0x2fc) returned 0x1
	[0129.784] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd2, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.784] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0129.784] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0129.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0129.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0129.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.785] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.785] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.785] CloseHandle (hObject=0x340) returned 1
	[0129.785] CloseHandle (hObject=0x2fc) returned 1
	[0129.786] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.786] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.818] SetEvent (hEvent=0x2e8) returned 1
	[0129.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.818] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0129.819] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0129.819] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0129.819] ReadFile (in: hFile=0x340, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1242bd1c*=0xd9, lpOverlapped=0x0) returned 1
	[0129.820] GetFileType (hFile=0x340) returned 0x1
	[0129.820] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.820] WriteFile (in: hFile=0x340, lpBuffer=0x1262e620*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1262e620*, lpNumberOfBytesWritten=0x1242bd00*=0xd9, lpOverlapped=0x1242bd0c) returned 1
	[0129.820] GetFileType (hFile=0x340) returned 0x1
	[0129.820] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xd9, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.821] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0129.821] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0129.821] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0129.821] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0129.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.821] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.821] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.822] CloseHandle (hObject=0x33c) returned 1
	[0129.822] CloseHandle (hObject=0x340) returned 1
	[0129.822] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.822] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.852] SetEvent (hEvent=0x2e8) returned 1
	[0129.852] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.852] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0129.852] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732760 | out: pbBuffer=0x12732760) returned 1
	[0129.852] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0129.852] ReadFile (in: hFile=0x2fc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f1d1c*=0xe0, lpOverlapped=0x0) returned 1
	[0129.854] GetFileType (hFile=0x2fc) returned 0x1
	[0129.854] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.854] WriteFile (in: hFile=0x2fc, lpBuffer=0x1262e9a0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1262e9a0*, lpNumberOfBytesWritten=0x124f1d00*=0xe0, lpOverlapped=0x124f1d0c) returned 1
	[0129.854] GetFileType (hFile=0x2fc) returned 0x1
	[0129.854] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.854] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0129.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0129.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0129.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106f0 | out: pbBuffer=0x124106f0) returned 1
	[0129.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.855] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.855] WriteFile (in: hFile=0x340, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.856] CloseHandle (hObject=0x340) returned 1
	[0129.856] CloseHandle (hObject=0x2fc) returned 1
	[0129.856] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.857] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x128e7d0c | out: lpMode=0x128e7d0c) returned 0
	[0129.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x128e7ad0 | out: lpFileInformation=0x128e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0129.857] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732980 | out: pbBuffer=0x12732980) returned 1
	[0129.857] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410718 | out: pbBuffer=0x12410718) returned 1
	[0129.857] ReadFile (in: hFile=0x2fc, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x128e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x128e7d1c*=0xde, lpOverlapped=0x0) returned 1
	[0129.859] GetFileType (hFile=0x2fc) returned 0x1
	[0129.859] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x128e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.859] WriteFile (in: hFile=0x2fc, lpBuffer=0x1262eb60*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x128e7d00, lpOverlapped=0x128e7d0c | out: lpBuffer=0x1262eb60*, lpNumberOfBytesWritten=0x128e7d00*=0xde, lpOverlapped=0x128e7d0c) returned 1
	[0129.859] GetFileType (hFile=0x2fc) returned 0x1
	[0129.859] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xde, lpNewFilePointer=0x0, dwMoveMethod=0x128e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0129.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0129.860] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e81 | out: pbBuffer=0x127e8e81) returned 1
	[0129.860] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410bd0 | out: pbBuffer=0x12410bd0) returned 1
	[0129.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.860] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x128e7d0c | out: lpMode=0x128e7d0c) returned 0
	[0129.860] WriteFile (in: hFile=0x340, lpBuffer=0x1276c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x128e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x1276c000*, lpNumberOfBytesWritten=0x128e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.860] CloseHandle (hObject=0x340) returned 1
	[0129.860] CloseHandle (hObject=0x2fc) returned 1
	[0129.861] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.862] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.902] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.918] SetEvent (hEvent=0x2e4) returned 1
	[0129.919] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.922] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1
	[0129.922] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732ba0 | out: pbBuffer=0x12732ba0) returned 1
	[0129.922] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410be8 | out: pbBuffer=0x12410be8) returned 1
	[0129.922] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0129.922] SetEvent (hEvent=0x2e4) returned 1
	[0129.923] ReadFile (in: hFile=0x2fc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0xe3, lpOverlapped=0x0) returned 1
	[0129.925] GetFileType (hFile=0x2fc) returned 0x1
	[0129.926] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.926] WriteFile (in: hFile=0x2fc, lpBuffer=0x124fa2d0*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124fa2d0*, lpNumberOfBytesWritten=0x12429d00*=0xe3, lpOverlapped=0x12429d0c) returned 1
	[0129.929] GetFileType (hFile=0x2fc) returned 0x1
	[0129.929] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xe3, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.930] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0129.930] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0129.931] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0129.931] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0129.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.932] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.932] WriteFile (in: hFile=0x33c, lpBuffer=0x1298a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1298a000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.933] CloseHandle (hObject=0x33c) returned 1
	[0129.933] CloseHandle (hObject=0x2fc) returned 1
	[0129.936] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.942] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.948] SetEvent (hEvent=0x2e8) returned 1
	[0129.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.948] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0129.948] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0129.949] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0129.949] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f3d1c*=0x104, lpOverlapped=0x0) returned 1
	[0129.950] GetFileType (hFile=0x33c) returned 0x1
	[0129.950] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.950] WriteFile (in: hFile=0x33c, lpBuffer=0x12515680*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12515680*, lpNumberOfBytesWritten=0x124f3d00*=0x104, lpOverlapped=0x124f3d0c) returned 1
	[0129.953] GetFileType (hFile=0x33c) returned 0x1
	[0129.953] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0129.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0129.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0129.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0129.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.954] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.954] WriteFile (in: hFile=0x340, lpBuffer=0x1298a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1298a500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.955] CloseHandle (hObject=0x340) returned 1
	[0129.955] CloseHandle (hObject=0x33c) returned 1
	[0129.957] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.964] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.969] SetEvent (hEvent=0x2e8) returned 1
	[0129.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.969] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0129.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732520 | out: pbBuffer=0x12732520) returned 1
	[0129.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0129.970] ReadFile (in: hFile=0x340, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x104, lpOverlapped=0x0) returned 1
	[0129.971] GetFileType (hFile=0x340) returned 0x1
	[0129.971] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.971] WriteFile (in: hFile=0x340, lpBuffer=0x124b25a0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124b25a0*, lpNumberOfBytesWritten=0x12429d00*=0x104, lpOverlapped=0x12429d0c) returned 1
	[0129.974] GetFileType (hFile=0x340) returned 0x1
	[0129.974] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.974] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0129.974] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0129.974] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0129.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0129.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.975] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.975] WriteFile (in: hFile=0x2fc, lpBuffer=0x1298aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1298aa00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.976] CloseHandle (hObject=0x2fc) returned 1
	[0129.977] CloseHandle (hObject=0x340) returned 1
	[0129.979] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.985] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0129.992] SetEvent (hEvent=0x2e8) returned 1
	[0129.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.992] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e)) returned 1
	[0129.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732740 | out: pbBuffer=0x12732740) returned 1
	[0129.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0129.993] ReadFile (in: hFile=0x2fc, lpBuffer=0x1291e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1291e000*, lpNumberOfBytesRead=0x124f3d1c*=0x10e, lpOverlapped=0x0) returned 1
	[0129.994] GetFileType (hFile=0x2fc) returned 0x1
	[0129.994] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.994] WriteFile (in: hFile=0x2fc, lpBuffer=0x124b3440*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124b3440*, lpNumberOfBytesWritten=0x124f3d00*=0x10e, lpOverlapped=0x124f3d0c) returned 1
	[0129.997] GetFileType (hFile=0x2fc) returned 0x1
	[0129.997] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x10e, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.997] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0129.997] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0129.997] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0129.998] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106f0 | out: pbBuffer=0x124106f0) returned 1
	[0129.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.998] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.998] WriteFile (in: hFile=0x33c, lpBuffer=0x1298af00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1298af00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.000] CloseHandle (hObject=0x33c) returned 1
	[0130.000] CloseHandle (hObject=0x2fc) returned 1
	[0130.002] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.008] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.014] SetEvent (hEvent=0x2e8) returned 1
	[0130.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.014] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0130.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0130.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732960 | out: pbBuffer=0x12732960) returned 1
	[0130.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410718 | out: pbBuffer=0x12410718) returned 1
	[0130.014] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12429d1c*=0xd7, lpOverlapped=0x0) returned 1
	[0130.016] GetFileType (hFile=0x33c) returned 0x1
	[0130.016] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.016] WriteFile (in: hFile=0x33c, lpBuffer=0x12534a80*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12534a80*, lpNumberOfBytesWritten=0x12429d00*=0xd7, lpOverlapped=0x12429d0c) returned 1
	[0130.018] GetFileType (hFile=0x33c) returned 0x1
	[0130.019] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd7, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.019] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0130.019] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0130.019] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e81 | out: pbBuffer=0x127e8e81) returned 1
	[0130.019] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410bd0 | out: pbBuffer=0x12410bd0) returned 1
	[0130.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.019] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0130.019] WriteFile (in: hFile=0x340, lpBuffer=0x1298b400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1298b400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.021] CloseHandle (hObject=0x340) returned 1
	[0130.021] CloseHandle (hObject=0x33c) returned 1
	[0130.023] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.030] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.041] SetEvent (hEvent=0x2e8) returned 1
	[0130.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.042] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85d166b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1
	[0130.042] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732b80 | out: pbBuffer=0x12732b80) returned 1
	[0130.042] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410bf8 | out: pbBuffer=0x12410bf8) returned 1
	[0130.042] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0130.043] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.043] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0130.043] SetEvent (hEvent=0xa0) returned 1
	[0130.043] SetEvent (hEvent=0x2e8) returned 1
	[0130.043] SetEvent (hEvent=0x80) returned 1
	[0130.044] ReadFile (in: hFile=0x340, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0x160, lpOverlapped=0x0) returned 1
	[0130.045] GetFileType (hFile=0x340) returned 0x1
	[0130.045] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.046] WriteFile (in: hFile=0x340, lpBuffer=0x125fa000*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125fa000*, lpNumberOfBytesWritten=0x124f3d00*=0x160, lpOverlapped=0x124f3d0c) returned 1
	[0130.047] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.048] SetEvent (hEvent=0x2e8) returned 1
	[0130.048] GetFileType (hFile=0x340) returned 0x1
	[0130.048] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435081 | out: pbBuffer=0x12435081) returned 1
	[0130.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435181 | out: pbBuffer=0x12435181) returned 1
	[0130.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435301 | out: pbBuffer=0x12435301) returned 1
	[0130.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744860 | out: pbBuffer=0x12744860) returned 1
	[0130.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.049] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.049] WriteFile (in: hFile=0x33c, lpBuffer=0x125fe500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.049] CloseHandle (hObject=0x33c) returned 1
	[0130.049] CloseHandle (hObject=0x340) returned 1
	[0130.049] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.050] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.066] SetEvent (hEvent=0x70) returned 1
	[0130.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.066] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1
	[0130.066] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0130.067] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0130.067] ReadFile (in: hFile=0x340, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0x5c, lpOverlapped=0x0) returned 1
	[0130.068] GetFileType (hFile=0x340) returned 0x1
	[0130.068] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.068] WriteFile (in: hFile=0x340, lpBuffer=0x12456000*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12456000*, lpNumberOfBytesWritten=0x124f3d00*=0x5c, lpOverlapped=0x124f3d0c) returned 1
	[0130.069] GetFileType (hFile=0x340) returned 0x1
	[0130.069] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x5c, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.069] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0130.069] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0130.069] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0130.069] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0130.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.070] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.070] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.070] CloseHandle (hObject=0x33c) returned 1
	[0130.070] CloseHandle (hObject=0x340) returned 1
	[0130.070] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.071] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0130.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1
	[0130.071] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e640 | out: pbBuffer=0x1240e640) returned 1
	[0130.071] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0130.071] ReadFile (in: hFile=0x340, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x12429d1c*=0x5f, lpOverlapped=0x0) returned 1
	[0130.073] GetFileType (hFile=0x340) returned 0x1
	[0130.073] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.073] WriteFile (in: hFile=0x340, lpBuffer=0x124562a0*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124562a0*, lpNumberOfBytesWritten=0x12429d00*=0x5f, lpOverlapped=0x12429d0c) returned 1
	[0130.073] GetFileType (hFile=0x340) returned 0x1
	[0130.073] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.073] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0130.073] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0130.074] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0130.074] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0130.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.074] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0130.074] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.074] CloseHandle (hObject=0x33c) returned 1
	[0130.074] CloseHandle (hObject=0x340) returned 1
	[0130.074] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.176] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0130.176] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0130.177] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0130.177] ReadFile (in: hFile=0x340, lpBuffer=0x125d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x125d8000*, lpNumberOfBytesRead=0x124f3d1c*=0xd9, lpOverlapped=0x0) returned 1
	[0130.178] GetFileType (hFile=0x340) returned 0x1
	[0130.178] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.178] WriteFile (in: hFile=0x340, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x124f3d00*=0xd9, lpOverlapped=0x124f3d0c) returned 1
	[0130.178] GetFileType (hFile=0x340) returned 0x1
	[0130.178] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xd9, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0130.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0130.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0130.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0130.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.179] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.179] WriteFile (in: hFile=0x32c, lpBuffer=0x12626000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.180] CloseHandle (hObject=0x32c) returned 1
	[0130.180] CloseHandle (hObject=0x340) returned 1
	[0130.180] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.181] SwitchToThread () returned 1
	[0130.211] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.219] SetEvent (hEvent=0x70) returned 1
	[0130.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.220] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12975ad0 | out: lpFileInformation=0x12975ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0130.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0130.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0130.220] ReadFile (in: hFile=0x2fc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12975d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12975d1c*=0xce, lpOverlapped=0x0) returned 1
	[0130.225] GetFileType (hFile=0x2fc) returned 0x1
	[0130.225] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.225] WriteFile (in: hFile=0x2fc, lpBuffer=0x127860d0*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x12975d00, lpOverlapped=0x12975d0c | out: lpBuffer=0x127860d0*, lpNumberOfBytesWritten=0x12975d00*=0xce, lpOverlapped=0x12975d0c) returned 1
	[0130.228] GetFileType (hFile=0x2fc) returned 0x1
	[0130.228] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xce, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0130.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0130.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0130.229] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0130.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.229] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.229] WriteFile (in: hFile=0x33c, lpBuffer=0x125faa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12975d0c, lpOverlapped=0x0 | out: lpBuffer=0x125faa00*, lpNumberOfBytesWritten=0x12975d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.266] CloseHandle (hObject=0x33c) returned 1
	[0130.267] CloseHandle (hObject=0x2fc) returned 1
	[0130.270] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.277] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.288] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.294] SetEvent (hEvent=0x318) returned 1
	[0130.294] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.298] SetEvent (hEvent=0x2e8) returned 1
	[0130.298] SetEvent (hEvent=0x2e4) returned 1
	[0130.298] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.299] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.300] SetEvent (hEvent=0x2e8) returned 1
	[0130.300] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.301] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.305] SetEvent (hEvent=0x2e8) returned 1
	[0130.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.306] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0130.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0130.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0130.306] ReadFile (in: hFile=0x33c, lpBuffer=0x125a0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125a0000*, lpNumberOfBytesRead=0x124f5d1c*=0xd7, lpOverlapped=0x0) returned 1
	[0130.307] GetFileType (hFile=0x33c) returned 0x1
	[0130.307] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.307] WriteFile (in: hFile=0x33c, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x124f5d00*=0xd7, lpOverlapped=0x124f5d0c) returned 1
	[0130.308] GetFileType (hFile=0x33c) returned 0x1
	[0130.308] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd7, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.308] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0130.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0130.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0130.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0130.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.309] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.309] WriteFile (in: hFile=0x2fc, lpBuffer=0x1277e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277e000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.311] CloseHandle (hObject=0x2fc) returned 1
	[0130.311] CloseHandle (hObject=0x33c) returned 1
	[0130.313] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.319] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.322] SetEvent (hEvent=0x318) returned 1
	[0130.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.323] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117)) returned 1
	[0130.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0130.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0130.323] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0x117, lpOverlapped=0x0) returned 1
	[0130.324] GetFileType (hFile=0x33c) returned 0x1
	[0130.324] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.324] WriteFile (in: hFile=0x33c, lpBuffer=0x12977b00*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12977b00*, lpNumberOfBytesWritten=0x124f3d00*=0x117, lpOverlapped=0x124f3d0c) returned 1
	[0130.326] GetFileType (hFile=0x33c) returned 0x1
	[0130.326] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x117, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0130.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0130.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0130.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0130.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.326] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.326] WriteFile (in: hFile=0x340, lpBuffer=0x1277ea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277ea00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.360] CloseHandle (hObject=0x340) returned 1
	[0130.360] CloseHandle (hObject=0x33c) returned 1
	[0130.362] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.369] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.373] SetEvent (hEvent=0x318) returned 1
	[0130.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.373] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0130.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0130.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0130.374] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0xd1, lpOverlapped=0x0) returned 1
	[0130.375] GetFileType (hFile=0x33c) returned 0x1
	[0130.375] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.375] WriteFile (in: hFile=0x33c, lpBuffer=0x127ea620*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127ea620*, lpNumberOfBytesWritten=0x124f5d00*=0xd1, lpOverlapped=0x124f5d0c) returned 1
	[0130.377] GetFileType (hFile=0x33c) returned 0x1
	[0130.377] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd1, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0130.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0130.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0130.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127447f0 | out: pbBuffer=0x127447f0) returned 1
	[0130.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.378] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.378] WriteFile (in: hFile=0x2fc, lpBuffer=0x1277ef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277ef00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.380] CloseHandle (hObject=0x2fc) returned 1
	[0130.380] CloseHandle (hObject=0x33c) returned 1
	[0130.382] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.388] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.392] SetEvent (hEvent=0x318) returned 1
	[0130.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.392] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0130.393] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0130.393] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744808 | out: pbBuffer=0x12744808) returned 1
	[0130.393] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f3d1c*=0xdd, lpOverlapped=0x0) returned 1
	[0130.394] GetFileType (hFile=0x33c) returned 0x1
	[0130.394] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.394] WriteFile (in: hFile=0x33c, lpBuffer=0x127ea9a0*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127ea9a0*, lpNumberOfBytesWritten=0x124f3d00*=0xdd, lpOverlapped=0x124f3d0c) returned 1
	[0130.396] GetFileType (hFile=0x33c) returned 0x1
	[0130.396] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xdd, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.396] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0130.396] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0130.396] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0130.396] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127449b0 | out: pbBuffer=0x127449b0) returned 1
	[0130.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.397] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.397] WriteFile (in: hFile=0x340, lpBuffer=0x1277f400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277f400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.398] CloseHandle (hObject=0x340) returned 1
	[0130.398] CloseHandle (hObject=0x33c) returned 1
	[0130.400] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.413] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.417] SetEvent (hEvent=0x318) returned 1
	[0130.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.417] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1
	[0130.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8c0 | out: pbBuffer=0x1252e8c0) returned 1
	[0130.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127449c8 | out: pbBuffer=0x127449c8) returned 1
	[0130.418] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f5d1c*=0xe4, lpOverlapped=0x0) returned 1
	[0130.419] GetFileType (hFile=0x33c) returned 0x1
	[0130.419] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.419] WriteFile (in: hFile=0x33c, lpBuffer=0x1271a000*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1271a000*, lpNumberOfBytesWritten=0x124f5d00*=0xe4, lpOverlapped=0x124f5d0c) returned 1
	[0130.421] GetFileType (hFile=0x33c) returned 0x1
	[0130.421] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xe4, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.421] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0130.421] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed081 | out: pbBuffer=0x124ed081) returned 1
	[0130.421] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed181 | out: pbBuffer=0x124ed181) returned 1
	[0130.421] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744a90 | out: pbBuffer=0x12744a90) returned 1
	[0130.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.422] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.422] WriteFile (in: hFile=0x2fc, lpBuffer=0x1277f900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277f900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.424] CloseHandle (hObject=0x2fc) returned 1
	[0130.424] CloseHandle (hObject=0x33c) returned 1
	[0130.426] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.433] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.437] SetEvent (hEvent=0x318) returned 1
	[0130.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.437] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1
	[0130.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252eae0 | out: pbBuffer=0x1252eae0) returned 1
	[0130.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744aa8 | out: pbBuffer=0x12744aa8) returned 1
	[0130.437] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0130.438] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.438] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0130.438] SetEvent (hEvent=0xa0) returned 1
	[0130.439] SetEvent (hEvent=0x318) returned 1
	[0130.439] ReadFile (in: hFile=0x33c, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x124f3d1c*=0xcf, lpOverlapped=0x0) returned 1
	[0130.440] GetFileType (hFile=0x33c) returned 0x1
	[0130.440] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.440] WriteFile (in: hFile=0x33c, lpBuffer=0x125ea000*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125ea000*, lpNumberOfBytesWritten=0x124f3d00*=0xcf, lpOverlapped=0x124f3d0c) returned 1
	[0130.443] GetFileType (hFile=0x33c) returned 0x1
	[0130.443] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xcf, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0130.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0130.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0130.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0130.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.444] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.444] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.445] CloseHandle (hObject=0x340) returned 1
	[0130.445] CloseHandle (hObject=0x33c) returned 1
	[0130.447] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.453] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.460] SetEvent (hEvent=0x2e8) returned 1
	[0130.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.460] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277fad0 | out: lpFileInformation=0x1277fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3)) returned 1
	[0130.460] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0130.460] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744398 | out: pbBuffer=0x12744398) returned 1
	[0130.461] ReadFile (in: hFile=0x340, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1277fd1c*=0xc3, lpOverlapped=0x0) returned 1
	[0130.462] GetFileType (hFile=0x340) returned 0x1
	[0130.462] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.462] WriteFile (in: hFile=0x340, lpBuffer=0x125ea0d0*, nNumberOfBytesToWrite=0xc3, lpNumberOfBytesWritten=0x1277fd00, lpOverlapped=0x1277fd0c | out: lpBuffer=0x125ea0d0*, lpNumberOfBytesWritten=0x1277fd00*=0xc3, lpOverlapped=0x1277fd0c) returned 1
	[0130.463] GetFileType (hFile=0x340) returned 0x1
	[0130.463] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xc3, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0130.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0130.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0130.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744510 | out: pbBuffer=0x12744510) returned 1
	[0130.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.464] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.464] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1277fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.467] CloseHandle (hObject=0x33c) returned 1
	[0130.467] CloseHandle (hObject=0x340) returned 1
	[0130.469] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.477] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.482] SetEvent (hEvent=0x2e8) returned 1
	[0130.482] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.482] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0130.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e460 | out: pbBuffer=0x1252e460) returned 1
	[0130.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744528 | out: pbBuffer=0x12744528) returned 1
	[0130.482] ReadFile (in: hFile=0x340, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0xce, lpOverlapped=0x0) returned 1
	[0130.484] GetFileType (hFile=0x340) returned 0x1
	[0130.484] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.484] WriteFile (in: hFile=0x340, lpBuffer=0x125ea1a0*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125ea1a0*, lpNumberOfBytesWritten=0x124f3d00*=0xce, lpOverlapped=0x124f3d0c) returned 1
	[0130.486] GetFileType (hFile=0x340) returned 0x1
	[0130.486] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xce, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.486] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0130.486] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0130.487] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0130.487] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127447e0 | out: pbBuffer=0x127447e0) returned 1
	[0130.487] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.487] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.487] WriteFile (in: hFile=0x2fc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.489] CloseHandle (hObject=0x2fc) returned 1
	[0130.489] CloseHandle (hObject=0x340) returned 1
	[0130.491] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.498] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.503] SetEvent (hEvent=0x2e8) returned 1
	[0130.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.503] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277fad0 | out: lpFileInformation=0x1277fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0130.504] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e680 | out: pbBuffer=0x1252e680) returned 1
	[0130.504] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127447f8 | out: pbBuffer=0x127447f8) returned 1
	[0130.504] ReadFile (in: hFile=0x340, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1277fd1c*=0xd5, lpOverlapped=0x0) returned 1
	[0130.505] GetFileType (hFile=0x340) returned 0x1
	[0130.505] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.505] WriteFile (in: hFile=0x340, lpBuffer=0x1263a620*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x1277fd00, lpOverlapped=0x1277fd0c | out: lpBuffer=0x1263a620*, lpNumberOfBytesWritten=0x1277fd00*=0xd5, lpOverlapped=0x1277fd0c) returned 1
	[0130.507] GetFileType (hFile=0x340) returned 0x1
	[0130.507] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xd5, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.507] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0130.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0130.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0130.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127449a0 | out: pbBuffer=0x127449a0) returned 1
	[0130.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.508] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.508] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x1277fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.511] CloseHandle (hObject=0x33c) returned 1
	[0130.511] CloseHandle (hObject=0x340) returned 1
	[0130.513] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.521] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.525] SetEvent (hEvent=0x2e8) returned 1
	[0130.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.526] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0130.526] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8a0 | out: pbBuffer=0x1252e8a0) returned 1
	[0130.526] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127449b8 | out: pbBuffer=0x127449b8) returned 1
	[0130.526] ReadFile (in: hFile=0x340, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f3d1c*=0xdd, lpOverlapped=0x0) returned 1
	[0130.528] GetFileType (hFile=0x340) returned 0x1
	[0130.528] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.528] WriteFile (in: hFile=0x340, lpBuffer=0x1263a9a0*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1263a9a0*, lpNumberOfBytesWritten=0x124f3d00*=0xdd, lpOverlapped=0x124f3d0c) returned 1
	[0130.530] GetFileType (hFile=0x340) returned 0x1
	[0130.530] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xdd, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.530] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0130.530] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0130.530] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0130.531] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744a70 | out: pbBuffer=0x12744a70) returned 1
	[0130.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.531] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.531] WriteFile (in: hFile=0x2fc, lpBuffer=0x125de000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125de000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.534] CloseHandle (hObject=0x2fc) returned 1
	[0130.534] CloseHandle (hObject=0x340) returned 1
	[0130.536] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.545] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.549] SetEvent (hEvent=0x2e8) returned 1
	[0130.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.549] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277fad0 | out: lpFileInformation=0x1277fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1
	[0130.550] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252eac0 | out: pbBuffer=0x1252eac0) returned 1
	[0130.550] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744a88 | out: pbBuffer=0x12744a88) returned 1
	[0130.550] ReadFile (in: hFile=0x340, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x1277fd1c*=0xf8, lpOverlapped=0x0) returned 1
	[0130.551] GetFileType (hFile=0x340) returned 0x1
	[0130.551] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.551] WriteFile (in: hFile=0x340, lpBuffer=0x125db200*, nNumberOfBytesToWrite=0xf8, lpNumberOfBytesWritten=0x1277fd00, lpOverlapped=0x1277fd0c | out: lpBuffer=0x125db200*, lpNumberOfBytesWritten=0x1277fd00*=0xf8, lpOverlapped=0x1277fd0c) returned 1
	[0130.553] GetFileType (hFile=0x340) returned 0x1
	[0130.553] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xf8, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.554] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0130.554] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed081 | out: pbBuffer=0x124ed081) returned 1
	[0130.554] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed181 | out: pbBuffer=0x124ed181) returned 1
	[0130.554] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744b50 | out: pbBuffer=0x12744b50) returned 1
	[0130.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.554] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.554] WriteFile (in: hFile=0x33c, lpBuffer=0x125de500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277fd0c, lpOverlapped=0x0 | out: lpBuffer=0x125de500*, lpNumberOfBytesWritten=0x1277fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.557] CloseHandle (hObject=0x33c) returned 1
	[0130.557] CloseHandle (hObject=0x340) returned 1
	[0130.560] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.596] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.601] SetEvent (hEvent=0x2e8) returned 1
	[0130.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.601] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0130.601] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732220 | out: pbBuffer=0x12732220) returned 1
	[0130.601] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0130.601] ReadFile (in: hFile=0x2fc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0xfe, lpOverlapped=0x0) returned 1
	[0130.603] GetFileType (hFile=0x2fc) returned 0x1
	[0130.603] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.603] WriteFile (in: hFile=0x2fc, lpBuffer=0x124be100*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124be100*, lpNumberOfBytesWritten=0x124f5d00*=0xfe, lpOverlapped=0x124f5d0c) returned 1
	[0130.604] GetFileType (hFile=0x2fc) returned 0x1
	[0130.604] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.604] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0130.604] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0130.604] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0130.604] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0130.604] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.605] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.605] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.607] CloseHandle (hObject=0x340) returned 1
	[0130.607] CloseHandle (hObject=0x2fc) returned 1
	[0130.608] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.615] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.618] SetEvent (hEvent=0x318) returned 1
	[0130.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.618] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277fad0 | out: lpFileInformation=0x1277fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0130.618] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732500 | out: pbBuffer=0x12732500) returned 1
	[0130.618] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0130.618] ReadFile (in: hFile=0x2fc, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1277fd1c*=0x108, lpOverlapped=0x0) returned 1
	[0130.619] GetFileType (hFile=0x2fc) returned 0x1
	[0130.619] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.619] WriteFile (in: hFile=0x2fc, lpBuffer=0x125e9b00*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1277fd00, lpOverlapped=0x1277fd0c | out: lpBuffer=0x125e9b00*, lpNumberOfBytesWritten=0x1277fd00*=0x108, lpOverlapped=0x1277fd0c) returned 1
	[0130.621] GetFileType (hFile=0x2fc) returned 0x1
	[0130.621] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0130.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0130.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0130.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0130.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.621] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.621] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1277fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.623] CloseHandle (hObject=0x33c) returned 1
	[0130.623] CloseHandle (hObject=0x2fc) returned 1
	[0130.625] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.640] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.644] SetEvent (hEvent=0x318) returned 1
	[0130.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.644] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0130.644] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732720 | out: pbBuffer=0x12732720) returned 1
	[0130.644] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0130.644] ReadFile (in: hFile=0x2fc, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f5d1c*=0xce, lpOverlapped=0x0) returned 1
	[0130.646] GetFileType (hFile=0x2fc) returned 0x1
	[0130.646] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.646] WriteFile (in: hFile=0x2fc, lpBuffer=0x12634000*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12634000*, lpNumberOfBytesWritten=0x124f5d00*=0xce, lpOverlapped=0x124f5d0c) returned 1
	[0130.648] GetFileType (hFile=0x2fc) returned 0x1
	[0130.648] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xce, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0130.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0130.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0130.649] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127447f0 | out: pbBuffer=0x127447f0) returned 1
	[0130.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.649] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.649] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.651] CloseHandle (hObject=0x340) returned 1
	[0130.651] CloseHandle (hObject=0x2fc) returned 1
	[0130.653] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.662] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.670] SetEvent (hEvent=0x318) returned 1
	[0130.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.670] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x1277fad0 | out: lpFileInformation=0x1277fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1
	[0130.671] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732940 | out: pbBuffer=0x12732940) returned 1
	[0130.671] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744808 | out: pbBuffer=0x12744808) returned 1
	[0130.671] ReadFile (in: hFile=0x340, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277fd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1277fd1c*=0x160, lpOverlapped=0x0) returned 1
	[0130.672] GetFileType (hFile=0x340) returned 0x1
	[0130.672] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.672] WriteFile (in: hFile=0x340, lpBuffer=0x125f8000*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1277fd00, lpOverlapped=0x1277fd0c | out: lpBuffer=0x125f8000*, lpNumberOfBytesWritten=0x1277fd00*=0x160, lpOverlapped=0x1277fd0c) returned 1
	[0130.676] GetFileType (hFile=0x340) returned 0x1
	[0130.677] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.677] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0130.677] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0130.677] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0130.677] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127449b0 | out: pbBuffer=0x127449b0) returned 1
	[0130.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.677] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.677] WriteFile (in: hFile=0x32c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x1277fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.681] CloseHandle (hObject=0x32c) returned 1
	[0130.681] CloseHandle (hObject=0x340) returned 1
	[0130.684] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.685] SetEvent (hEvent=0x2e4) returned 1
	[0130.685] SetEvent (hEvent=0x80) returned 1
	[0130.685] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.693] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.699] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.705] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x1277fad0 | out: lpFileInformation=0x1277fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1
	[0130.706] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0130.706] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0130.706] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1277fd1c*=0x2d5, lpOverlapped=0x0) returned 1
	[0130.714] GetFileType (hFile=0x33c) returned 0x1
	[0130.714] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.714] WriteFile (in: hFile=0x33c, lpBuffer=0x1260a300*, nNumberOfBytesToWrite=0x2d5, lpNumberOfBytesWritten=0x1277fd00, lpOverlapped=0x1277fd0c | out: lpBuffer=0x1260a300*, lpNumberOfBytesWritten=0x1277fd00*=0x2d5, lpOverlapped=0x1277fd0c) returned 1
	[0130.714] GetFileType (hFile=0x33c) returned 0x1
	[0130.714] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x2d5, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.715] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0130.715] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0130.715] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0130.715] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0130.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.715] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.715] WriteFile (in: hFile=0x2fc, lpBuffer=0x1262e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277fd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262e000*, lpNumberOfBytesWritten=0x1277fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.716] CloseHandle (hObject=0x2fc) returned 1
	[0130.726] CloseHandle (hObject=0x33c) returned 1
	[0130.730] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.857] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.861] SetEvent (hEvent=0x318) returned 1
	[0130.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.862] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149)) returned 1
	[0130.862] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0130.862] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0130.862] ReadFile (in: hFile=0x338, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x149, lpOverlapped=0x0) returned 1
	[0130.864] GetFileType (hFile=0x338) returned 0x1
	[0130.864] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.864] WriteFile (in: hFile=0x338, lpBuffer=0x12534000*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12534000*, lpNumberOfBytesWritten=0x1242bd00*=0x149, lpOverlapped=0x1242bd0c) returned 1
	[0130.865] GetFileType (hFile=0x338) returned 0x1
	[0130.866] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x149, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0130.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0130.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0130.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e9e0 | out: pbBuffer=0x1251e9e0) returned 1
	[0130.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.867] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.867] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.869] CloseHandle (hObject=0x340) returned 1
	[0130.869] CloseHandle (hObject=0x338) returned 1
	[0130.871] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.880] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.884] SetEvent (hEvent=0x318) returned 1
	[0130.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.885] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277fad0 | out: lpFileInformation=0x1277fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1
	[0130.885] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0130.885] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ea18 | out: pbBuffer=0x1251ea18) returned 1
	[0130.885] ReadFile (in: hFile=0x338, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277fd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1277fd1c*=0xf9, lpOverlapped=0x0) returned 1
	[0130.886] GetFileType (hFile=0x338) returned 0x1
	[0130.886] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.887] WriteFile (in: hFile=0x338, lpBuffer=0x12775000*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x1277fd00, lpOverlapped=0x1277fd0c | out: lpBuffer=0x12775000*, lpNumberOfBytesWritten=0x1277fd00*=0xf9, lpOverlapped=0x1277fd0c) returned 1
	[0130.888] GetFileType (hFile=0x338) returned 0x1
	[0130.888] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0130.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0130.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0130.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251eb20 | out: pbBuffer=0x1251eb20) returned 1
	[0130.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.889] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.889] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1277fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.892] CloseHandle (hObject=0x2fc) returned 1
	[0130.892] CloseHandle (hObject=0x338) returned 1
	[0130.895] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.935] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.939] SetEvent (hEvent=0x318) returned 1
	[0130.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.939] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1
	[0130.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0130.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0130.940] ReadFile (in: hFile=0x338, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1242bd1c*=0x103, lpOverlapped=0x0) returned 1
	[0130.941] GetFileType (hFile=0x338) returned 0x1
	[0130.941] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.941] WriteFile (in: hFile=0x338, lpBuffer=0x12515320*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12515320*, lpNumberOfBytesWritten=0x1242bd00*=0x103, lpOverlapped=0x1242bd0c) returned 1
	[0130.943] GetFileType (hFile=0x338) returned 0x1
	[0130.943] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0130.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0130.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0130.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788278 | out: pbBuffer=0x12788278) returned 1
	[0130.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.944] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.944] WriteFile (in: hFile=0x340, lpBuffer=0x128cef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128cef00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.947] CloseHandle (hObject=0x340) returned 1
	[0130.947] CloseHandle (hObject=0x338) returned 1
	[0130.949] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.957] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.963] SetEvent (hEvent=0x318) returned 1
	[0130.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.963] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277fad0 | out: lpFileInformation=0x1277fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3)) returned 1
	[0130.964] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb20 | out: pbBuffer=0x1244cb20) returned 1
	[0130.964] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0130.964] ReadFile (in: hFile=0x340, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1277fd1c*=0xf3, lpOverlapped=0x0) returned 1
	[0130.965] GetFileType (hFile=0x340) returned 0x1
	[0130.965] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.966] WriteFile (in: hFile=0x340, lpBuffer=0x127ee400*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x1277fd00, lpOverlapped=0x1277fd0c | out: lpBuffer=0x127ee400*, lpNumberOfBytesWritten=0x1277fd00*=0xf3, lpOverlapped=0x1277fd0c) returned 1
	[0130.967] GetFileType (hFile=0x340) returned 0x1
	[0130.967] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xf3, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0130.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0130.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0130.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788348 | out: pbBuffer=0x12788348) returned 1
	[0130.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.969] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0130.969] WriteFile (in: hFile=0x2fc, lpBuffer=0x128cf400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277fd0c, lpOverlapped=0x0 | out: lpBuffer=0x128cf400*, lpNumberOfBytesWritten=0x1277fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.971] CloseHandle (hObject=0x2fc) returned 1
	[0130.971] CloseHandle (hObject=0x340) returned 1
	[0130.974] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.983] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0130.988] SetEvent (hEvent=0x318) returned 1
	[0130.988] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.988] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0130.988] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd40 | out: pbBuffer=0x1244cd40) returned 1
	[0130.988] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788370 | out: pbBuffer=0x12788370) returned 1
	[0130.989] ReadFile (in: hFile=0x2fc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x1242bd1c*=0x104, lpOverlapped=0x0) returned 1
	[0130.990] GetFileType (hFile=0x2fc) returned 0x1
	[0130.990] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.990] WriteFile (in: hFile=0x2fc, lpBuffer=0x127ecfc0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127ecfc0*, lpNumberOfBytesWritten=0x1242bd00*=0x104, lpOverlapped=0x1242bd0c) returned 1
	[0130.992] GetFileType (hFile=0x2fc) returned 0x1
	[0130.992] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0130.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0130.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0130.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788438 | out: pbBuffer=0x12788438) returned 1
	[0130.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.993] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.993] WriteFile (in: hFile=0x338, lpBuffer=0x128cf900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128cf900*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.995] CloseHandle (hObject=0x338) returned 1
	[0130.995] CloseHandle (hObject=0x2fc) returned 1
	[0130.997] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.007] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.009] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.016] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.026] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.038] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.048] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.062] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.073] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.085] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.095] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.109] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.119] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.128] SetEvent (hEvent=0x70) returned 1
	[0131.128] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.132] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.133] SetEvent (hEvent=0x2e8) returned 1
	[0131.133] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.135] SetEvent (hEvent=0x2e8) returned 1
	[0131.135] SetEvent (hEvent=0x80) returned 1
	[0131.135] SwitchToThread () returned 1
	[0131.136] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.140] SetEvent (hEvent=0x80) returned 1
	[0131.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.141] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1
	[0131.141] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0131.141] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0131.141] ReadFile (in: hFile=0x340, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f1d1c*=0xf2, lpOverlapped=0x0) returned 1
	[0131.143] GetFileType (hFile=0x340) returned 0x1
	[0131.143] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.143] WriteFile (in: hFile=0x340, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x124f1d00*=0xf2, lpOverlapped=0x124f1d0c) returned 1
	[0131.144] GetFileType (hFile=0x340) returned 0x1
	[0131.144] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec101 | out: pbBuffer=0x124ec101) returned 1
	[0131.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0131.145] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0131.145] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0131.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.145] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.145] WriteFile (in: hFile=0x338, lpBuffer=0x1261c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261c000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.147] CloseHandle (hObject=0x338) returned 1
	[0131.147] CloseHandle (hObject=0x340) returned 1
	[0131.149] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.166] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.171] SetEvent (hEvent=0x80) returned 1
	[0131.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.171] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1
	[0131.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0131.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0131.172] ReadFile (in: hFile=0x2fc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12605d1c*=0x101, lpOverlapped=0x0) returned 1
	[0131.173] GetFileType (hFile=0x2fc) returned 0x1
	[0131.173] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.173] WriteFile (in: hFile=0x2fc, lpBuffer=0x124b0d80*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x124b0d80*, lpNumberOfBytesWritten=0x12605d00*=0x101, lpOverlapped=0x12605d0c) returned 1
	[0131.175] GetFileType (hFile=0x2fc) returned 0x1
	[0131.175] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x101, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.175] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0131.175] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0131.176] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0131.176] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0131.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.176] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.176] WriteFile (in: hFile=0x338, lpBuffer=0x1261c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261c500*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.178] CloseHandle (hObject=0x338) returned 1
	[0131.178] CloseHandle (hObject=0x2fc) returned 1
	[0131.180] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.188] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.192] SetEvent (hEvent=0x80) returned 1
	[0131.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.192] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0131.193] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0131.193] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0131.193] ReadFile (in: hFile=0x340, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f1d1c*=0x108, lpOverlapped=0x0) returned 1
	[0131.194] GetFileType (hFile=0x340) returned 0x1
	[0131.194] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.194] WriteFile (in: hFile=0x340, lpBuffer=0x124b1c20*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124b1c20*, lpNumberOfBytesWritten=0x124f1d00*=0x108, lpOverlapped=0x124f1d0c) returned 1
	[0131.196] GetFileType (hFile=0x340) returned 0x1
	[0131.196] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0131.197] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0131.197] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0131.197] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105c0 | out: pbBuffer=0x124105c0) returned 1
	[0131.197] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.197] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.197] WriteFile (in: hFile=0x338, lpBuffer=0x1261ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261ca00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.199] CloseHandle (hObject=0x338) returned 1
	[0131.199] CloseHandle (hObject=0x340) returned 1
	[0131.201] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.209] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.214] SetEvent (hEvent=0x80) returned 1
	[0131.214] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.214] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0131.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0131.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105d8 | out: pbBuffer=0x124105d8) returned 1
	[0131.215] ReadFile (in: hFile=0x2fc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12605d1c*=0x152, lpOverlapped=0x0) returned 1
	[0131.216] GetFileType (hFile=0x2fc) returned 0x1
	[0131.216] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.216] WriteFile (in: hFile=0x2fc, lpBuffer=0x1262e000*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x1262e000*, lpNumberOfBytesWritten=0x12605d00*=0x152, lpOverlapped=0x12605d0c) returned 1
	[0131.218] GetFileType (hFile=0x2fc) returned 0x1
	[0131.218] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x152, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0131.219] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0131.219] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0131.219] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410720 | out: pbBuffer=0x12410720) returned 1
	[0131.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.219] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.219] WriteFile (in: hFile=0x338, lpBuffer=0x1261cf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261cf00*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.222] CloseHandle (hObject=0x338) returned 1
	[0131.222] CloseHandle (hObject=0x2fc) returned 1
	[0131.223] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.231] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.235] SetEvent (hEvent=0x80) returned 1
	[0131.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.236] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1
	[0131.236] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8c0 | out: pbBuffer=0x1252e8c0) returned 1
	[0131.236] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410738 | out: pbBuffer=0x12410738) returned 1
	[0131.236] ReadFile (in: hFile=0x340, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f1d1c*=0x10c, lpOverlapped=0x0) returned 1
	[0131.238] GetFileType (hFile=0x340) returned 0x1
	[0131.238] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.238] WriteFile (in: hFile=0x340, lpBuffer=0x126198c0*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x126198c0*, lpNumberOfBytesWritten=0x124f1d00*=0x10c, lpOverlapped=0x124f1d0c) returned 1
	[0131.240] GetFileType (hFile=0x340) returned 0x1
	[0131.240] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.240] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece01 | out: pbBuffer=0x124ece01) returned 1
	[0131.240] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf01 | out: pbBuffer=0x124ecf01) returned 1
	[0131.240] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed001 | out: pbBuffer=0x124ed001) returned 1
	[0131.240] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410820 | out: pbBuffer=0x12410820) returned 1
	[0131.241] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.241] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.241] WriteFile (in: hFile=0x338, lpBuffer=0x1261d400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261d400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.243] CloseHandle (hObject=0x338) returned 1
	[0131.243] CloseHandle (hObject=0x340) returned 1
	[0131.244] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.300] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.305] SetEvent (hEvent=0x80) returned 1
	[0131.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.305] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd)) returned 1
	[0131.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252eae0 | out: pbBuffer=0x1252eae0) returned 1
	[0131.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410838 | out: pbBuffer=0x12410838) returned 1
	[0131.306] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0131.307] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.307] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0131.307] SetEvent (hEvent=0xa0) returned 1
	[0131.307] SetEvent (hEvent=0x80) returned 1
	[0131.307] ReadFile (in: hFile=0x2fc, lpBuffer=0x128c6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x128c6000*, lpNumberOfBytesRead=0x12605d1c*=0xfd, lpOverlapped=0x0) returned 1
	[0131.309] GetFileType (hFile=0x2fc) returned 0x1
	[0131.309] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.309] WriteFile (in: hFile=0x2fc, lpBuffer=0x128c3100*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x128c3100*, lpNumberOfBytesWritten=0x12605d00*=0xfd, lpOverlapped=0x12605d0c) returned 1
	[0131.311] GetFileType (hFile=0x2fc) returned 0x1
	[0131.311] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.312] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0131.312] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0131.312] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0131.312] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251eda0 | out: pbBuffer=0x1251eda0) returned 1
	[0131.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.312] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.312] WriteFile (in: hFile=0x338, lpBuffer=0x12728000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x12728000*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.314] CloseHandle (hObject=0x338) returned 1
	[0131.314] CloseHandle (hObject=0x2fc) returned 1
	[0131.315] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.319] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.321] SetEvent (hEvent=0x80) returned 1
	[0131.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.321] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x164)) returned 1
	[0131.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0131.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e010 | out: pbBuffer=0x1251e010) returned 1
	[0131.322] ReadFile (in: hFile=0x2fc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f1d1c*=0x164, lpOverlapped=0x0) returned 1
	[0131.323] GetFileType (hFile=0x2fc) returned 0x1
	[0131.323] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.323] WriteFile (in: hFile=0x2fc, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x124f1d00*=0x164, lpOverlapped=0x124f1d0c) returned 1
	[0131.324] GetFileType (hFile=0x2fc) returned 0x1
	[0131.324] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x164, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec101 | out: pbBuffer=0x124ec101) returned 1
	[0131.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0131.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0131.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e9e8 | out: pbBuffer=0x1251e9e8) returned 1
	[0131.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.325] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.325] WriteFile (in: hFile=0x338, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.327] CloseHandle (hObject=0x338) returned 1
	[0131.327] CloseHandle (hObject=0x2fc) returned 1
	[0131.330] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.337] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.341] SetEvent (hEvent=0x318) returned 1
	[0131.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.342] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x161)) returned 1
	[0131.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e260 | out: pbBuffer=0x1252e260) returned 1
	[0131.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ea10 | out: pbBuffer=0x1251ea10) returned 1
	[0131.342] ReadFile (in: hFile=0x2fc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f3d1c*=0x161, lpOverlapped=0x0) returned 1
	[0131.344] GetFileType (hFile=0x2fc) returned 0x1
	[0131.344] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.344] WriteFile (in: hFile=0x2fc, lpBuffer=0x124f8480*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124f8480*, lpNumberOfBytesWritten=0x124f3d00*=0x161, lpOverlapped=0x124f3d0c) returned 1
	[0131.346] GetFileType (hFile=0x2fc) returned 0x1
	[0131.346] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x161, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0131.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0131.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0131.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251eb18 | out: pbBuffer=0x1251eb18) returned 1
	[0131.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.347] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.347] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.350] CloseHandle (hObject=0x340) returned 1
	[0131.350] CloseHandle (hObject=0x2fc) returned 1
	[0131.352] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.360] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.366] SetEvent (hEvent=0x318) returned 1
	[0131.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.367] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x111)) returned 1
	[0131.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4a0 | out: pbBuffer=0x1252e4a0) returned 1
	[0131.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251eb30 | out: pbBuffer=0x1251eb30) returned 1
	[0131.367] ReadFile (in: hFile=0x2fc, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f1d1c*=0x111, lpOverlapped=0x0) returned 1
	[0131.368] GetFileType (hFile=0x2fc) returned 0x1
	[0131.368] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.368] WriteFile (in: hFile=0x2fc, lpBuffer=0x124b0900*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124b0900*, lpNumberOfBytesWritten=0x124f1d00*=0x111, lpOverlapped=0x124f1d0c) returned 1
	[0131.370] GetFileType (hFile=0x2fc) returned 0x1
	[0131.370] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x111, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.370] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0131.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0131.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0131.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ebe8 | out: pbBuffer=0x1251ebe8) returned 1
	[0131.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.371] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.371] WriteFile (in: hFile=0x338, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.417] CloseHandle (hObject=0x338) returned 1
	[0131.417] CloseHandle (hObject=0x2fc) returned 1
	[0131.420] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.428] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.432] SetEvent (hEvent=0x318) returned 1
	[0131.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.433] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5)) returned 1
	[0131.433] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6c0 | out: pbBuffer=0x1252e6c0) returned 1
	[0131.433] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ec10 | out: pbBuffer=0x1251ec10) returned 1
	[0131.433] ReadFile (in: hFile=0x2fc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f3d1c*=0x2bd5, lpOverlapped=0x0) returned 1
	[0131.440] GetFileType (hFile=0x2fc) returned 0x1
	[0131.440] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.440] WriteFile (in: hFile=0x2fc, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x2bd5, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x124f3d00*=0x2bd5, lpOverlapped=0x124f3d0c) returned 1
	[0131.442] GetFileType (hFile=0x2fc) returned 0x1
	[0131.442] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x2bd5, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.442] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0131.442] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0131.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0131.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ee28 | out: pbBuffer=0x1251ee28) returned 1
	[0131.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.443] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.443] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.446] CloseHandle (hObject=0x33c) returned 1
	[0131.447] CloseHandle (hObject=0x2fc) returned 1
	[0131.450] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.464] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.494] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.507] SetEvent (hEvent=0x318) returned 1
	[0131.507] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.514] SetEvent (hEvent=0x318) returned 1
	[0131.514] SetEvent (hEvent=0x320) returned 1
	[0131.514] SetEvent (hEvent=0x70) returned 1
	[0131.514] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.567] SetEvent (hEvent=0x320) returned 1
	[0131.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.568] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0131.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.568] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0131.568] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0131.568] ReadFile (in: hFile=0x338, lpBuffer=0x128ea000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128ea000*, lpNumberOfBytesRead=0x12429d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.571] GetFileType (hFile=0x338) returned 0x1
	[0131.571] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.571] WriteFile (in: hFile=0x338, lpBuffer=0x124b2000*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124b2000*, lpNumberOfBytesWritten=0x12429d00*=0xb3, lpOverlapped=0x12429d0c) returned 1
	[0131.571] GetFileType (hFile=0x338) returned 0x1
	[0131.571] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.571] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0131.572] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0131.572] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0131.572] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0131.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.572] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0131.572] WriteFile (in: hFile=0x33c, lpBuffer=0x127d0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d0000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.573] CloseHandle (hObject=0x33c) returned 1
	[0131.573] CloseHandle (hObject=0x338) returned 1
	[0131.573] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.574] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0131.822] SetEvent (hEvent=0x70) returned 1
	[0131.822] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0132.181] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0132.224] SetEvent (hEvent=0x70) returned 1
	[0132.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.224] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0132.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0132.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0132.225] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12429d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.226] GetFileType (hFile=0x33c) returned 0x1
	[0132.226] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.226] WriteFile (in: hFile=0x33c, lpBuffer=0x128c6000*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x128c6000*, lpNumberOfBytesWritten=0x12429d00*=0xb3, lpOverlapped=0x12429d0c) returned 1
	[0132.226] GetFileType (hFile=0x33c) returned 0x1
	[0132.227] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0132.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0132.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0132.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0132.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.228] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0132.228] WriteFile (in: hFile=0x340, lpBuffer=0x124b4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b4000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.228] CloseHandle (hObject=0x340) returned 1
	[0132.228] CloseHandle (hObject=0x33c) returned 1
	[0132.228] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.230] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0132.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0132.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0132.230] ReadFile (in: hFile=0x33c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.231] GetFileType (hFile=0x33c) returned 0x1
	[0132.231] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.231] WriteFile (in: hFile=0x33c, lpBuffer=0x128c6180*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x128c6180*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0132.231] GetFileType (hFile=0x33c) returned 0x1
	[0132.231] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0132.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0132.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0132.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0132.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.232] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0132.232] WriteFile (in: hFile=0x340, lpBuffer=0x124b4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x124b4500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.233] CloseHandle (hObject=0x340) returned 1
	[0132.233] CloseHandle (hObject=0x33c) returned 1
	[0132.233] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.234] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0132.317] SetEvent (hEvent=0x320) returned 1
	[0132.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.318] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0132.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0132.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0132.318] ReadFile (in: hFile=0x340, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f1d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.319] GetFileType (hFile=0x340) returned 0x1
	[0132.319] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.320] WriteFile (in: hFile=0x340, lpBuffer=0x128c6300*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x128c6300*, lpNumberOfBytesWritten=0x124f1d00*=0xb3, lpOverlapped=0x124f1d0c) returned 1
	[0132.320] GetFileType (hFile=0x340) returned 0x1
	[0132.320] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0132.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0132.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0132.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0132.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0132.321] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0132.321] WriteFile (in: hFile=0x2cc, lpBuffer=0x124b4a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b4a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.321] CloseHandle (hObject=0x2cc) returned 1
	[0132.321] CloseHandle (hObject=0x340) returned 1
	[0132.321] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.322] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0132.553] SetEvent (hEvent=0x320) returned 1
	[0132.553] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0132.690] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0132.736] SetEvent (hEvent=0x320) returned 1
	[0132.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.736] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0132.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.737] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0132.737] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0132.737] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f1d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.738] GetFileType (hFile=0x33c) returned 0x1
	[0132.738] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.738] WriteFile (in: hFile=0x33c, lpBuffer=0x125f8000*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x125f8000*, lpNumberOfBytesWritten=0x124f1d00*=0xb3, lpOverlapped=0x124f1d0c) returned 1
	[0132.739] GetFileType (hFile=0x33c) returned 0x1
	[0132.739] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.739] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0132.739] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0132.739] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0132.739] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0132.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.740] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0132.740] WriteFile (in: hFile=0x340, lpBuffer=0x124b2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b2000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.740] CloseHandle (hObject=0x340) returned 1
	[0132.740] CloseHandle (hObject=0x33c) returned 1
	[0132.741] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.742] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12659d0c | out: lpMode=0x12659d0c) returned 0
	[0132.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12659ad0 | out: lpFileInformation=0x12659ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0132.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0132.742] ReadFile (in: hFile=0x33c, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12659d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x12659d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.743] GetFileType (hFile=0x33c) returned 0x1
	[0132.743] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12659ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.743] WriteFile (in: hFile=0x33c, lpBuffer=0x125f8180*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12659d00, lpOverlapped=0x12659d0c | out: lpBuffer=0x125f8180*, lpNumberOfBytesWritten=0x12659d00*=0xb3, lpOverlapped=0x12659d0c) returned 1
	[0132.744] GetFileType (hFile=0x33c) returned 0x1
	[0132.744] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x12659ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0132.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0132.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0132.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0132.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.745] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12659d0c | out: lpMode=0x12659d0c) returned 0
	[0132.745] WriteFile (in: hFile=0x340, lpBuffer=0x124b2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12659d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b2500*, lpNumberOfBytesWritten=0x12659d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.745] CloseHandle (hObject=0x340) returned 1
	[0132.745] CloseHandle (hObject=0x33c) returned 1
	[0132.745] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.746] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0132.893] SetEvent (hEvent=0x70) returned 1
	[0132.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.894] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12659d0c | out: lpMode=0x12659d0c) returned 0
	[0132.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x12659ad0 | out: lpFileInformation=0x12659ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d8)) returned 1
	[0132.894] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0132.894] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0132.894] ReadFile (in: hFile=0x340, lpBuffer=0x12906000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12659d1c, lpOverlapped=0x0 | out: lpBuffer=0x12906000*, lpNumberOfBytesRead=0x12659d1c*=0x2d8, lpOverlapped=0x0) returned 1
	[0132.936] GetFileType (hFile=0x340) returned 0x1
	[0132.936] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12659ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.936] WriteFile (in: hFile=0x340, lpBuffer=0x1260a300*, nNumberOfBytesToWrite=0x2d8, lpNumberOfBytesWritten=0x12659d00, lpOverlapped=0x12659d0c | out: lpBuffer=0x1260a300*, lpNumberOfBytesWritten=0x12659d00*=0x2d8, lpOverlapped=0x12659d0c) returned 1
	[0132.936] GetFileType (hFile=0x340) returned 0x1
	[0132.936] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x2d8, lpNewFilePointer=0x0, dwMoveMethod=0x12659ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0132.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0132.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0132.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0132.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0132.937] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12659d0c | out: lpMode=0x12659d0c) returned 0
	[0132.937] WriteFile (in: hFile=0x32c, lpBuffer=0x124b2a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12659d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b2a00*, lpNumberOfBytesWritten=0x12659d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.937] CloseHandle (hObject=0x32c) returned 1
	[0132.937] CloseHandle (hObject=0x340) returned 1
	[0132.938] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.939] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0133.141] SetEvent (hEvent=0x320) returned 1
	[0133.141] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0133.191] SetEvent (hEvent=0x320) returned 1
	[0133.191] SetEvent (hEvent=0x70) returned 1
	[0133.191] SetEvent (hEvent=0x2f4) returned 1
	[0133.191] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0133.717] SetEvent (hEvent=0x320) returned 1
	[0133.717] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0133.837] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0133.890] SetEvent (hEvent=0x320) returned 1
	[0133.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.890] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0133.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0133.891] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0133.891] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0133.891] ReadFile (in: hFile=0x2cc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x11a, lpOverlapped=0x0) returned 1
	[0133.892] GetFileType (hFile=0x2cc) returned 0x1
	[0133.892] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.892] WriteFile (in: hFile=0x2cc, lpBuffer=0x12608000*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12608000*, lpNumberOfBytesWritten=0x12429d00*=0x11a, lpOverlapped=0x12429d0c) returned 1
	[0133.892] GetFileType (hFile=0x2cc) returned 0x1
	[0133.892] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.893] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0133.893] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0133.893] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0133.893] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0133.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.893] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0133.893] WriteFile (in: hFile=0x33c, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.894] CloseHandle (hObject=0x33c) returned 1
	[0133.894] CloseHandle (hObject=0x2cc) returned 1
	[0133.894] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.895] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0133.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x125e9ad0 | out: lpFileInformation=0x125e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1
	[0133.896] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0133.896] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0133.896] ReadFile (in: hFile=0x2cc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x125e9d1c*=0xeb, lpOverlapped=0x0) returned 1
	[0133.897] GetFileType (hFile=0x2cc) returned 0x1
	[0133.897] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.897] WriteFile (in: hFile=0x2cc, lpBuffer=0x12460000*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x125e9d00, lpOverlapped=0x125e9d0c | out: lpBuffer=0x12460000*, lpNumberOfBytesWritten=0x125e9d00*=0xeb, lpOverlapped=0x125e9d0c) returned 1
	[0133.897] GetFileType (hFile=0x2cc) returned 0x1
	[0133.897] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xeb, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.897] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0133.897] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0133.898] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0133.898] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0133.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.898] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0133.898] WriteFile (in: hFile=0x33c, lpBuffer=0x1245c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245c500*, lpNumberOfBytesWritten=0x125e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.898] CloseHandle (hObject=0x33c) returned 1
	[0133.898] CloseHandle (hObject=0x2cc) returned 1
	[0133.898] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.899] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0133.981] SetEvent (hEvent=0x320) returned 1
	[0133.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.981] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0133.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0133.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0133.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0133.982] ReadFile (in: hFile=0x2cc, lpBuffer=0x12966000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12966000*, lpNumberOfBytesRead=0x124f5d1c*=0xd7, lpOverlapped=0x0) returned 1
	[0133.983] GetFileType (hFile=0x2cc) returned 0x1
	[0133.983] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.983] WriteFile (in: hFile=0x2cc, lpBuffer=0x1262e540*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1262e540*, lpNumberOfBytesWritten=0x124f5d00*=0xd7, lpOverlapped=0x124f5d0c) returned 1
	[0133.983] GetFileType (hFile=0x2cc) returned 0x1
	[0133.983] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xd7, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.984] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0133.984] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0133.984] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0133.984] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445f0 | out: pbBuffer=0x127445f0) returned 1
	[0133.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.984] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0133.984] WriteFile (in: hFile=0x33c, lpBuffer=0x1245ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245ca00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.985] CloseHandle (hObject=0x33c) returned 1
	[0133.985] CloseHandle (hObject=0x2cc) returned 1
	[0133.985] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.986] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.090] SetEvent (hEvent=0x320) returned 1
	[0134.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.090] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1
	[0134.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0134.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744608 | out: pbBuffer=0x12744608) returned 1
	[0134.091] ReadFile (in: hFile=0x2cc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f3d1c*=0xeb, lpOverlapped=0x0) returned 1
	[0134.092] GetFileType (hFile=0x2cc) returned 0x1
	[0134.092] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.092] WriteFile (in: hFile=0x2cc, lpBuffer=0x124600f0*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124600f0*, lpNumberOfBytesWritten=0x124f3d00*=0xeb, lpOverlapped=0x124f3d0c) returned 1
	[0134.092] GetFileType (hFile=0x2cc) returned 0x1
	[0134.092] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xeb, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.092] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0134.093] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0134.093] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0134.093] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127449b0 | out: pbBuffer=0x127449b0) returned 1
	[0134.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.093] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.093] WriteFile (in: hFile=0x33c, lpBuffer=0x1245cf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245cf00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.093] CloseHandle (hObject=0x33c) returned 1
	[0134.094] CloseHandle (hObject=0x2cc) returned 1
	[0134.094] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.095] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.095] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1
	[0134.096] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8c0 | out: pbBuffer=0x1252e8c0) returned 1
	[0134.096] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127449c8 | out: pbBuffer=0x127449c8) returned 1
	[0134.096] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0134.130] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.131] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0134.131] SetEvent (hEvent=0xa0) returned 1
	[0134.131] SetEvent (hEvent=0x320) returned 1
	[0134.131] ReadFile (in: hFile=0x2cc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f5d1c*=0xe5, lpOverlapped=0x0) returned 1
	[0134.132] GetFileType (hFile=0x2cc) returned 0x1
	[0134.132] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.132] WriteFile (in: hFile=0x2cc, lpBuffer=0x124601e0*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124601e0*, lpNumberOfBytesWritten=0x124f5d00*=0xe5, lpOverlapped=0x124f5d0c) returned 1
	[0134.132] GetFileType (hFile=0x2cc) returned 0x1
	[0134.133] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xe5, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.135] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0134.135] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0134.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0134.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744a80 | out: pbBuffer=0x12744a80) returned 1
	[0134.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.138] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.138] WriteFile (in: hFile=0x33c, lpBuffer=0x1245d400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245d400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.138] CloseHandle (hObject=0x33c) returned 1
	[0134.138] CloseHandle (hObject=0x2cc) returned 1
	[0134.139] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.140] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0134.180] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.181] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0134.226] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.226] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0134.226] SetEvent (hEvent=0x2f4) returned 1
	[0134.226] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0134.260] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.260] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0134.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0134.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0134.260] ReadFile (in: hFile=0x2cc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f3d1c*=0xdd, lpOverlapped=0x0) returned 1
	[0134.261] GetFileType (hFile=0x2cc) returned 0x1
	[0134.261] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.261] WriteFile (in: hFile=0x2cc, lpBuffer=0x1262e000*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1262e000*, lpNumberOfBytesWritten=0x124f3d00*=0xdd, lpOverlapped=0x124f3d0c) returned 1
	[0134.262] GetFileType (hFile=0x2cc) returned 0x1
	[0134.262] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xdd, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0134.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0134.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0134.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0134.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.262] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.262] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.263] CloseHandle (hObject=0x33c) returned 1
	[0134.263] CloseHandle (hObject=0x2cc) returned 1
	[0134.263] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.264] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0134.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1
	[0134.264] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0134.264] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0134.264] ReadFile (in: hFile=0x2cc, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f1d1c*=0xd0, lpOverlapped=0x0) returned 1
	[0134.265] GetFileType (hFile=0x2cc) returned 0x1
	[0134.265] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.265] WriteFile (in: hFile=0x2cc, lpBuffer=0x124b4000*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124b4000*, lpNumberOfBytesWritten=0x124f1d00*=0xd0, lpOverlapped=0x124f1d0c) returned 1
	[0134.265] GetFileType (hFile=0x2cc) returned 0x1
	[0134.265] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0134.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0134.266] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0134.266] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0134.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.266] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0134.266] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.266] CloseHandle (hObject=0x33c) returned 1
	[0134.266] CloseHandle (hObject=0x2cc) returned 1
	[0134.266] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.267] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0134.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf)) returned 1
	[0134.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0134.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0134.267] ReadFile (in: hFile=0x2cc, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12429d1c*=0xbf, lpOverlapped=0x0) returned 1
	[0134.268] GetFileType (hFile=0x2cc) returned 0x1
	[0134.268] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.268] WriteFile (in: hFile=0x2cc, lpBuffer=0x12616180*, nNumberOfBytesToWrite=0xbf, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12616180*, lpNumberOfBytesWritten=0x12429d00*=0xbf, lpOverlapped=0x12429d0c) returned 1
	[0134.269] GetFileType (hFile=0x2cc) returned 0x1
	[0134.269] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xbf, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0134.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0134.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0134.270] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0134.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.270] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0134.270] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.270] CloseHandle (hObject=0x33c) returned 1
	[0134.270] CloseHandle (hObject=0x2cc) returned 1
	[0134.270] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.271] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841bf650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0134.272] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb20 | out: pbBuffer=0x1244cb20) returned 1
	[0134.272] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788288 | out: pbBuffer=0x12788288) returned 1
	[0134.272] ReadFile (in: hFile=0x2cc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0xd1, lpOverlapped=0x0) returned 1
	[0134.274] GetFileType (hFile=0x2cc) returned 0x1
	[0134.274] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.275] WriteFile (in: hFile=0x2cc, lpBuffer=0x1262e8c0*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1262e8c0*, lpNumberOfBytesWritten=0x124f5d00*=0xd1, lpOverlapped=0x124f5d0c) returned 1
	[0134.275] GetFileType (hFile=0x2cc) returned 0x1
	[0134.275] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xd1, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.275] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0134.275] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0134.275] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0134.275] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788340 | out: pbBuffer=0x12788340) returned 1
	[0134.275] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.275] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.275] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.276] CloseHandle (hObject=0x33c) returned 1
	[0134.276] CloseHandle (hObject=0x2cc) returned 1
	[0134.276] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.276] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.311] SetEvent (hEvent=0x70) returned 1
	[0134.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.311] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0134.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d7cf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0134.312] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd40 | out: pbBuffer=0x1244cd40) returned 1
	[0134.312] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788358 | out: pbBuffer=0x12788358) returned 1
	[0134.312] ReadFile (in: hFile=0x2cc, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x12429d1c*=0xe2, lpOverlapped=0x0) returned 1
	[0134.313] GetFileType (hFile=0x2cc) returned 0x1
	[0134.313] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.313] WriteFile (in: hFile=0x2cc, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x12429d00*=0xe2, lpOverlapped=0x12429d0c) returned 1
	[0134.313] GetFileType (hFile=0x2cc) returned 0x1
	[0134.313] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0134.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0134.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0134.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788440 | out: pbBuffer=0x12788440) returned 1
	[0134.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.314] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0134.314] WriteFile (in: hFile=0x33c, lpBuffer=0x1277a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277a000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.314] CloseHandle (hObject=0x33c) returned 1
	[0134.314] CloseHandle (hObject=0x2cc) returned 1
	[0134.314] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.315] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841df220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0134.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cf60 | out: pbBuffer=0x1244cf60) returned 1
	[0134.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788458 | out: pbBuffer=0x12788458) returned 1
	[0134.320] ReadFile (in: hFile=0x2cc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0xfe, lpOverlapped=0x0) returned 1
	[0134.321] GetFileType (hFile=0x2cc) returned 0x1
	[0134.321] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.321] WriteFile (in: hFile=0x2cc, lpBuffer=0x12778200*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12778200*, lpNumberOfBytesWritten=0x124f5d00*=0xfe, lpOverlapped=0x124f5d0c) returned 1
	[0134.321] GetFileType (hFile=0x2cc) returned 0x1
	[0134.321] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435081 | out: pbBuffer=0x12435081) returned 1
	[0134.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435181 | out: pbBuffer=0x12435181) returned 1
	[0134.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435281 | out: pbBuffer=0x12435281) returned 1
	[0134.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788510 | out: pbBuffer=0x12788510) returned 1
	[0134.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.322] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.322] WriteFile (in: hFile=0x340, lpBuffer=0x1277a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277a500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.322] CloseHandle (hObject=0x340) returned 1
	[0134.322] CloseHandle (hObject=0x2cc) returned 1
	[0134.322] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.323] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f0390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1
	[0134.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244d180 | out: pbBuffer=0x1244d180) returned 1
	[0134.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788528 | out: pbBuffer=0x12788528) returned 1
	[0134.324] ReadFile (in: hFile=0x2cc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f3d1c*=0xdb, lpOverlapped=0x0) returned 1
	[0134.325] GetFileType (hFile=0x2cc) returned 0x1
	[0134.325] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.325] WriteFile (in: hFile=0x2cc, lpBuffer=0x1262f420*, nNumberOfBytesToWrite=0xdb, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1262f420*, lpNumberOfBytesWritten=0x124f3d00*=0xdb, lpOverlapped=0x124f3d0c) returned 1
	[0134.325] GetFileType (hFile=0x2cc) returned 0x1
	[0134.326] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xdb, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435381 | out: pbBuffer=0x12435381) returned 1
	[0134.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435481 | out: pbBuffer=0x12435481) returned 1
	[0134.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435581 | out: pbBuffer=0x12435581) returned 1
	[0134.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127885e0 | out: pbBuffer=0x127885e0) returned 1
	[0134.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.326] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.326] WriteFile (in: hFile=0x340, lpBuffer=0x1277aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277aa00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.327] CloseHandle (hObject=0x340) returned 1
	[0134.327] CloseHandle (hObject=0x2cc) returned 1
	[0134.327] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.328] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.340] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.364] SetEvent (hEvent=0x70) returned 1
	[0134.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.364] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84206320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0134.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244d3a0 | out: pbBuffer=0x1244d3a0) returned 1
	[0134.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127885f8 | out: pbBuffer=0x127885f8) returned 1
	[0134.365] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0134.371] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.371] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0134.371] SetEvent (hEvent=0xa0) returned 1
	[0134.371] SetEvent (hEvent=0x70) returned 1
	[0134.371] SetEvent (hEvent=0x320) returned 1
	[0134.372] ReadFile (in: hFile=0x33c, lpBuffer=0x128e6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e6000*, lpNumberOfBytesRead=0x124f5d1c*=0xd8, lpOverlapped=0x0) returned 1
	[0134.373] GetFileType (hFile=0x33c) returned 0x1
	[0134.373] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.373] WriteFile (in: hFile=0x33c, lpBuffer=0x1262f7a0*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1262f7a0*, lpNumberOfBytesWritten=0x124f5d00*=0xd8, lpOverlapped=0x124f5d0c) returned 1
	[0134.373] GetFileType (hFile=0x33c) returned 0x1
	[0134.373] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435681 | out: pbBuffer=0x12435681) returned 1
	[0134.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435781 | out: pbBuffer=0x12435781) returned 1
	[0134.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435881 | out: pbBuffer=0x12435881) returned 1
	[0134.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127886b0 | out: pbBuffer=0x127886b0) returned 1
	[0134.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.374] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.375] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277af00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277af00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.375] CloseHandle (hObject=0x2cc) returned 1
	[0134.375] CloseHandle (hObject=0x33c) returned 1
	[0134.375] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.377] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0134.378] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0134.378] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0134.378] SetEvent (hEvent=0x70) returned 1
	[0134.378] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0134.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.402] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8421c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0134.402] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0134.403] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0134.403] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f5d1c*=0xfe, lpOverlapped=0x0) returned 1
	[0134.404] GetFileType (hFile=0x33c) returned 0x1
	[0134.405] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.405] WriteFile (in: hFile=0x33c, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f5d00*=0xfe, lpOverlapped=0x124f5d0c) returned 1
	[0134.405] GetFileType (hFile=0x33c) returned 0x1
	[0134.405] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0134.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0134.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0134.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0134.406] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.406] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.406] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.406] CloseHandle (hObject=0x2cc) returned 1
	[0134.406] CloseHandle (hObject=0x33c) returned 1
	[0134.406] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.408] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12723d0c | out: lpMode=0x12723d0c) returned 0
	[0134.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12723ad0 | out: lpFileInformation=0x12723ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842237e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1
	[0134.408] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0134.408] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744398 | out: pbBuffer=0x12744398) returned 1
	[0134.408] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12723d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12723d1c*=0xe3, lpOverlapped=0x0) returned 1
	[0134.410] GetFileType (hFile=0x33c) returned 0x1
	[0134.410] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12723ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.410] WriteFile (in: hFile=0x33c, lpBuffer=0x124b2000*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0x12723d00, lpOverlapped=0x12723d0c | out: lpBuffer=0x124b2000*, lpNumberOfBytesWritten=0x12723d00*=0xe3, lpOverlapped=0x12723d0c) returned 1
	[0134.410] GetFileType (hFile=0x33c) returned 0x1
	[0134.410] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xe3, lpNewFilePointer=0x0, dwMoveMethod=0x12723ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.410] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0134.410] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0134.410] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0134.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744510 | out: pbBuffer=0x12744510) returned 1
	[0134.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.411] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12723d0c | out: lpMode=0x12723d0c) returned 0
	[0134.411] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12723d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12723d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.411] CloseHandle (hObject=0x2cc) returned 1
	[0134.411] CloseHandle (hObject=0x33c) returned 1
	[0134.411] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.413] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.431] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.527] SetEvent (hEvent=0x2f4) returned 1
	[0134.527] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.528] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x844eed30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1
	[0134.528] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0134.528] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744528 | out: pbBuffer=0x12744528) returned 1
	[0134.528] ReadFile (in: hFile=0x33c, lpBuffer=0x12966000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12966000*, lpNumberOfBytesRead=0x124f5d1c*=0x160, lpOverlapped=0x0) returned 1
	[0134.535] GetFileType (hFile=0x33c) returned 0x1
	[0134.535] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.536] WriteFile (in: hFile=0x33c, lpBuffer=0x12986000*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12986000*, lpNumberOfBytesWritten=0x124f5d00*=0x160, lpOverlapped=0x124f5d0c) returned 1
	[0134.536] GetFileType (hFile=0x33c) returned 0x1
	[0134.536] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x160, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.536] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0134.537] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0134.537] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0134.537] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445e0 | out: pbBuffer=0x127445e0) returned 1
	[0134.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.537] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.537] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.537] CloseHandle (hObject=0x340) returned 1
	[0134.538] CloseHandle (hObject=0x33c) returned 1
	[0134.538] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.555] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.583] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.668] SetEvent (hEvent=0x2e8) returned 1
	[0134.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.669] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84240ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84240ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1
	[0134.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0134.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0134.669] ReadFile (in: hFile=0x340, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f5d1c*=0x5f, lpOverlapped=0x0) returned 1
	[0134.671] GetFileType (hFile=0x340) returned 0x1
	[0134.671] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.671] WriteFile (in: hFile=0x340, lpBuffer=0x12456000*, nNumberOfBytesToWrite=0x5f, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12456000*, lpNumberOfBytesWritten=0x124f5d00*=0x5f, lpOverlapped=0x124f5d0c) returned 1
	[0134.671] GetFileType (hFile=0x340) returned 0x1
	[0134.671] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.671] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0134.671] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0134.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0134.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0134.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.672] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.672] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.672] CloseHandle (hObject=0x33c) returned 1
	[0134.672] CloseHandle (hObject=0x340) returned 1
	[0134.673] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.786] SwitchToThread () returned 1
	[0134.798] SetEvent (hEvent=0x320) returned 1
	[0134.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.799] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1
	[0134.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0134.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0134.799] ReadFile (in: hFile=0x340, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f3d1c*=0xcf, lpOverlapped=0x0) returned 1
	[0134.801] GetFileType (hFile=0x340) returned 0x1
	[0134.801] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.801] WriteFile (in: hFile=0x340, lpBuffer=0x12634000*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12634000*, lpNumberOfBytesWritten=0x124f3d00*=0xcf, lpOverlapped=0x124f3d0c) returned 1
	[0134.801] GetFileType (hFile=0x340) returned 0x1
	[0134.801] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xcf, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400401 | out: pbBuffer=0x12400401) returned 1
	[0134.803] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0134.803] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0134.803] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0134.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.804] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.804] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.804] CloseHandle (hObject=0x33c) returned 1
	[0134.804] CloseHandle (hObject=0x340) returned 1
	[0134.805] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.806] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad)) returned 1
	[0134.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c760 | out: pbBuffer=0x1244c760) returned 1
	[0134.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0134.807] ReadFile (in: hFile=0x340, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f5d1c*=0xad, lpOverlapped=0x0) returned 1
	[0134.808] GetFileType (hFile=0x340) returned 0x1
	[0134.808] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.808] WriteFile (in: hFile=0x340, lpBuffer=0x12528840*, nNumberOfBytesToWrite=0xad, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12528840*, lpNumberOfBytesWritten=0x124f5d00*=0xad, lpOverlapped=0x124f5d0c) returned 1
	[0134.808] GetFileType (hFile=0x340) returned 0x1
	[0134.809] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xad, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0134.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0134.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0134.810] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5e0 | out: pbBuffer=0x1251e5e0) returned 1
	[0134.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.810] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.810] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.810] CloseHandle (hObject=0x33c) returned 1
	[0134.810] CloseHandle (hObject=0x340) returned 1
	[0134.810] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.811] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.834] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.843] SetEvent (hEvent=0x320) returned 1
	[0134.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.843] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a)) returned 1
	[0134.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c980 | out: pbBuffer=0x1244c980) returned 1
	[0134.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f8 | out: pbBuffer=0x1251e5f8) returned 1
	[0134.844] ReadFile (in: hFile=0x340, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f3d1c*=0x12a, lpOverlapped=0x0) returned 1
	[0134.884] GetFileType (hFile=0x340) returned 0x1
	[0134.884] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.884] WriteFile (in: hFile=0x340, lpBuffer=0x12458c80*, nNumberOfBytesToWrite=0x12a, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12458c80*, lpNumberOfBytesWritten=0x124f3d00*=0x12a, lpOverlapped=0x124f3d0c) returned 1
	[0134.884] GetFileType (hFile=0x340) returned 0x1
	[0134.884] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x12a, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0134.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0134.885] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0134.885] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0134.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.885] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.885] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.885] CloseHandle (hObject=0x33c) returned 1
	[0134.885] CloseHandle (hObject=0x340) returned 1
	[0134.885] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.886] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.895] SetEvent (hEvent=0x80) returned 1
	[0134.896] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.911] SetEvent (hEvent=0x80) returned 1
	[0134.911] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.983] SetEvent (hEvent=0x80) returned 1
	[0134.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.983] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1271fad0 | out: lpFileInformation=0x1271fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0134.984] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0134.984] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0134.984] ReadFile (in: hFile=0x340, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1271fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1271fd1c*=0xd2, lpOverlapped=0x0) returned 1
	[0134.986] GetFileType (hFile=0x340) returned 0x1
	[0134.986] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.986] WriteFile (in: hFile=0x340, lpBuffer=0x127e00e0*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x1271fd00, lpOverlapped=0x1271fd0c | out: lpBuffer=0x127e00e0*, lpNumberOfBytesWritten=0x1271fd00*=0xd2, lpOverlapped=0x1271fd0c) returned 1
	[0134.987] GetFileType (hFile=0x340) returned 0x1
	[0134.987] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xd2, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.987] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0134.987] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0134.987] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0134.987] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0134.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0134.988] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.988] WriteFile (in: hFile=0x32c, lpBuffer=0x1298c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1271fd0c, lpOverlapped=0x0 | out: lpBuffer=0x1298c000*, lpNumberOfBytesWritten=0x1271fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.988] CloseHandle (hObject=0x32c) returned 1
	[0134.988] CloseHandle (hObject=0x340) returned 1
	[0134.988] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.989] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0134.999] SetEvent (hEvent=0x80) returned 1
	[0134.999] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.000] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1
	[0135.000] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0135.000] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104e8 | out: pbBuffer=0x124104e8) returned 1
	[0135.000] ReadFile (in: hFile=0x340, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12429d1c*=0xac, lpOverlapped=0x0) returned 1
	[0135.002] GetFileType (hFile=0x340) returned 0x1
	[0135.002] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.002] WriteFile (in: hFile=0x340, lpBuffer=0x125de4d0*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125de4d0*, lpNumberOfBytesWritten=0x12429d00*=0xac, lpOverlapped=0x12429d0c) returned 1
	[0135.002] GetFileType (hFile=0x340) returned 0x1
	[0135.002] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xac, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0135.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0135.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0135.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105d0 | out: pbBuffer=0x124105d0) returned 1
	[0135.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.003] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.003] WriteFile (in: hFile=0x32c, lpBuffer=0x1298c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1298c500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.004] CloseHandle (hObject=0x32c) returned 1
	[0135.004] CloseHandle (hObject=0x340) returned 1
	[0135.004] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.006] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1
	[0135.006] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0135.006] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105e8 | out: pbBuffer=0x124105e8) returned 1
	[0135.006] ReadFile (in: hFile=0x340, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x1242bd1c*=0x11e, lpOverlapped=0x0) returned 1
	[0135.008] GetFileType (hFile=0x340) returned 0x1
	[0135.008] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.008] WriteFile (in: hFile=0x340, lpBuffer=0x125e5b00*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125e5b00*, lpNumberOfBytesWritten=0x1242bd00*=0x11e, lpOverlapped=0x1242bd0c) returned 1
	[0135.008] GetFileType (hFile=0x340) returned 0x1
	[0135.008] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x11e, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0135.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0135.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0135.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410710 | out: pbBuffer=0x12410710) returned 1
	[0135.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.009] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.009] WriteFile (in: hFile=0x32c, lpBuffer=0x1298ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1298ca00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.009] CloseHandle (hObject=0x32c) returned 1
	[0135.009] CloseHandle (hObject=0x340) returned 1
	[0135.010] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.011] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.026] SetEvent (hEvent=0x80) returned 1
	[0135.026] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.031] SetEvent (hEvent=0x80) returned 1
	[0135.031] SetEvent (hEvent=0x2f4) returned 1
	[0135.031] SetEvent (hEvent=0x70) returned 1
	[0135.031] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.077] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.087] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.102] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.112] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.121] SetEvent (hEvent=0x80) returned 1
	[0135.121] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.124] SetEvent (hEvent=0x320) returned 1
	[0135.124] SetEvent (hEvent=0x70) returned 1
	[0135.124] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.231] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.722] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.749] SetEvent (hEvent=0x320) returned 1
	[0135.749] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.752] SetEvent (hEvent=0x2f4) returned 1
	[0135.752] SetEvent (hEvent=0x70) returned 1
	[0135.752] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.754] SetEvent (hEvent=0x80) returned 1
	[0135.754] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.754] SetEvent (hEvent=0x80) returned 1
	[0135.754] SetEvent (hEvent=0x2e8) returned 1
	[0135.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.755] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.755] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.756] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.756] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.758] CloseHandle (hObject=0x2cc) returned 1
	[0135.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297)) returned 1
	[0135.764] SetEvent (hEvent=0xa0) returned 1
	[0135.764] SetEvent (hEvent=0x320) returned 1
	[0135.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.764] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.764] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.764] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.765] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.765] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.765] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.765] WriteFile (in: hFile=0x34c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.767] CloseHandle (hObject=0x34c) returned 1
	[0135.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1
	[0135.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.768] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.768] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.768] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.768] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.768] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.769] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.769] WriteFile (in: hFile=0x34c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.770] CloseHandle (hObject=0x34c) returned 1
	[0135.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd)) returned 1
	[0135.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.774] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.774] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.774] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.774] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.774] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.774] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.775] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.775] WriteFile (in: hFile=0x32c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.776] CloseHandle (hObject=0x32c) returned 1
	[0135.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b)) returned 1
	[0135.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.777] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.777] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.777] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.777] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.777] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.778] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.778] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.778] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.778] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.779] CloseHandle (hObject=0x32c) returned 1
	[0135.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1
	[0135.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.790] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.790] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.790] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.790] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.790] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.791] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.791] WriteFile (in: hFile=0x2cc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.793] CloseHandle (hObject=0x2cc) returned 1
	[0135.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1
	[0135.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.794] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826d0dd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d34e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1
	[0135.794] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0135.794] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0135.794] ReadFile (in: hFile=0x2cc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f1d1c*=0x269, lpOverlapped=0x0) returned 1
	[0135.810] GetFileType (hFile=0x2cc) returned 0x1
	[0135.810] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.810] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245ec80*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1245ec80*, lpNumberOfBytesWritten=0x124f1d00*=0x269, lpOverlapped=0x124f1d0c) returned 1
	[0135.811] GetFileType (hFile=0x2cc) returned 0x1
	[0135.811] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x269, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0135.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0135.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0135.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e878 | out: pbBuffer=0x1251e878) returned 1
	[0135.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.811] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.811] WriteFile (in: hFile=0x34c, lpBuffer=0x125e8500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e8500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.812] CloseHandle (hObject=0x34c) returned 1
	[0135.812] CloseHandle (hObject=0x2cc) returned 1
	[0135.812] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.813] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.839] SetEvent (hEvent=0x2e8) returned 1
	[0135.839] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.842] SetEvent (hEvent=0x70) returned 1
	[0135.842] SetEvent (hEvent=0x320) returned 1
	[0135.842] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.845] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.868] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.876] SetEvent (hEvent=0x320) returned 1
	[0135.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.876] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4)) returned 1
	[0135.876] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0135.876] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0135.877] ReadFile (in: hFile=0x32c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0x2b4, lpOverlapped=0x0) returned 1
	[0135.897] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.932] GetFileType (hFile=0x32c) returned 0x1
	[0135.932] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.932] WriteFile (in: hFile=0x32c, lpBuffer=0x12458000*, nNumberOfBytesToWrite=0x2b4, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12458000*, lpNumberOfBytesWritten=0x124f5d00*=0x2b4, lpOverlapped=0x124f5d0c) returned 1
	[0135.932] GetFileType (hFile=0x32c) returned 0x1
	[0135.932] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x2b4, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0135.933] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0135.933] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0135.933] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0135.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.933] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.933] WriteFile (in: hFile=0x34c, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.933] CloseHandle (hObject=0x34c) returned 1
	[0135.933] CloseHandle (hObject=0x32c) returned 1
	[0135.934] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.935] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.958] SetEvent (hEvent=0x80) returned 1
	[0135.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.959] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a)) returned 1
	[0135.959] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6c0 | out: pbBuffer=0x1244c6c0) returned 1
	[0135.959] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0135.959] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0135.960] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0135.960] SetEvent (hEvent=0xa0) returned 1
	[0135.960] SetEvent (hEvent=0x80) returned 1
	[0135.960] SetEvent (hEvent=0x70) returned 1
	[0135.961] ReadFile (in: hFile=0x32c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1242bd1c*=0x30a, lpOverlapped=0x0) returned 1
	[0135.966] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.968] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0135.979] SetEvent (hEvent=0x2e8) returned 1
	[0135.979] GetFileType (hFile=0x32c) returned 0x1
	[0135.979] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.979] WriteFile (in: hFile=0x32c, lpBuffer=0x12474000*, nNumberOfBytesToWrite=0x30a, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12474000*, lpNumberOfBytesWritten=0x1242bd00*=0x30a, lpOverlapped=0x1242bd0c) returned 1
	[0135.979] GetFileType (hFile=0x32c) returned 0x1
	[0135.979] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x30a, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.979] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0135.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0135.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0135.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0135.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.980] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.980] WriteFile (in: hFile=0x2cc, lpBuffer=0x1297e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1297e000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.980] CloseHandle (hObject=0x2cc) returned 1
	[0135.981] CloseHandle (hObject=0x32c) returned 1
	[0135.981] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.982] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.014] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x127cfd0c | out: lpMode=0x127cfd0c) returned 0
	[0136.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127cfad0 | out: lpFileInformation=0x127cfad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1
	[0136.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0136.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0136.015] ReadFile (in: hFile=0x2cc, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x127cfd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x127cfd1c*=0x29a, lpOverlapped=0x0) returned 1
	[0136.039] GetFileType (hFile=0x2cc) returned 0x1
	[0136.039] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x127cfce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.039] WriteFile (in: hFile=0x2cc, lpBuffer=0x1260c2c0*, nNumberOfBytesToWrite=0x29a, lpNumberOfBytesWritten=0x127cfd00, lpOverlapped=0x127cfd0c | out: lpBuffer=0x1260c2c0*, lpNumberOfBytesWritten=0x127cfd00*=0x29a, lpOverlapped=0x127cfd0c) returned 1
	[0136.039] GetFileType (hFile=0x2cc) returned 0x1
	[0136.039] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x29a, lpNewFilePointer=0x0, dwMoveMethod=0x127cfce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.040] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0136.040] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0136.040] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0136.040] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788190 | out: pbBuffer=0x12788190) returned 1
	[0136.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.040] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x127cfd0c | out: lpMode=0x127cfd0c) returned 0
	[0136.040] WriteFile (in: hFile=0x34c, lpBuffer=0x1297e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x127cfd0c, lpOverlapped=0x0 | out: lpBuffer=0x1297e500*, lpNumberOfBytesWritten=0x127cfd0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.040] CloseHandle (hObject=0x34c) returned 1
	[0136.041] CloseHandle (hObject=0x2cc) returned 1
	[0136.041] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.042] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.252] SetEvent (hEvent=0x80) returned 1
	[0136.252] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.269] SetEvent (hEvent=0x70) returned 1
	[0136.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.270] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827e72f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e9a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29f)) returned 1
	[0136.270] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0136.270] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0136.270] ReadFile (in: hFile=0x344, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f1d1c*=0x29f, lpOverlapped=0x0) returned 1
	[0136.289] GetFileType (hFile=0x344) returned 0x1
	[0136.289] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.289] WriteFile (in: hFile=0x344, lpBuffer=0x12606000*, nNumberOfBytesToWrite=0x29f, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12606000*, lpNumberOfBytesWritten=0x124f1d00*=0x29f, lpOverlapped=0x124f1d0c) returned 1
	[0136.289] GetFileType (hFile=0x344) returned 0x1
	[0136.289] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x29f, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0136.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0136.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0136.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0136.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.290] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.290] WriteFile (in: hFile=0x34c, lpBuffer=0x125e4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.290] CloseHandle (hObject=0x34c) returned 1
	[0136.291] CloseHandle (hObject=0x344) returned 1
	[0136.291] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.292] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289)) returned 1
	[0136.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0136.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0136.293] ReadFile (in: hFile=0x344, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f5d1c*=0x289, lpOverlapped=0x0) returned 1
	[0136.325] GetFileType (hFile=0x344) returned 0x1
	[0136.325] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.325] WriteFile (in: hFile=0x344, lpBuffer=0x12606580*, nNumberOfBytesToWrite=0x289, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12606580*, lpNumberOfBytesWritten=0x124f5d00*=0x289, lpOverlapped=0x124f5d0c) returned 1
	[0136.326] GetFileType (hFile=0x344) returned 0x1
	[0136.326] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x289, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0136.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0136.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0136.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0136.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.327] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.327] WriteFile (in: hFile=0x32c, lpBuffer=0x125e4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.327] CloseHandle (hObject=0x32c) returned 1
	[0136.327] CloseHandle (hObject=0x344) returned 1
	[0136.327] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.329] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a)) returned 1
	[0136.329] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0136.329] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0136.329] ReadFile (in: hFile=0x344, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x12429d1c*=0x28a, lpOverlapped=0x0) returned 1
	[0136.345] GetFileType (hFile=0x344) returned 0x1
	[0136.345] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.345] WriteFile (in: hFile=0x344, lpBuffer=0x12606b00*, nNumberOfBytesToWrite=0x28a, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12606b00*, lpNumberOfBytesWritten=0x12429d00*=0x28a, lpOverlapped=0x12429d0c) returned 1
	[0136.346] GetFileType (hFile=0x344) returned 0x1
	[0136.346] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x28a, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0136.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0136.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec901 | out: pbBuffer=0x124ec901) returned 1
	[0136.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0136.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.347] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.347] WriteFile (in: hFile=0x32c, lpBuffer=0x125e4a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.347] CloseHandle (hObject=0x32c) returned 1
	[0136.347] CloseHandle (hObject=0x344) returned 1
	[0136.347] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.349] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.393] SetEvent (hEvent=0x70) returned 1
	[0136.393] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.399] SetEvent (hEvent=0x2e4) returned 1
	[0136.399] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0136.400] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0136.404] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0136.404] SetEvent (hEvent=0x70) returned 1
	[0136.404] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0136.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.412] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82888510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8288ac20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e)) returned 1
	[0136.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0136.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0136.413] ReadFile (in: hFile=0x2cc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0136.460] GetFileType (hFile=0x2cc) returned 0x1
	[0136.460] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.461] WriteFile (in: hFile=0x2cc, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0136.461] GetFileType (hFile=0x2cc) returned 0x1
	[0136.461] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0136.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0136.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0136.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744510 | out: pbBuffer=0x12744510) returned 1
	[0136.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.462] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.462] WriteFile (in: hFile=0x32c, lpBuffer=0x125e4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.463] CloseHandle (hObject=0x32c) returned 1
	[0136.463] CloseHandle (hObject=0x2cc) returned 1
	[0136.463] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.465] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd)) returned 1
	[0136.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e460 | out: pbBuffer=0x1252e460) returned 1
	[0136.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744528 | out: pbBuffer=0x12744528) returned 1
	[0136.465] ReadFile (in: hFile=0x2cc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12429d1c*=0x6cd, lpOverlapped=0x0) returned 1
	[0136.481] GetFileType (hFile=0x2cc) returned 0x1
	[0136.481] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.481] WriteFile (in: hFile=0x2cc, lpBuffer=0x12518700*, nNumberOfBytesToWrite=0x6cd, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12518700*, lpNumberOfBytesWritten=0x12429d00*=0x6cd, lpOverlapped=0x12429d0c) returned 1
	[0136.481] GetFileType (hFile=0x2cc) returned 0x1
	[0136.481] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x6cd, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.481] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0136.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0136.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0136.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744700 | out: pbBuffer=0x12744700) returned 1
	[0136.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0136.484] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.484] WriteFile (in: hFile=0x100, lpBuffer=0x125e4f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.484] CloseHandle (hObject=0x100) returned 1
	[0136.484] CloseHandle (hObject=0x2cc) returned 1
	[0136.484] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.486] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.511] SetEvent (hEvent=0x80) returned 1
	[0136.511] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.514] SetEvent (hEvent=0x70) returned 1
	[0136.514] SetEvent (hEvent=0x2e8) returned 1
	[0136.514] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.520] SwitchToThread () returned 1
	[0136.547] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.597] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.607] SetEvent (hEvent=0x30c) returned 1
	[0136.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.609] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x180f)) returned 1
	[0136.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0136.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0136.609] ReadFile (in: hFile=0x32c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f1d1c*=0x180f, lpOverlapped=0x0) returned 1
	[0136.620] GetFileType (hFile=0x32c) returned 0x1
	[0136.620] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.620] WriteFile (in: hFile=0x32c, lpBuffer=0x124ff980*, nNumberOfBytesToWrite=0x180f, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124ff980*, lpNumberOfBytesWritten=0x124f1d00*=0x180f, lpOverlapped=0x124f1d0c) returned 1
	[0136.620] GetFileType (hFile=0x32c) returned 0x1
	[0136.620] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x180f, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0136.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0136.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0136.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788100 | out: pbBuffer=0x12788100) returned 1
	[0136.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.621] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.621] WriteFile (in: hFile=0x33c, lpBuffer=0x12768000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.622] CloseHandle (hObject=0x33c) returned 1
	[0136.622] CloseHandle (hObject=0x32c) returned 1
	[0136.622] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.624] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.634] SetEvent (hEvent=0x30c) returned 1
	[0136.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.635] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0136.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138)) returned 1
	[0136.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0136.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788128 | out: pbBuffer=0x12788128) returned 1
	[0136.635] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f3d1c*=0x138, lpOverlapped=0x0) returned 1
	[0136.636] GetFileType (hFile=0x33c) returned 0x1
	[0136.636] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.636] WriteFile (in: hFile=0x33c, lpBuffer=0x12634280*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12634280*, lpNumberOfBytesWritten=0x124f3d00*=0x138, lpOverlapped=0x124f3d0c) returned 1
	[0136.637] GetFileType (hFile=0x33c) returned 0x1
	[0136.637] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0136.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0136.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0136.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127882c0 | out: pbBuffer=0x127882c0) returned 1
	[0136.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.638] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0136.638] WriteFile (in: hFile=0x34c, lpBuffer=0x12768a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.638] CloseHandle (hObject=0x34c) returned 1
	[0136.638] CloseHandle (hObject=0x33c) returned 1
	[0136.638] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.640] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.724] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.725] SetEvent (hEvent=0x30c) returned 1
	[0136.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.727] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0136.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732760 | out: pbBuffer=0x12732760) returned 1
	[0136.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882d8 | out: pbBuffer=0x127882d8) returned 1
	[0136.727] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0136.728] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0136.728] SetEvent (hEvent=0xa0) returned 1
	[0136.728] SetEvent (hEvent=0x30c) returned 1
	[0136.729] ReadFile (in: hFile=0x32c, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x12429d1c*=0xfe, lpOverlapped=0x0) returned 1
	[0136.730] GetFileType (hFile=0x32c) returned 0x1
	[0136.730] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.730] WriteFile (in: hFile=0x32c, lpBuffer=0x1271c000*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1271c000*, lpNumberOfBytesWritten=0x12429d00*=0xfe, lpOverlapped=0x12429d0c) returned 1
	[0136.731] GetFileType (hFile=0x32c) returned 0x1
	[0136.731] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0136.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0136.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0136.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127883a0 | out: pbBuffer=0x127883a0) returned 1
	[0136.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.732] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.732] WriteFile (in: hFile=0x33c, lpBuffer=0x12768f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.732] CloseHandle (hObject=0x33c) returned 1
	[0136.732] CloseHandle (hObject=0x32c) returned 1
	[0136.732] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.734] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0136.735] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0136.735] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0136.735] SetEvent (hEvent=0x2e4) returned 1
	[0136.735] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0136.740] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.752] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.754] SetEvent (hEvent=0x80) returned 1
	[0136.754] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.755] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1
	[0136.755] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0136.755] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0136.755] ReadFile (in: hFile=0x32c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0xec, lpOverlapped=0x0) returned 1
	[0136.756] GetFileType (hFile=0x32c) returned 0x1
	[0136.756] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.757] WriteFile (in: hFile=0x32c, lpBuffer=0x124b8000*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124b8000*, lpNumberOfBytesWritten=0x1242bd00*=0xec, lpOverlapped=0x1242bd0c) returned 1
	[0136.757] GetFileType (hFile=0x32c) returned 0x1
	[0136.757] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0136.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0136.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0136.758] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0136.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.758] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.758] WriteFile (in: hFile=0x33c, lpBuffer=0x12768000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12768000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.758] CloseHandle (hObject=0x33c) returned 1
	[0136.758] CloseHandle (hObject=0x32c) returned 1
	[0136.758] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.760] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.791] SetEvent (hEvent=0x80) returned 1
	[0136.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.792] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0136.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1
	[0136.792] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0136.792] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0136.792] ReadFile (in: hFile=0x32c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f3d1c*=0x14c, lpOverlapped=0x0) returned 1
	[0136.793] GetFileType (hFile=0x32c) returned 0x1
	[0136.793] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.793] WriteFile (in: hFile=0x32c, lpBuffer=0x1247c580*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1247c580*, lpNumberOfBytesWritten=0x124f3d00*=0x14c, lpOverlapped=0x124f3d0c) returned 1
	[0136.794] GetFileType (hFile=0x32c) returned 0x1
	[0136.794] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x14c, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.794] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0136.794] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0136.794] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0136.794] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0136.794] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.794] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0136.794] WriteFile (in: hFile=0x33c, lpBuffer=0x12768500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.795] CloseHandle (hObject=0x33c) returned 1
	[0136.795] CloseHandle (hObject=0x32c) returned 1
	[0136.795] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.807] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.823] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.828] SetEvent (hEvent=0x30c) returned 1
	[0136.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.829] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1
	[0136.829] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0136.829] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0136.829] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f1d1c*=0xea, lpOverlapped=0x0) returned 1
	[0136.831] GetFileType (hFile=0x33c) returned 0x1
	[0136.831] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.831] WriteFile (in: hFile=0x33c, lpBuffer=0x124b80f0*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124b80f0*, lpNumberOfBytesWritten=0x124f1d00*=0xea, lpOverlapped=0x124f1d0c) returned 1
	[0136.831] GetFileType (hFile=0x33c) returned 0x1
	[0136.831] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xea, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0136.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0136.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0136.832] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e720 | out: pbBuffer=0x1251e720) returned 1
	[0136.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.832] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.832] WriteFile (in: hFile=0x34c, lpBuffer=0x12768a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.832] CloseHandle (hObject=0x34c) returned 1
	[0136.832] CloseHandle (hObject=0x33c) returned 1
	[0136.833] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.834] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.904] SwitchToThread () returned 1
	[0136.905] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0136.905] SetEvent (hEvent=0x2e4) returned 1
	[0136.905] SetEvent (hEvent=0x30c) returned 1
	[0136.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.906] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12989d0c | out: lpMode=0x12989d0c) returned 0
	[0136.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12989ad0 | out: lpFileInformation=0x12989ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121)) returned 1
	[0136.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0136.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0136.907] ReadFile (in: hFile=0x32c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12989d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12989d1c*=0x121, lpOverlapped=0x0) returned 1
	[0136.909] GetFileType (hFile=0x32c) returned 0x1
	[0136.909] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12989ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.909] WriteFile (in: hFile=0x32c, lpBuffer=0x1261a280*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x12989d00, lpOverlapped=0x12989d0c | out: lpBuffer=0x1261a280*, lpNumberOfBytesWritten=0x12989d00*=0x121, lpOverlapped=0x12989d0c) returned 1
	[0136.909] GetFileType (hFile=0x32c) returned 0x1
	[0136.909] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x121, lpNewFilePointer=0x0, dwMoveMethod=0x12989ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.909] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8101 | out: pbBuffer=0x127e8101) returned 1
	[0136.909] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8201 | out: pbBuffer=0x127e8201) returned 1
	[0136.910] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8301 | out: pbBuffer=0x127e8301) returned 1
	[0136.910] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0136.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.910] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12989d0c | out: lpMode=0x12989d0c) returned 0
	[0136.910] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12989d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12989d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.910] CloseHandle (hObject=0x33c) returned 1
	[0136.910] CloseHandle (hObject=0x32c) returned 1
	[0136.911] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.912] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1
	[0136.913] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0136.913] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0136.913] ReadFile (in: hFile=0x32c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0x10c, lpOverlapped=0x0) returned 1
	[0136.914] GetFileType (hFile=0x32c) returned 0x1
	[0136.914] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.914] WriteFile (in: hFile=0x32c, lpBuffer=0x1262ad80*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1262ad80*, lpNumberOfBytesWritten=0x12429d00*=0x10c, lpOverlapped=0x12429d0c) returned 1
	[0136.915] GetFileType (hFile=0x32c) returned 0x1
	[0136.915] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.915] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0136.915] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0136.915] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0136.915] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0136.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.915] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.915] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.916] CloseHandle (hObject=0x33c) returned 1
	[0136.916] CloseHandle (hObject=0x32c) returned 1
	[0136.916] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.917] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.918] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12985d0c | out: lpMode=0x12985d0c) returned 0
	[0136.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12985ad0 | out: lpFileInformation=0x12985ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0136.918] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0136.918] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0136.918] ReadFile (in: hFile=0x32c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12985d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12985d1c*=0xe6, lpOverlapped=0x0) returned 1
	[0136.919] GetFileType (hFile=0x32c) returned 0x1
	[0136.919] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12985ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.920] WriteFile (in: hFile=0x32c, lpBuffer=0x12474000*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x12985d00, lpOverlapped=0x12985d0c | out: lpBuffer=0x12474000*, lpNumberOfBytesWritten=0x12985d00*=0xe6, lpOverlapped=0x12985d0c) returned 1
	[0136.920] GetFileType (hFile=0x32c) returned 0x1
	[0136.920] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xe6, lpNewFilePointer=0x0, dwMoveMethod=0x12985ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0136.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0136.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0136.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445f0 | out: pbBuffer=0x127445f0) returned 1
	[0136.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.921] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12985d0c | out: lpMode=0x12985d0c) returned 0
	[0136.921] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12985d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12985d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.921] CloseHandle (hObject=0x33c) returned 1
	[0136.921] CloseHandle (hObject=0x32c) returned 1
	[0136.921] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.923] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.923] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.923] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.923] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.923] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.925] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.925] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.927] CloseHandle (hObject=0x32c) returned 1
	[0136.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1
	[0136.928] SetEvent (hEvent=0x30c) returned 1
	[0136.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.929] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.930] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.930] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.930] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.930] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.932] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.932] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.933] CloseHandle (hObject=0x32c) returned 1
	[0136.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1
	[0136.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.934] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.934] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.934] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.934] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.934] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.934] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.936] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.936] WriteFile (in: hFile=0x32c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.938] CloseHandle (hObject=0x32c) returned 1
	[0136.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1
	[0136.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.939] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.939] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.939] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.939] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.940] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.958] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.958] WriteFile (in: hFile=0x32c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.960] CloseHandle (hObject=0x32c) returned 1
	[0136.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd)) returned 1
	[0136.961] SetEvent (hEvent=0x2e4) returned 1
	[0136.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.962] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.962] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.962] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.962] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.962] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.963] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.963] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.965] CloseHandle (hObject=0x32c) returned 1
	[0136.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee)) returned 1
	[0136.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.966] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.966] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.966] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.966] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.966] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.967] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.967] WriteFile (in: hFile=0x32c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.969] CloseHandle (hObject=0x32c) returned 1
	[0136.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0136.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.970] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.970] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.970] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.970] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.970] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.981] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.981] WriteFile (in: hFile=0x32c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.983] CloseHandle (hObject=0x32c) returned 1
	[0136.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0136.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.984] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.984] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.985] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.985] WriteFile (in: hFile=0x32c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.987] CloseHandle (hObject=0x32c) returned 1
	[0136.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0136.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.988] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0136.988] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0136.988] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744858 | out: pbBuffer=0x12744858) returned 1
	[0136.988] ReadFile (in: hFile=0x32c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x12429d1c*=0xd2, lpOverlapped=0x0) returned 1
	[0136.990] GetFileType (hFile=0x32c) returned 0x1
	[0136.990] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.990] WriteFile (in: hFile=0x32c, lpBuffer=0x127cea80*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127cea80*, lpNumberOfBytesWritten=0x12429d00*=0xd2, lpOverlapped=0x12429d0c) returned 1
	[0136.990] GetFileType (hFile=0x32c) returned 0x1
	[0136.990] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xd2, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.990] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0136.990] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0136.990] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0136.991] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744910 | out: pbBuffer=0x12744910) returned 1
	[0136.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.991] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.991] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.991] CloseHandle (hObject=0x33c) returned 1
	[0136.991] CloseHandle (hObject=0x32c) returned 1
	[0136.991] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\no\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.993] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0136.993] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4a0 | out: pbBuffer=0x1240f4a0) returned 1
	[0136.993] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744928 | out: pbBuffer=0x12744928) returned 1
	[0136.993] ReadFile (in: hFile=0x32c, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x12429d1c*=0x108, lpOverlapped=0x0) returned 1
	[0137.006] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0137.013] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0137.014] SetEvent (hEvent=0x2e4) returned 1
	[0137.014] SetEvent (hEvent=0x80) returned 1
	[0137.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.019] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.019] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.019] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.019] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.019] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.021] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.021] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.023] CloseHandle (hObject=0x32c) returned 1
	[0137.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0137.023] SetEvent (hEvent=0x80) returned 1
	[0137.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.024] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.024] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.024] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.024] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.025] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.025] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.027] CloseHandle (hObject=0x32c) returned 1
	[0137.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0137.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.029] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.030] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.030] WriteFile (in: hFile=0x32c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.031] CloseHandle (hObject=0x32c) returned 1
	[0137.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1
	[0137.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.033] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.033] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.033] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.033] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.034] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.034] WriteFile (in: hFile=0x32c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.036] CloseHandle (hObject=0x32c) returned 1
	[0137.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1
	[0137.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.037] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.037] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.037] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.037] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.037] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.038] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.038] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.040] CloseHandle (hObject=0x32c) returned 1
	[0137.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0137.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.041] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1
	[0137.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0137.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e3a8 | out: pbBuffer=0x1251e3a8) returned 1
	[0137.041] ReadFile (in: hFile=0x32c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12429d1c*=0x11e, lpOverlapped=0x0) returned 1
	[0137.042] GetFileType (hFile=0x32c) returned 0x1
	[0137.043] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.043] WriteFile (in: hFile=0x32c, lpBuffer=0x12607b00*, nNumberOfBytesToWrite=0x11e, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12607b00*, lpNumberOfBytesWritten=0x12429d00*=0x11e, lpOverlapped=0x12429d0c) returned 1
	[0137.043] GetFileType (hFile=0x32c) returned 0x1
	[0137.043] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x11e, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.043] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0137.043] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0137.043] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0137.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e6f0 | out: pbBuffer=0x1251e6f0) returned 1
	[0137.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.044] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.044] WriteFile (in: hFile=0x33c, lpBuffer=0x12990000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12990000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.044] CloseHandle (hObject=0x33c) returned 1
	[0137.044] CloseHandle (hObject=0x32c) returned 1
	[0137.044] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ru\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.046] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x656b8f00, ftLastWriteTime.dwHighDateTime=0x1cccade, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0137.046] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0137.046] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e708 | out: pbBuffer=0x1251e708) returned 1
	[0137.046] ReadFile (in: hFile=0x32c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0xd2, lpOverlapped=0x0) returned 1
	[0137.048] GetFileType (hFile=0x32c) returned 0x1
	[0137.048] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.048] WriteFile (in: hFile=0x32c, lpBuffer=0x125e22a0*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125e22a0*, lpNumberOfBytesWritten=0x12429d00*=0xd2, lpOverlapped=0x12429d0c) returned 1
	[0137.048] GetFileType (hFile=0x32c) returned 0x1
	[0137.048] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xd2, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0137.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0137.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0137.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e810 | out: pbBuffer=0x1251e810) returned 1
	[0137.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.049] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.049] WriteFile (in: hFile=0x33c, lpBuffer=0x12990500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12990500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.049] CloseHandle (hObject=0x33c) returned 1
	[0137.050] CloseHandle (hObject=0x32c) returned 1
	[0137.050] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\se\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.094] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0137.094] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0137.094] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e838 | out: pbBuffer=0x1251e838) returned 1
	[0137.094] ReadFile (in: hFile=0x32c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f1d1c*=0xde, lpOverlapped=0x0) returned 1
	[0137.096] GetFileType (hFile=0x32c) returned 0x1
	[0137.096] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.096] WriteFile (in: hFile=0x32c, lpBuffer=0x125e2620*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x125e2620*, lpNumberOfBytesWritten=0x124f1d00*=0xde, lpOverlapped=0x124f1d0c) returned 1
	[0137.096] GetFileType (hFile=0x32c) returned 0x1
	[0137.096] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xde, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.096] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0137.097] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0137.097] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0137.097] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ea30 | out: pbBuffer=0x1251ea30) returned 1
	[0137.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.097] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.097] WriteFile (in: hFile=0x34c, lpBuffer=0x12990f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12990f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.098] CloseHandle (hObject=0x34c) returned 1
	[0137.098] CloseHandle (hObject=0x32c) returned 1
	[0137.098] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.100] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0137.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1
	[0137.100] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0137.100] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ea68 | out: pbBuffer=0x1251ea68) returned 1
	[0137.100] ReadFile (in: hFile=0x32c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x1242bd1c*=0xea, lpOverlapped=0x0) returned 1
	[0137.101] GetFileType (hFile=0x32c) returned 0x1
	[0137.101] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.102] WriteFile (in: hFile=0x32c, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x1242bd00*=0xea, lpOverlapped=0x1242bd0c) returned 1
	[0137.102] GetFileType (hFile=0x32c) returned 0x1
	[0137.102] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xea, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0137.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0137.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0137.103] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251eb50 | out: pbBuffer=0x1251eb50) returned 1
	[0137.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.103] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0137.103] WriteFile (in: hFile=0x34c, lpBuffer=0x12991400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12991400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.103] CloseHandle (hObject=0x34c) returned 1
	[0137.103] CloseHandle (hObject=0x32c) returned 1
	[0137.103] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.105] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0137.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x127)) returned 1
	[0137.105] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8c0 | out: pbBuffer=0x1252e8c0) returned 1
	[0137.105] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251eb68 | out: pbBuffer=0x1251eb68) returned 1
	[0137.105] ReadFile (in: hFile=0x32c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f3d1c*=0x127, lpOverlapped=0x0) returned 1
	[0137.107] GetFileType (hFile=0x32c) returned 0x1
	[0137.107] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.107] WriteFile (in: hFile=0x32c, lpBuffer=0x125f6500*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125f6500*, lpNumberOfBytesWritten=0x124f3d00*=0x127, lpOverlapped=0x124f3d0c) returned 1
	[0137.107] GetFileType (hFile=0x32c) returned 0x1
	[0137.107] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x127, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.107] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0137.107] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0137.108] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0137.108] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ec30 | out: pbBuffer=0x1251ec30) returned 1
	[0137.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.108] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0137.108] WriteFile (in: hFile=0x34c, lpBuffer=0x12991900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12991900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.108] CloseHandle (hObject=0x34c) returned 1
	[0137.108] CloseHandle (hObject=0x32c) returned 1
	[0137.109] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.110] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0137.142] SwitchToThread () returned 1
	[0137.143] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0137.143] SetEvent (hEvent=0x80) returned 1
	[0137.143] SetEvent (hEvent=0x2e4) returned 1
	[0137.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.144] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1
	[0137.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0137.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0137.144] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0xea, lpOverlapped=0x0) returned 1
	[0137.145] GetFileType (hFile=0x33c) returned 0x1
	[0137.146] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.146] WriteFile (in: hFile=0x33c, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0xea, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x12429d00*=0xea, lpOverlapped=0x12429d0c) returned 1
	[0137.146] GetFileType (hFile=0x33c) returned 0x1
	[0137.146] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xea, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.146] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8101 | out: pbBuffer=0x127e8101) returned 1
	[0137.146] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8201 | out: pbBuffer=0x127e8201) returned 1
	[0137.146] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8301 | out: pbBuffer=0x127e8301) returned 1
	[0137.147] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744390 | out: pbBuffer=0x12744390) returned 1
	[0137.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.147] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.147] WriteFile (in: hFile=0x32c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.147] CloseHandle (hObject=0x32c) returned 1
	[0137.147] CloseHandle (hObject=0x33c) returned 1
	[0137.147] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.149] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144)) returned 1
	[0137.149] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0137.149] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443b8 | out: pbBuffer=0x127443b8) returned 1
	[0137.149] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f1d1c*=0x144, lpOverlapped=0x0) returned 1
	[0137.150] GetFileType (hFile=0x33c) returned 0x1
	[0137.151] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.151] WriteFile (in: hFile=0x33c, lpBuffer=0x1247c580*, nNumberOfBytesToWrite=0x144, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1247c580*, lpNumberOfBytesWritten=0x124f1d00*=0x144, lpOverlapped=0x124f1d0c) returned 1
	[0137.151] GetFileType (hFile=0x33c) returned 0x1
	[0137.151] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x144, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.151] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0137.151] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0137.151] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0137.152] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744530 | out: pbBuffer=0x12744530) returned 1
	[0137.152] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.152] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.152] WriteFile (in: hFile=0x32c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.152] CloseHandle (hObject=0x32c) returned 1
	[0137.152] CloseHandle (hObject=0x33c) returned 1
	[0137.152] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.153] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.154] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12981d0c | out: lpMode=0x12981d0c) returned 0
	[0137.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12981ad0 | out: lpFileInformation=0x12981ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1
	[0137.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0137.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744548 | out: pbBuffer=0x12744548) returned 1
	[0137.154] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12981d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12981d1c*=0x130, lpOverlapped=0x0) returned 1
	[0137.156] GetFileType (hFile=0x33c) returned 0x1
	[0137.156] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12981ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.156] WriteFile (in: hFile=0x33c, lpBuffer=0x12766c80*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x12981d00, lpOverlapped=0x12981d0c | out: lpBuffer=0x12766c80*, lpNumberOfBytesWritten=0x12981d00*=0x130, lpOverlapped=0x12981d0c) returned 1
	[0137.156] GetFileType (hFile=0x33c) returned 0x1
	[0137.156] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x12981ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0137.157] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0137.157] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0137.157] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744600 | out: pbBuffer=0x12744600) returned 1
	[0137.157] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.157] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12981d0c | out: lpMode=0x12981d0c) returned 0
	[0137.157] WriteFile (in: hFile=0x32c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12981d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12981d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.157] CloseHandle (hObject=0x32c) returned 1
	[0137.157] CloseHandle (hObject=0x33c) returned 1
	[0137.158] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.159] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.159] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.159] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.159] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.159] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.160] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.161] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.161] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.162] CloseHandle (hObject=0x33c) returned 1
	[0137.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1
	[0137.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.163] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.163] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.163] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ae0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86adfb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0137.163] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.163] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.164] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0137.164] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0137.166] CloseHandle (hObject=0x33c) returned 1
	[0137.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ae0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86adfb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686)) returned 1
	[0137.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x869b0fb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1
	[0137.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.174] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.174] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.175] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.175] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5817.313.0.5_0", cAlternateFileName="581731~1.5_0")) returned 1
	[0137.175] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.175] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.176] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0137.176] WriteFile (in: hFile=0x34c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0137.178] CloseHandle (hObject=0x34c) returned 1
	[0137.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.195] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.203] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836e0310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83637bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8363f0f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="angular.js", cAlternateFileName="")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xa89c, dwReserved0=0x0, dwReserved1=0x0, cFileName="background_script.js", cAlternateFileName="BACKGR~1.JS")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x181aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_game_sender.js", cAlternateFileName="CAST_G~1.JS")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x111e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_route_details.html", cAlternateFileName="CAST_R~1.HTM")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3a258, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_route_details.js", cAlternateFileName="CAST_R~1.JS")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xce17, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_sender.js", cAlternateFileName="CAST_S~1.JS")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_setup", cAlternateFileName="CAST_S~1")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_route_details", cAlternateFileName="CLOUD_~1")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878, dwReserved0=0x0, dwReserved1=0x0, cFileName="common.js", cAlternateFileName="")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc26, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback.css", cAlternateFileName="")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x38a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback.html", cAlternateFileName="FEEDBA~1.HTM")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2b20, dwReserved0=0x0, dwReserved1=0x0, cFileName="feedback_script.js", cAlternateFileName="FEEDBA~1.JS")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836af5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8395fd70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0137.204] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b1ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b43f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x46039, dwReserved0=0x0, dwReserved1=0x0, cFileName="material_css_min.css", cAlternateFileName="MATERI~1.CSS")) returned 1
	[0137.205] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x7c33, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_cast_streaming.js", cAlternateFileName="MIRROR~1.JS")) returned 1
	[0137.205] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_common.js", cAlternateFileName="MIRROR~2.JS")) returned 1
	[0137.205] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x794cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_hangouts.js", cAlternateFileName="MIRROR~3.JS")) returned 1
	[0137.205] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x941, dwReserved0=0x0, dwReserved1=0x0, cFileName="mirroring_webrtc.js", cAlternateFileName="MIRROR~4.JS")) returned 1
	[0137.205] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0137.205] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0137.205] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.205] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.210] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0137.210] WriteFile (in: hFile=0x34c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0137.212] CloseHandle (hObject=0x34c) returned 1
	[0137.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.212] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.215] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e6790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83624340, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83624340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.216] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1
	[0137.216] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0137.216] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0137.216] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1
	[0137.216] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0137.216] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0137.216] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1
	[0137.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0137.218] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0137.219] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0137.219] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0137.219] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh", cAlternateFileName="")) returned 1
	[0137.219] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0137.219] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.219] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.223] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0137.223] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0137.225] CloseHandle (hObject=0x34c) returned 1
	[0137.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.226] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.226] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833e8ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833eb5b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.226] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.226] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.226] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.228] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.228] WriteFile (in: hFile=0x34c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.230] CloseHandle (hObject=0x34c) returned 1
	[0137.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827)) returned 1
	[0137.233] SetEvent (hEvent=0x2e4) returned 1
	[0137.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.233] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x833f7900, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x833fee30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.233] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.233] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.234] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.235] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.235] WriteFile (in: hFile=0x34c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.237] CloseHandle (hObject=0x34c) returned 1
	[0137.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf)) returned 1
	[0137.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.238] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83403c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83406360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83406360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.238] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.238] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.238] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.240] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.240] WriteFile (in: hFile=0x34c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.241] CloseHandle (hObject=0x34c) returned 1
	[0137.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63)) returned 1
	[0137.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.255] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.255] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8340b180, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.255] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.256] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.256] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.257] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.257] WriteFile (in: hFile=0x34c, lpBuffer=0x12636000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12636000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.259] CloseHandle (hObject=0x34c) returned 1
	[0137.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb)) returned 1
	[0137.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.260] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8340ffa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834126b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834126b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.260] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.260] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.260] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.261] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.261] WriteFile (in: hFile=0x34c, lpBuffer=0x12637300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12637300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.263] CloseHandle (hObject=0x34c) returned 1
	[0137.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d)) returned 1
	[0137.299] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0137.305] SetEvent (hEvent=0x30c) returned 1
	[0137.306] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0137.833] SetEvent (hEvent=0x2e8) returned 1
	[0137.833] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0137.967] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0138.068] SetEvent (hEvent=0x2e4) returned 1
	[0138.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.068] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0138.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a)) returned 1
	[0138.069] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0138.069] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0138.069] ReadFile (in: hFile=0x2cc, lpBuffer=0x1290c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1290c000*, lpNumberOfBytesRead=0x1277dd1c*=0x447a, lpOverlapped=0x0) returned 1
	[0138.120] GetFileType (hFile=0x2cc) returned 0x1
	[0138.120] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.120] WriteFile (in: hFile=0x2cc, lpBuffer=0x125ce000*, nNumberOfBytesToWrite=0x447a, lpNumberOfBytesWritten=0x1277dd00, lpOverlapped=0x1277dd0c | out: lpBuffer=0x125ce000*, lpNumberOfBytesWritten=0x1277dd00*=0x447a, lpOverlapped=0x1277dd0c) returned 1
	[0138.120] GetFileType (hFile=0x2cc) returned 0x1
	[0138.120] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x447a, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.120] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0138.120] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0138.121] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0138.121] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0138.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0138.121] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0138.121] WriteFile (in: hFile=0x32c, lpBuffer=0x1262e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262e000*, lpNumberOfBytesWritten=0x1277dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.121] CloseHandle (hObject=0x32c) returned 1
	[0138.121] CloseHandle (hObject=0x2cc) returned 1
	[0138.121] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.123] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0138.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf)) returned 1
	[0138.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6c0 | out: pbBuffer=0x1244c6c0) returned 1
	[0138.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0138.123] ReadFile (in: hFile=0x2cc, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x1277dd1c*=0x41bf, lpOverlapped=0x0) returned 1
	[0138.174] GetFileType (hFile=0x2cc) returned 0x1
	[0138.174] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.174] WriteFile (in: hFile=0x2cc, lpBuffer=0x125d2800*, nNumberOfBytesToWrite=0x41bf, lpNumberOfBytesWritten=0x1277dd00, lpOverlapped=0x1277dd0c | out: lpBuffer=0x125d2800*, lpNumberOfBytesWritten=0x1277dd00*=0x41bf, lpOverlapped=0x1277dd0c) returned 1
	[0138.174] GetFileType (hFile=0x2cc) returned 0x1
	[0138.174] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x41bf, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.174] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0138.174] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0138.175] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0138.175] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0138.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.175] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0138.175] WriteFile (in: hFile=0x34c, lpBuffer=0x1262e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262e500*, lpNumberOfBytesWritten=0x1277dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.175] CloseHandle (hObject=0x34c) returned 1
	[0138.176] CloseHandle (hObject=0x2cc) returned 1
	[0138.176] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.177] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0138.267] SetEvent (hEvent=0x2e8) returned 1
	[0138.267] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0138.369] SetEvent (hEvent=0x80) returned 1
	[0138.369] SetEvent (hEvent=0x30c) returned 1
	[0138.369] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0138.600] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0138.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.705] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0138.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1
	[0138.705] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0138.705] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0138.705] ReadFile (in: hFile=0x2cc, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x1242bd1c*=0x3fdc, lpOverlapped=0x0) returned 1
	[0138.799] GetFileType (hFile=0x2cc) returned 0x1
	[0138.799] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.800] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x3fdc, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x1242bd00*=0x3fdc, lpOverlapped=0x1242bd0c) returned 1
	[0138.800] GetFileType (hFile=0x2cc) returned 0x1
	[0138.800] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x3fdc, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.800] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0138.800] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0138.800] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0138.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0138.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.801] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0138.801] WriteFile (in: hFile=0x34c, lpBuffer=0x125f8000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125f8000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.801] CloseHandle (hObject=0x34c) returned 1
	[0138.802] CloseHandle (hObject=0x2cc) returned 1
	[0138.802] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.803] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.804] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0138.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db)) returned 1
	[0138.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0138.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0138.804] ReadFile (in: hFile=0x2cc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f3d1c*=0x40db, lpOverlapped=0x0) returned 1
	[0138.855] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0138.957] SetEvent (hEvent=0x80) returned 1
	[0138.957] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0139.177] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0139.228] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0139.526] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0139.610] SetEvent (hEvent=0x70) returned 1
	[0139.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.611] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0139.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8362b870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d72)) returned 1
	[0139.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0139.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0139.611] ReadFile (in: hFile=0x34c, lpBuffer=0x127b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127b4000*, lpNumberOfBytesRead=0x1276dd1c*=0x3d72, lpOverlapped=0x0) returned 1
	[0141.625] SetEvent (hEvent=0xa0) returned 1
	[0141.626] GetFileType (hFile=0x34c) returned 0x1
	[0141.626] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0141.626] WriteFile (in: hFile=0x34c, lpBuffer=0x125ea000*, nNumberOfBytesToWrite=0x3d72, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x125ea000*, lpNumberOfBytesWritten=0x1276dd00*=0x3d72, lpOverlapped=0x1276dd0c) returned 1
	[0141.626] GetFileType (hFile=0x34c) returned 0x1
	[0141.626] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x3d72, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0141.626] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0141.627] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0141.627] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0141.627] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788260 | out: pbBuffer=0x12788260) returned 1
	[0141.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0141.627] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0141.627] WriteFile (in: hFile=0x344, lpBuffer=0x1298ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1298ca00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0141.628] CloseHandle (hObject=0x344) returned 1
	[0141.628] CloseHandle (hObject=0x34c) returned 1
	[0141.628] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0141.676] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0141.904] SetEvent (hEvent=0x2e8) returned 1
	[0141.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0141.905] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0141.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x839fe880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7299)) returned 1
	[0141.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0141.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0141.905] ReadFile (in: hFile=0x34c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x12429d1c*=0x7299, lpOverlapped=0x0) returned 1
	[0142.450] GetFileType (hFile=0x34c) returned 0x1
	[0142.450] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.450] WriteFile (in: hFile=0x34c, lpBuffer=0x1274a000*, nNumberOfBytesToWrite=0x7299, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1274a000*, lpNumberOfBytesWritten=0x12429d00*=0x7299, lpOverlapped=0x12429d0c) returned 1
	[0142.451] GetFileType (hFile=0x34c) returned 0x1
	[0142.451] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x7299, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0142.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0142.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0142.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0142.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0142.452] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0142.452] WriteFile (in: hFile=0x348, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.452] CloseHandle (hObject=0x348) returned 1
	[0142.452] CloseHandle (hObject=0x34c) returned 1
	[0142.452] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x111e1)) returned 1
	[0142.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3a258)) returned 1
	[0142.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0142.455] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0142.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8364db50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8364db50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x111e1)) returned 1
	[0142.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0142.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0142.455] ReadFile (in: hFile=0x34c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12429d1c*=0x111e1, lpOverlapped=0x0) returned 1
	[0142.525] GetFileType (hFile=0x34c) returned 0x1
	[0142.525] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.525] WriteFile (in: hFile=0x34c, lpBuffer=0x12752000*, nNumberOfBytesToWrite=0x111e1, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12752000*, lpNumberOfBytesWritten=0x12429d00*=0x111e1, lpOverlapped=0x12429d0c) returned 1
	[0142.525] GetFileType (hFile=0x34c) returned 0x1
	[0142.525] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x111e1, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0142.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0142.526] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0142.526] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0142.526] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0142.526] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0142.526] WriteFile (in: hFile=0x340, lpBuffer=0x1276e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1276e500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.526] CloseHandle (hObject=0x340) returned 1
	[0142.635] CloseHandle (hObject=0x34c) returned 1
	[0142.644] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.html.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.666] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0142.691] SetEvent (hEvent=0x2e4) returned 1
	[0142.691] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0142.698] SetEvent (hEvent=0x2e8) returned 1
	[0142.698] SetEvent (hEvent=0x2f4) returned 1
	[0142.698] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0142.699] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0142.699] SetEvent (hEvent=0x2e8) returned 1
	[0142.699] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0142.700] SetEvent (hEvent=0x2e8) returned 1
	[0142.700] SetEvent (hEvent=0x320) returned 1
	[0142.700] GetFileType (hFile=0x340) returned 0x1
	[0142.700] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.700] WriteFile (in: hFile=0x340, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x1a1d, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x1276bd00*=0x1a1d, lpOverlapped=0x1276bd0c) returned 1
	[0142.700] GetFileType (hFile=0x340) returned 0x1
	[0142.700] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x1a1d, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.700] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0142.700] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0142.700] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0142.701] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0142.701] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0142.701] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.701] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.701] CloseHandle (hObject=0x2cc) returned 1
	[0142.701] CloseHandle (hObject=0x340) returned 1
	[0142.701] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1
	[0142.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828)) returned 1
	[0142.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0142.702] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1
	[0142.703] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0142.703] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0142.703] ReadFile (in: hFile=0x340, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1276bd1c*=0x3b, lpOverlapped=0x0) returned 1
	[0142.704] GetFileType (hFile=0x340) returned 0x1
	[0142.704] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.704] WriteFile (in: hFile=0x340, lpBuffer=0x1273c040*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x1273c040*, lpNumberOfBytesWritten=0x1276bd00*=0x3b, lpOverlapped=0x1276bd0c) returned 1
	[0142.704] GetFileType (hFile=0x340) returned 0x1
	[0142.704] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x3b, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0142.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0142.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0142.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0142.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0142.705] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.705] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a500*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.705] CloseHandle (hObject=0x2cc) returned 1
	[0142.705] CloseHandle (hObject=0x340) returned 1
	[0142.705] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\devices.html.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.706] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0142.706] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828)) returned 1
	[0142.706] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e460 | out: pbBuffer=0x1252e460) returned 1
	[0142.706] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0142.706] ReadFile (in: hFile=0x340, lpBuffer=0x125a2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x125a2000*, lpNumberOfBytesRead=0x1276bd1c*=0x828, lpOverlapped=0x0) returned 1
	[0142.717] GetFileType (hFile=0x340) returned 0x1
	[0142.717] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.717] WriteFile (in: hFile=0x340, lpBuffer=0x12494900*, nNumberOfBytesToWrite=0x828, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x12494900*, lpNumberOfBytesWritten=0x1276bd00*=0x828, lpOverlapped=0x1276bd0c) returned 1
	[0142.717] GetFileType (hFile=0x340) returned 0x1
	[0142.718] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x828, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0142.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0142.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0142.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0142.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0142.718] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.718] WriteFile (in: hFile=0x33c, lpBuffer=0x1245aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1245aa00*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.718] CloseHandle (hObject=0x33c) returned 1
	[0142.718] CloseHandle (hObject=0x340) returned 1
	[0142.718] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\index.html.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.724] SetEvent (hEvent=0x320) returned 1
	[0142.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0142.725] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1
	[0142.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e680 | out: pbBuffer=0x1252e680) returned 1
	[0142.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e748 | out: pbBuffer=0x1251e748) returned 1
	[0142.726] ReadFile (in: hFile=0x340, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1276bd1c*=0x3b, lpOverlapped=0x0) returned 1
	[0142.727] GetFileType (hFile=0x340) returned 0x1
	[0142.727] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.727] WriteFile (in: hFile=0x340, lpBuffer=0x1273c140*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x1273c140*, lpNumberOfBytesWritten=0x1276bd00*=0x3b, lpOverlapped=0x1276bd0c) returned 1
	[0142.727] GetFileType (hFile=0x340) returned 0x1
	[0142.727] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x3b, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0142.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0142.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0142.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e860 | out: pbBuffer=0x1251e860) returned 1
	[0142.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0142.728] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.728] WriteFile (in: hFile=0x33c, lpBuffer=0x1245b400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1245b400*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.728] CloseHandle (hObject=0x33c) returned 1
	[0142.735] CloseHandle (hObject=0x340) returned 1
	[0142.735] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.746] SetEvent (hEvent=0x320) returned 1
	[0142.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0142.746] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c)) returned 1
	[0142.746] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8a0 | out: pbBuffer=0x1252e8a0) returned 1
	[0142.746] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e878 | out: pbBuffer=0x1251e878) returned 1
	[0142.746] ReadFile (in: hFile=0x340, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1276bd1c*=0x174c, lpOverlapped=0x0) returned 1
	[0142.775] SetEvent (hEvent=0xa0) returned 1
	[0142.775] GetFileType (hFile=0x340) returned 0x1
	[0142.775] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.775] WriteFile (in: hFile=0x340, lpBuffer=0x12507800*, nNumberOfBytesToWrite=0x174c, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x12507800*, lpNumberOfBytesWritten=0x1276bd00*=0x174c, lpOverlapped=0x1276bd0c) returned 1
	[0142.775] GetFileType (hFile=0x340) returned 0x1
	[0142.775] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x174c, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0142.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0142.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0142.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127882c0 | out: pbBuffer=0x127882c0) returned 1
	[0142.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0142.776] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.776] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.776] CloseHandle (hObject=0x33c) returned 1
	[0142.776] CloseHandle (hObject=0x340) returned 1
	[0142.777] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.780] SetEvent (hEvent=0x320) returned 1
	[0142.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0142.782] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878)) returned 1
	[0142.782] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f440 | out: pbBuffer=0x1240f440) returned 1
	[0142.782] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882d8 | out: pbBuffer=0x127882d8) returned 1
	[0142.782] ReadFile (in: hFile=0x340, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1276bd1c*=0xc878, lpOverlapped=0x0) returned 1
	[0142.855] GetFileType (hFile=0x340) returned 0x1
	[0142.855] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.855] WriteFile (in: hFile=0x340, lpBuffer=0x127d6000*, nNumberOfBytesToWrite=0xc878, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x127d6000*, lpNumberOfBytesWritten=0x1276bd00*=0xc878, lpOverlapped=0x1276bd0c) returned 1
	[0142.856] GetFileType (hFile=0x340) returned 0x1
	[0142.856] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xc878, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.856] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0142.856] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0142.856] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0142.856] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0142.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0142.857] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.857] WriteFile (in: hFile=0x33c, lpBuffer=0x12608000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12608000*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.857] CloseHandle (hObject=0x33c) returned 1
	[0142.857] CloseHandle (hObject=0x340) returned 1
	[0142.857] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.859] SetEvent (hEvent=0x80) returned 1
	[0142.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0142.859] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836af5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8395fd70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1
	[0142.860] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0142.860] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0142.860] ReadFile (in: hFile=0x340, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1276bd1c*=0x8f8, lpOverlapped=0x0) returned 1
	[0143.089] GetFileType (hFile=0x340) returned 0x1
	[0143.090] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.090] WriteFile (in: hFile=0x340, lpBuffer=0x12494900*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x12494900*, lpNumberOfBytesWritten=0x1276bd00*=0x8f8, lpOverlapped=0x1276bd0c) returned 1
	[0143.090] GetFileType (hFile=0x340) returned 0x1
	[0143.090] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x8f8, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0143.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0143.091] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0143.091] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788370 | out: pbBuffer=0x12788370) returned 1
	[0143.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.091] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0143.091] WriteFile (in: hFile=0x33c, lpBuffer=0x12608f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12608f00*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.091] CloseHandle (hObject=0x33c) returned 1
	[0143.091] CloseHandle (hObject=0x340) returned 1
	[0143.091] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x794cf)) returned 1
	[0143.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x941)) returned 1
	[0143.095] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0143.096] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0143.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836ca380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836cf1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x794cf)) returned 1
	[0143.096] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f660 | out: pbBuffer=0x1240f660) returned 1
	[0143.096] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788388 | out: pbBuffer=0x12788388) returned 1
	[0143.096] ReadFile (in: hFile=0x340, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x1276bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0143.133] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0143.284] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0143.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.518] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9)) returned 1
	[0143.518] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0143.518] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0143.518] ReadFile (in: hFile=0x34c, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0143.542] GetFileType (hFile=0x34c) returned 0x1
	[0143.542] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.542] WriteFile (in: hFile=0x34c, lpBuffer=0x12952000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12952000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0143.543] GetFileType (hFile=0x34c) returned 0x1
	[0143.543] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.543] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0143.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0143.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0143.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0143.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0143.544] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.544] WriteFile (in: hFile=0x348, lpBuffer=0x12460000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12460000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.545] CloseHandle (hObject=0x348) returned 1
	[0143.545] CloseHandle (hObject=0x34c) returned 1
	[0143.545] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0143.551] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0143.551] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0143.551] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A058.tmp", cAlternateFileName="")) returned 1
	[0143.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A059.tmp", cAlternateFileName="")) returned 1
	[0143.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0143.552] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0143.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0143.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0143.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.554] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0143.555] WriteFile (in: hFile=0x34c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0143.560] CloseHandle (hObject=0x34c) returned 1
	[0143.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A058.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.563] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6e0 | out: pbBuffer=0x1244c6e0) returned 1
	[0143.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410458 | out: pbBuffer=0x12410458) returned 1
	[0143.563] ReadFile (in: hFile=0x34c, lpBuffer=0x12972000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12972000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.563] CloseHandle (hObject=0x34c) returned 1
	[0143.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A058.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.564] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A058.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a058.tmp"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.564] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c720 | out: pbBuffer=0x1244c720) returned 1
	[0143.564] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410468 | out: pbBuffer=0x12410468) returned 1
	[0143.564] ReadFile (in: hFile=0x34c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.564] CloseHandle (hObject=0x34c) returned 1
	[0143.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A059.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0143.566] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0143.567] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0143.567] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B03.tmp", cAlternateFileName="")) returned 1
	[0143.567] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B04.tmp", cAlternateFileName="")) returned 1
	[0143.567] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0143.568] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0143.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0143.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0143.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0143.582] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0143.582] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0143.594] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0143.609] SetEvent (hEvent=0x30c) returned 1
	[0143.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B03.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0143.610] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B03.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0143.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0143.610] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.610] CloseHandle (hObject=0x344) returned 1
	[0143.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B04.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0143.611] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0143.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B04.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0143.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788028 | out: pbBuffer=0x12788028) returned 1
	[0143.611] ReadFile (in: hFile=0x344, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f3d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.611] CloseHandle (hObject=0x344) returned 1
	[0143.611] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0143.642] SetEvent (hEvent=0x2e4) returned 1
	[0143.642] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0143.643] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0143.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86513570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.643] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3a0 | out: pbBuffer=0x1240e3a0) returned 1
	[0143.643] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788038 | out: pbBuffer=0x12788038) returned 1
	[0143.643] ReadFile (in: hFile=0x340, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f1d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.643] CloseHandle (hObject=0x340) returned 1
	[0143.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0143.644] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0143.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0143.644] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3c0 | out: pbBuffer=0x1240e3c0) returned 1
	[0143.644] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788048 | out: pbBuffer=0x12788048) returned 1
	[0143.644] ReadFile (in: hFile=0x340, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x124f1d1c*=0x29, lpOverlapped=0x0) returned 1
	[0143.646] GetFileType (hFile=0x340) returned 0x1
	[0143.646] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.646] WriteFile (in: hFile=0x340, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x124f1d00*=0x29, lpOverlapped=0x124f1d0c) returned 1
	[0143.646] GetFileType (hFile=0x340) returned 0x1
	[0143.647] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x29, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0143.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0143.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0143.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788110 | out: pbBuffer=0x12788110) returned 1
	[0143.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.647] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0143.647] WriteFile (in: hFile=0x33c, lpBuffer=0x127e0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e0000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.648] CloseHandle (hObject=0x33c) returned 1
	[0143.657] CloseHandle (hObject=0x340) returned 1
	[0143.676] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0144.190] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0144.378] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0145.353] SetEvent (hEvent=0x2e8) returned 1
	[0145.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0145.353] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0145.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0145.354] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0145.354] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0145.354] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f3d1c*=0x0, lpOverlapped=0x0) returned 1
	[0145.354] CloseHandle (hObject=0x344) returned 1
	[0145.354] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0146.172] SetEvent (hEvent=0x2e8) returned 1
	[0146.172] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0146.183] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0156.015] SetEvent (hEvent=0x2e4) returned 1
	[0156.015] SetEvent (hEvent=0x30c) returned 1
	[0156.015] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0156.020] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0156.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1
	[0156.165] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0156.196] SetEvent (hEvent=0x320) returned 1
	[0156.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1
	[0156.219] SetEvent (hEvent=0x2e8) returned 1
	[0156.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1
	[0156.234] SetEvent (hEvent=0x2f4) returned 1
	[0156.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1
	[0156.251] SetEvent (hEvent=0x80) returned 1
	[0156.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1
	[0156.265] SetEvent (hEvent=0x2e4) returned 1
	[0156.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1
	[0156.280] SetEvent (hEvent=0x2f4) returned 1
	[0156.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1
	[0156.305] SetEvent (hEvent=0x80) returned 1
	[0156.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1
	[0156.323] SetEvent (hEvent=0x2e4) returned 1
	[0156.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1
	[0156.347] SetEvent (hEvent=0xa0) returned 1
	[0156.347] SetEvent (hEvent=0x2f4) returned 1
	[0156.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1
	[0156.359] SetEvent (hEvent=0x80) returned 1
	[0156.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.366] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.366] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.366] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\transcoded files cache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.368] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0156.368] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0156.369] CloseHandle (hObject=0x344) returned 1
	[0156.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.409] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.409] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.409] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.0", cAlternateFileName="")) returned 1
	[0156.409] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove", cAlternateFileName="")) returned 1
	[0156.409] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONetConfig", cAlternateFileName="ONETCO~1")) returned 1
	[0156.409] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.409] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.411] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0156.411] WriteFile (in: hFile=0x344, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0156.421] CloseHandle (hObject=0x344) returned 1
	[0156.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.433] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.433] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x197ec0b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xf7a855a0, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7a855a0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.433] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeFileCache", cAlternateFileName="OFFICE~1")) returned 1
	[0156.433] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.433] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.439] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0156.439] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0156.451] CloseHandle (hObject=0x33c) returned 1
	[0156.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.454] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.454] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7a855a0, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.454] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7aab700, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7aab700, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-CNRY.FSD", cAlternateFileName="")) returned 1
	[0156.454] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD", cAlternateFileName="FSD-{4~1.FSD")) returned 1
	[0156.454] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FSF-CTBL.FSF", cAlternateFileName="")) returned 1
	[0156.454] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.455] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.459] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0156.459] WriteFile (in: hFile=0x340, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0156.461] CloseHandle (hObject=0x340) returned 1
	[0156.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7aab700, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7aab700, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1
	[0156.467] SetEvent (hEvent=0x2e4) returned 1
	[0156.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1
	[0156.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72)) returned 1
	[0156.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.469] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1
	[0156.469] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ed40 | out: pbBuffer=0x1240ed40) returned 1
	[0156.469] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410640 | out: pbBuffer=0x12410640) returned 1
	[0156.469] ReadFile (in: hFile=0x340, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0156.481] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0156.481] SetEvent (hEvent=0x2e8) returned 1
	[0156.482] GetFileType (hFile=0x340) returned 0x1
	[0156.482] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.483] WriteFile (in: hFile=0x340, lpBuffer=0x128b8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x128b8000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0156.483] GetFileType (hFile=0x340) returned 0x1
	[0156.483] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.484] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0156.484] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0156.484] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0156.485] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410748 | out: pbBuffer=0x12410748) returned 1
	[0156.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0156.486] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.486] WriteFile (in: hFile=0x34c, lpBuffer=0x127eea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127eea00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.487] CloseHandle (hObject=0x34c) returned 1
	[0156.487] CloseHandle (hObject=0x340) returned 1
	[0156.487] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-{48508C83-EC67-468F-AA1F-6F3CAF625658}.FSD.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-{48508c83-ec67-468f-aa1f-6f3caf625658}.fsd.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.491] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7ad1860, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7ad1860, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7af79c0, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x72)) returned 1
	[0156.491] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f2e0 | out: pbBuffer=0x1240f2e0) returned 1
	[0156.491] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410780 | out: pbBuffer=0x12410780) returned 1
	[0156.491] ReadFile (in: hFile=0x340, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x1242bd1c*=0x72, lpOverlapped=0x0) returned 1
	[0156.493] GetFileType (hFile=0x340) returned 0x1
	[0156.494] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.494] WriteFile (in: hFile=0x340, lpBuffer=0x12434f80*, nNumberOfBytesToWrite=0x72, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12434f80*, lpNumberOfBytesWritten=0x1242bd00*=0x72, lpOverlapped=0x1242bd0c) returned 1
	[0156.494] GetFileType (hFile=0x340) returned 0x1
	[0156.495] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x72, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435001 | out: pbBuffer=0x12435001) returned 1
	[0156.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435101 | out: pbBuffer=0x12435101) returned 1
	[0156.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435201 | out: pbBuffer=0x12435201) returned 1
	[0156.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410868 | out: pbBuffer=0x12410868) returned 1
	[0156.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0156.495] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.495] WriteFile (in: hFile=0x34c, lpBuffer=0x127eef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127eef00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.496] CloseHandle (hObject=0x34c) returned 1
	[0156.496] CloseHandle (hObject=0x340) returned 1
	[0156.496] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSF-CTBL.FSF.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsf-ctbl.fsf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.501] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0157.319] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0157.731] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0157.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0157.766] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0157.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fe0250, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf888)) returned 1
	[0157.766] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e280 | out: pbBuffer=0x1252e280) returned 1
	[0157.766] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e128 | out: pbBuffer=0x1251e128) returned 1
	[0157.767] ReadFile (in: hFile=0x33c, lpBuffer=0x1284a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1284a000*, lpNumberOfBytesRead=0x124f5d1c*=0xf888, lpOverlapped=0x0) returned 1
	[0157.775] GetFileType (hFile=0x33c) returned 0x1
	[0157.776] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.776] WriteFile (in: hFile=0x33c, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0xf888, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x124f5d00*=0xf888, lpOverlapped=0x124f5d0c) returned 1
	[0157.787] GetFileType (hFile=0x33c) returned 0x1
	[0157.787] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xf888, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0157.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0157.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0157.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5f0 | out: pbBuffer=0x1251e5f0) returned 1
	[0157.788] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0157.788] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0157.788] WriteFile (in: hFile=0x348, lpBuffer=0x125fa500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fa500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.793] CloseHandle (hObject=0x348) returned 1
	[0157.793] CloseHandle (hObject=0x33c) returned 1
	[0157.798] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.808] SetEvent (hEvent=0x2f4) returned 1
	[0157.808] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0157.812] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0157.812] SetEvent (hEvent=0x2e4) returned 1
	[0157.812] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0157.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0157.814] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0157.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1
	[0157.814] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0157.814] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0157.814] ReadFile (in: hFile=0x350, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0157.883] GetFileType (hFile=0x350) returned 0x1
	[0157.883] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.884] WriteFile (in: hFile=0x350, lpBuffer=0x1290a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1290a000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0157.885] GetFileType (hFile=0x350) returned 0x1
	[0157.885] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.885] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec401 | out: pbBuffer=0x124ec401) returned 1
	[0157.885] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec501 | out: pbBuffer=0x124ec501) returned 1
	[0157.885] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec601 | out: pbBuffer=0x124ec601) returned 1
	[0157.885] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104f0 | out: pbBuffer=0x124104f0) returned 1
	[0157.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.885] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0157.885] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.048] CloseHandle (hObject=0x2cc) returned 1
	[0159.048] CloseHandle (hObject=0x350) returned 1
	[0159.048] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.336] SwitchToThread () returned 1
	[0159.340] SetEvent (hEvent=0x2e4) returned 1
	[0159.340] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0159.343] SetEvent (hEvent=0x2e4) returned 1
	[0159.344] SetEvent (hEvent=0x30c) returned 1
	[0159.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82376090, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0159.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82695d70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82695d70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82695d70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1
	[0159.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0159.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0159.355] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82695d70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82695d70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82695d70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1
	[0159.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0159.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0159.355] ReadFile (in: hFile=0x350, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x2c, lpOverlapped=0x0) returned 1
	[0159.357] GetFileType (hFile=0x350) returned 0x1
	[0159.357] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.357] WriteFile (in: hFile=0x350, lpBuffer=0x12466000*, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12466000*, lpNumberOfBytesWritten=0x124f5d00*=0x2c, lpOverlapped=0x124f5d0c) returned 1
	[0159.357] GetFileType (hFile=0x350) returned 0x1
	[0159.357] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x2c, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0159.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0159.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0159.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103f0 | out: pbBuffer=0x124103f0) returned 1
	[0159.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0159.358] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.358] WriteFile (in: hFile=0x2cc, lpBuffer=0x127eea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127eea00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.359] CloseHandle (hObject=0x2cc) returned 1
	[0159.359] CloseHandle (hObject=0x350) returned 1
	[0159.359] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.cache.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0159.362] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0159.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0159.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410418 | out: pbBuffer=0x12410418) returned 1
	[0159.362] ReadFile (in: hFile=0x350, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f5d1c*=0x10, lpOverlapped=0x0) returned 1
	[0159.364] GetFileType (hFile=0x350) returned 0x1
	[0159.364] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.364] WriteFile (in: hFile=0x350, lpBuffer=0x12410420*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12410420*, lpNumberOfBytesWritten=0x124f5d00*=0x10, lpOverlapped=0x124f5d0c) returned 1
	[0159.365] GetFileType (hFile=0x350) returned 0x1
	[0159.365] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0159.366] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0159.366] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0159.366] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410500 | out: pbBuffer=0x12410500) returned 1
	[0159.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0159.366] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.366] WriteFile (in: hFile=0x2cc, lpBuffer=0x127eef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127eef00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.367] CloseHandle (hObject=0x2cc) returned 1
	[0159.367] CloseHandle (hObject=0x350) returned 1
	[0159.367] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.pset.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82649ab0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82649ab0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0159.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0159.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0159.404] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0159.404] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.404] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache.4.little", cAlternateFileName="STARTU~1.LIT")) returned 1
	[0159.405] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0159.405] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0159.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0159.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0159.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0159.411] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0159.411] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0159.413] CloseHandle (hObject=0x33c) returned 1
	[0159.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6)) returned 1
	[0159.428] SetEvent (hEvent=0x2f4) returned 1
	[0159.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0159.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0159.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0159.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4cc87c1409819bf06f42b782d4902b2f.png", cAlternateFileName="4CC87C~1.PNG")) returned 1
	[0159.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ba182bcd131f1f3c6b6fbbb1ba078341.png", cAlternateFileName="BA182B~1.PNG")) returned 1
	[0159.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362, dwReserved0=0x0, dwReserved1=0x0, cFileName="ce8c0453589216a67cddb50284fbfe8d.png", cAlternateFileName="CE8C04~1.PNG")) returned 1
	[0159.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0159.450] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0159.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0159.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0159.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0159.454] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0159.454] WriteFile (in: hFile=0x354, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0159.455] CloseHandle (hObject=0x354) returned 1
	[0159.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0)) returned 1
	[0159.459] SetEvent (hEvent=0x30c) returned 1
	[0159.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0)) returned 1
	[0159.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362)) returned 1
	[0159.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0159.472] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0159.472] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0159.472] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.472] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E7CF176E110C211B", cAlternateFileName="E7CF17~1")) returned 1
	[0159.472] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0159.473] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0159.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0159.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0159.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0159.474] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0159.474] WriteFile (in: hFile=0x354, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0159.476] CloseHandle (hObject=0x354) returned 1
	[0159.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0159.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0159.504] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0159.533] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.533] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-update.xml", cAlternateFileName="ACTIVE~1.XML")) returned 1
	[0159.533] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1
	[0159.533] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates.xml", cAlternateFileName="")) returned 1
	[0159.533] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0159.533] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0159.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0159.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0159.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0159.536] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0159.536] WriteFile (in: hFile=0x33c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0159.538] CloseHandle (hObject=0x33c) returned 1
	[0159.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464)) returned 1
	[0159.540] SetEvent (hEvent=0x2f4) returned 1
	[0159.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0159.542] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0159.546] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0159.949] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0159.999] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0160.047] SetEvent (hEvent=0x30c) returned 1
	[0160.048] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0160.082] SetEvent (hEvent=0x30c) returned 1
	[0160.082] SetEvent (hEvent=0x320) returned 1
	[0160.082] GetFileType (hFile=0x350) returned 0x1
	[0160.082] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0160.082] WriteFile (in: hFile=0x350, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0x5fe, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x1242bd00*=0x5fe, lpOverlapped=0x1242bd0c) returned 1
	[0160.083] GetFileType (hFile=0x350) returned 0x1
	[0160.083] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x5fe, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0160.083] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0160.083] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0160.083] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0160.083] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0160.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0160.084] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0160.084] WriteFile (in: hFile=0x340, lpBuffer=0x125fa000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125fa000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0160.084] CloseHandle (hObject=0x340) returned 1
	[0160.085] CloseHandle (hObject=0x350) returned 1
	[0160.085] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0160.098] GetFileType (hFile=0x33c) returned 0x1
	[0160.098] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0160.099] WriteFile (in: hFile=0x33c, lpBuffer=0x126f4000*, nNumberOfBytesToWrite=0xcaed, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x126f4000*, lpNumberOfBytesWritten=0x1245dd00*=0xcaed, lpOverlapped=0x1245dd0c) returned 1
	[0160.099] GetFileType (hFile=0x33c) returned 0x1
	[0160.099] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xcaed, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0160.099] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0160.099] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0160.100] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0160.100] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105c0 | out: pbBuffer=0x124105c0) returned 1
	[0160.100] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\3dZSO32ZVfCegXYCK.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\3dzso32zvfcegxyck.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0160.100] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0160.100] WriteFile (in: hFile=0x350, lpBuffer=0x125faa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125faa00*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0160.100] CloseHandle (hObject=0x350) returned 1
	[0160.100] CloseHandle (hObject=0x33c) returned 1
	[0160.100] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\3dZSO32ZVfCegXYCK.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\3dzso32zvfcegxyck.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\3dZSO32ZVfCegXYCK.docx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\3dzso32zvfcegxyck.docx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0160.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0160.621] SetEvent (hEvent=0xa0) returned 1
	[0160.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0160.621] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0160.621] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.621] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0160.621] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0160.622] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0160.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0160.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0160.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0160.702] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0160.703] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0160.704] CloseHandle (hObject=0x33c) returned 1
	[0160.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0160.705] SetEvent (hEvent=0x80) returned 1
	[0160.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0160.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCexAVKgk.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gcexavkgk.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b058aa0, ftCreationTime.dwHighDateTime=0x1d5e415, ftLastAccessTime.dwLowDateTime=0xfb6ecf50, ftLastAccessTime.dwHighDateTime=0x1d5d997, ftLastWriteTime.dwLowDateTime=0xfb6ecf50, ftLastWriteTime.dwHighDateTime=0x1d5d997, nFileSizeHigh=0x0, nFileSizeLow=0x5623)) returned 1
	[0160.936] SetEvent (hEvent=0x80) returned 1
	[0160.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\HHEL 1bNv--OY.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hhel 1bnv--oy.odp"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9825b590, ftCreationTime.dwHighDateTime=0x1d5d9af, ftLastAccessTime.dwLowDateTime=0x5572d010, ftLastAccessTime.dwHighDateTime=0x1d5e3d3, ftLastWriteTime.dwLowDateTime=0x5572d010, ftLastWriteTime.dwHighDateTime=0x1d5e3d3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd9)) returned 1
	[0160.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0160.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0160.982] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0160.982] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.982] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1
	[0160.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0160.983] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0160.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0160.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0160.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0160.984] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0160.985] WriteFile (in: hFile=0x344, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0160.986] CloseHandle (hObject=0x344) returned 1
	[0160.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0160.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0160.987] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0160.987] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0160.987] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9824200, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0160.987] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0160.987] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0160.987] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0160.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0160.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0160.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0160.989] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0160.989] WriteFile (in: hFile=0x344, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0160.991] CloseHandle (hObject=0x344) returned 1
	[0160.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9824200, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x91)) returned 1
	[0160.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0160.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LZJv.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lzjv.mkv"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6588d460, ftCreationTime.dwHighDateTime=0x1d5dd3c, ftLastAccessTime.dwLowDateTime=0xcc64bb10, ftLastAccessTime.dwHighDateTime=0x1d5e104, ftLastWriteTime.dwLowDateTime=0xcc64bb10, ftLastWriteTime.dwHighDateTime=0x1d5e104, nFileSizeHigh=0x0, nFileSizeLow=0x10ade)) returned 1
	[0160.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0160.998] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0160.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0160.998] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0160.998] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e130 | out: pbBuffer=0x1251e130) returned 1
	[0160.998] ReadFile (in: hFile=0x344, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f5d1c*=0x4000, lpOverlapped=0x0) returned 1
	[0161.086] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0161.239] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0161.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LpOqcW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lpoqcw.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0161.352] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0161.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LpOqcW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lpoqcw.avi"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59a58b10, ftCreationTime.dwHighDateTime=0x1d5dbc1, ftLastAccessTime.dwLowDateTime=0x73e928c0, ftLastAccessTime.dwHighDateTime=0x1d5dadf, ftLastWriteTime.dwLowDateTime=0x73e928c0, ftLastWriteTime.dwHighDateTime=0x1d5dadf, nFileSizeHigh=0x0, nFileSizeLow=0x180b2)) returned 1
	[0161.352] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0161.352] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0161.352] ReadFile (in: hFile=0x33c, lpBuffer=0x128e2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128e2000*, lpNumberOfBytesRead=0x1242bd1c*=0x180b2, lpOverlapped=0x0) returned 1
	[0161.411] GetFileType (hFile=0x33c) returned 0x1
	[0161.411] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.411] WriteFile (in: hFile=0x33c, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x180b2, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x1242bd00*=0x180b2, lpOverlapped=0x1242bd0c) returned 1
	[0161.412] GetFileType (hFile=0x33c) returned 0x1
	[0161.412] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x180b2, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.412] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0161.412] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0161.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0161.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0161.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LpOqcW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lpoqcw.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.413] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0161.413] WriteFile (in: hFile=0x340, lpBuffer=0x125dc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.413] CloseHandle (hObject=0x340) returned 1
	[0161.413] CloseHandle (hObject=0x33c) returned 1
	[0161.414] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LpOqcW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lpoqcw.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LpOqcW.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lpoqcw.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LoUl0Xu 5Q x.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\loul0xu 5q x.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0161.420] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0161.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LoUl0Xu 5Q x.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\loul0xu 5q x.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x10cd3a90, ftCreationTime.dwHighDateTime=0x1d5d7b7, ftLastAccessTime.dwLowDateTime=0xd6dd8390, ftLastAccessTime.dwHighDateTime=0x1d5d99a, ftLastWriteTime.dwLowDateTime=0xd6dd8390, ftLastWriteTime.dwHighDateTime=0x1d5d99a, nFileSizeHigh=0x0, nFileSizeLow=0x16c62)) returned 1
	[0161.420] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0161.420] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0161.420] ReadFile (in: hFile=0x33c, lpBuffer=0x1270c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1270c000*, lpNumberOfBytesRead=0x1245bd1c*=0x16c62, lpOverlapped=0x0) returned 1
	[0161.506] GetFileType (hFile=0x33c) returned 0x1
	[0161.506] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.506] WriteFile (in: hFile=0x33c, lpBuffer=0x12972000*, nNumberOfBytesToWrite=0x16c62, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x12972000*, lpNumberOfBytesWritten=0x1245bd00*=0x16c62, lpOverlapped=0x1245bd0c) returned 1
	[0161.507] GetFileType (hFile=0x33c) returned 0x1
	[0161.507] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x16c62, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.507] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0161.507] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0161.507] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0161.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0161.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LoUl0Xu 5Q x.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\loul0xu 5q x.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0161.508] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0161.508] WriteFile (in: hFile=0x344, lpBuffer=0x125dc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc500*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.508] CloseHandle (hObject=0x344) returned 1
	[0161.508] CloseHandle (hObject=0x33c) returned 1
	[0161.508] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LoUl0Xu 5Q x.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\loul0xu 5q x.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LoUl0Xu 5Q x.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\loul0xu 5q x.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Qn_DRcPU5aoUEc8om.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qn_drcpu5aouec8om.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0161.568] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0161.568] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0161.678] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0161.731] SetEvent (hEvent=0x320) returned 1
	[0161.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.732] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0161.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0161.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0161.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0161.732] ReadFile (in: hFile=0x340, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0x43, lpOverlapped=0x0) returned 1
	[0161.734] GetFileType (hFile=0x340) returned 0x1
	[0161.734] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.734] WriteFile (in: hFile=0x340, lpBuffer=0x1264a000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1264a000*, lpNumberOfBytesWritten=0x124f3d00*=0x43, lpOverlapped=0x124f3d0c) returned 1
	[0161.735] GetFileType (hFile=0x340) returned 0x1
	[0161.735] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.735] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0161.735] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0161.735] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0161.736] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0161.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0161.736] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0161.736] WriteFile (in: hFile=0x350, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.736] CloseHandle (hObject=0x350) returned 1
	[0161.736] CloseHandle (hObject=0x340) returned 1
	[0161.736] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.817] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0161.868] SetEvent (hEvent=0x30c) returned 1
	[0161.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0161.869] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0161.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0161.869] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0161.869] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0161.869] ReadFile (in: hFile=0x344, lpBuffer=0x12700000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12700000*, lpNumberOfBytesRead=0x124f5d1c*=0x43, lpOverlapped=0x0) returned 1
	[0161.871] GetFileType (hFile=0x344) returned 0x1
	[0161.871] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.871] WriteFile (in: hFile=0x344, lpBuffer=0x1264a0a0*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1264a0a0*, lpNumberOfBytesWritten=0x124f5d00*=0x43, lpOverlapped=0x124f5d0c) returned 1
	[0161.871] GetFileType (hFile=0x344) returned 0x1
	[0161.871] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0161.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0161.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0161.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0161.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0161.872] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0161.872] WriteFile (in: hFile=0x354, lpBuffer=0x12632500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12632500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.872] CloseHandle (hObject=0x354) returned 1
	[0161.872] CloseHandle (hObject=0x344) returned 1
	[0161.872] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.098] SetEvent (hEvent=0x30c) returned 1
	[0162.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V1-6Rq.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v1-6rq.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.099] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0162.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V1-6Rq.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v1-6rq.png"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb80fa20, ftCreationTime.dwHighDateTime=0x1d5e146, ftLastAccessTime.dwLowDateTime=0x323bad90, ftLastAccessTime.dwHighDateTime=0x1d5d7d7, ftLastWriteTime.dwLowDateTime=0x323bad90, ftLastWriteTime.dwHighDateTime=0x1d5d7d7, nFileSizeHigh=0x0, nFileSizeLow=0xaf37)) returned 1
	[0162.099] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c4e0 | out: pbBuffer=0x1244c4e0) returned 1
	[0162.099] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0162.099] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0162.106] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0162.106] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0162.106] SetEvent (hEvent=0xa0) returned 1
	[0162.106] SetEvent (hEvent=0x30c) returned 1
	[0162.106] ReadFile (in: hFile=0x344, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f5d1c*=0xaf37, lpOverlapped=0x0) returned 1
	[0162.113] SetEvent (hEvent=0x30c) returned 1
	[0162.113] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0162.174] SwitchToThread () returned 1
	[0162.176] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0162.176] SetEvent (hEvent=0x80) returned 1
	[0162.176] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0162.183] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0162.184] GetFileType (hFile=0x344) returned 0x1
	[0162.184] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.184] WriteFile (in: hFile=0x344, lpBuffer=0x128d8000*, nNumberOfBytesToWrite=0xaf37, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x128d8000*, lpNumberOfBytesWritten=0x1245bd00*=0xaf37, lpOverlapped=0x1245bd0c) returned 1
	[0162.184] GetFileType (hFile=0x344) returned 0x1
	[0162.184] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xaf37, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0162.185] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0162.185] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0162.185] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0162.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V1-6Rq.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v1-6rq.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0162.185] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0162.185] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.186] CloseHandle (hObject=0x340) returned 1
	[0162.186] CloseHandle (hObject=0x344) returned 1
	[0162.186] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V1-6Rq.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v1-6rq.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V1-6Rq.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v1-6rq.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.221] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0162.230] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0162.260] SetEvent (hEvent=0x320) returned 1
	[0162.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\baQLVf.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\baqlvf.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0162.260] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0162.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\baQLVf.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\baqlvf.avi"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15aa0140, ftCreationTime.dwHighDateTime=0x1d5da66, ftLastAccessTime.dwLowDateTime=0x27d24080, ftLastAccessTime.dwHighDateTime=0x1d5e335, ftLastWriteTime.dwLowDateTime=0x27d24080, ftLastWriteTime.dwHighDateTime=0x1d5e335, nFileSizeHigh=0x0, nFileSizeLow=0x5a7c)) returned 1
	[0162.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0162.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0162.261] ReadFile (in: hFile=0x340, lpBuffer=0x1256e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1256e000*, lpNumberOfBytesRead=0x1245bd1c*=0x5a7c, lpOverlapped=0x0) returned 1
	[0162.292] GetFileType (hFile=0x340) returned 0x1
	[0162.292] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.292] WriteFile (in: hFile=0x340, lpBuffer=0x1267c000*, nNumberOfBytesToWrite=0x5a7c, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x1267c000*, lpNumberOfBytesWritten=0x1245bd00*=0x5a7c, lpOverlapped=0x1245bd0c) returned 1
	[0162.293] GetFileType (hFile=0x340) returned 0x1
	[0162.293] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x5a7c, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0162.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0162.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0162.294] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0162.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\baQLVf.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\baqlvf.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0162.294] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0162.294] WriteFile (in: hFile=0x354, lpBuffer=0x12524500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12524500*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.294] CloseHandle (hObject=0x354) returned 1
	[0162.294] CloseHandle (hObject=0x340) returned 1
	[0162.294] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\baQLVf.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\baqlvf.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\baQLVf.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\baqlvf.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\guhNBmJGTnVeriINiWLp.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\guhnbmjgtnveriiniwlp.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0162.300] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0162.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\guhNBmJGTnVeriINiWLp.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\guhnbmjgtnveriiniwlp.flv"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x586464d0, ftCreationTime.dwHighDateTime=0x1d5e12d, ftLastAccessTime.dwLowDateTime=0xc50f0a90, ftLastAccessTime.dwHighDateTime=0x1d5e015, ftLastWriteTime.dwLowDateTime=0xc50f0a90, ftLastWriteTime.dwHighDateTime=0x1d5e015, nFileSizeHigh=0x0, nFileSizeLow=0x18fd2)) returned 1
	[0162.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0162.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0162.300] ReadFile (in: hFile=0x340, lpBuffer=0x126e4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126e4000*, lpNumberOfBytesRead=0x1245bd1c*=0x18fd2, lpOverlapped=0x0) returned 1
	[0162.334] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0162.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jxznuzrhQcG2KGu.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jxznuzrhqcg2kgu.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.405] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0162.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jxznuzrhQcG2KGu.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jxznuzrhqcg2kgu.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1b54ba0, ftCreationTime.dwHighDateTime=0x1d5dbe5, ftLastAccessTime.dwLowDateTime=0x68aa4990, ftLastAccessTime.dwHighDateTime=0x1d5dd45, ftLastWriteTime.dwLowDateTime=0x68aa4990, ftLastWriteTime.dwHighDateTime=0x1d5dd45, nFileSizeHigh=0x0, nFileSizeLow=0x14486)) returned 1
	[0162.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0162.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0162.406] ReadFile (in: hFile=0x344, lpBuffer=0x126ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126ba000*, lpNumberOfBytesRead=0x1245dd1c*=0x14486, lpOverlapped=0x0) returned 1
	[0162.429] GetFileType (hFile=0x344) returned 0x1
	[0162.429] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.429] WriteFile (in: hFile=0x344, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x14486, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1245dd00*=0x14486, lpOverlapped=0x1245dd0c) returned 1
	[0162.512] GetFileType (hFile=0x344) returned 0x1
	[0162.512] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x14486, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.512] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0162.513] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0162.513] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0162.513] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788250 | out: pbBuffer=0x12788250) returned 1
	[0162.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jxznuzrhQcG2KGu.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jxznuzrhqcg2kgu.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0162.513] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0162.513] WriteFile (in: hFile=0x2cc, lpBuffer=0x125dc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc500*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.540] CloseHandle (hObject=0x2cc) returned 1
	[0162.541] CloseHandle (hObject=0x344) returned 1
	[0162.544] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jxznuzrhQcG2KGu.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jxznuzrhqcg2kgu.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jxznuzrhQcG2KGu.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jxznuzrhqcg2kgu.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uGFu7drcdnX3HWX eiY.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ugfu7drcdnx3hwx eiy.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.591] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0162.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uGFu7drcdnX3HWX eiY.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ugfu7drcdnx3hwx eiy.wav"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec3796b0, ftCreationTime.dwHighDateTime=0x1d5daa6, ftLastAccessTime.dwLowDateTime=0x50d2db90, ftLastAccessTime.dwHighDateTime=0x1d5dec4, ftLastWriteTime.dwLowDateTime=0x50d2db90, ftLastWriteTime.dwHighDateTime=0x1d5dec4, nFileSizeHigh=0x0, nFileSizeLow=0xe3e5)) returned 1
	[0162.591] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0162.591] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0162.591] ReadFile (in: hFile=0x344, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1242bd1c*=0xe3e5, lpOverlapped=0x0) returned 1
	[0162.596] GetFileType (hFile=0x344) returned 0x1
	[0162.596] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.596] WriteFile (in: hFile=0x344, lpBuffer=0x12760000*, nNumberOfBytesToWrite=0xe3e5, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12760000*, lpNumberOfBytesWritten=0x1242bd00*=0xe3e5, lpOverlapped=0x1242bd0c) returned 1
	[0162.597] GetFileType (hFile=0x344) returned 0x1
	[0162.597] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xe3e5, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0162.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0162.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0162.598] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0f0 | out: pbBuffer=0x1251e0f0) returned 1
	[0162.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uGFu7drcdnX3HWX eiY.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ugfu7drcdnx3hwx eiy.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0162.598] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0162.598] WriteFile (in: hFile=0x33c, lpBuffer=0x126e2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x126e2000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.598] CloseHandle (hObject=0x33c) returned 1
	[0162.599] CloseHandle (hObject=0x344) returned 1
	[0162.599] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uGFu7drcdnX3HWX eiY.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ugfu7drcdnx3hwx eiy.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uGFu7drcdnX3HWX eiY.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ugfu7drcdnx3hwx eiy.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.673] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\vSf2fRW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vsf2frw.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.674] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0162.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\vSf2fRW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vsf2frw.wav"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3a7b2a0, ftCreationTime.dwHighDateTime=0x1d5e6f0, ftLastAccessTime.dwLowDateTime=0x89c5a040, ftLastAccessTime.dwHighDateTime=0x1d5e739, ftLastWriteTime.dwLowDateTime=0x89c5a040, ftLastWriteTime.dwHighDateTime=0x1d5e739, nFileSizeHigh=0x0, nFileSizeLow=0x1789e)) returned 1
	[0162.674] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c7a0 | out: pbBuffer=0x1244c7a0) returned 1
	[0162.674] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788278 | out: pbBuffer=0x12788278) returned 1
	[0162.674] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0162.677] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0162.677] SetEvent (hEvent=0xa0) returned 1
	[0162.677] SetEvent (hEvent=0x80) returned 1
	[0162.677] ReadFile (in: hFile=0x344, lpBuffer=0x12876000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12876000*, lpNumberOfBytesRead=0x1245dd1c*=0x1789e, lpOverlapped=0x0) returned 1
	[0162.683] GetFileType (hFile=0x344) returned 0x1
	[0162.683] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.684] WriteFile (in: hFile=0x344, lpBuffer=0x128be000*, nNumberOfBytesToWrite=0x1789e, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x128be000*, lpNumberOfBytesWritten=0x1245dd00*=0x1789e, lpOverlapped=0x1245dd0c) returned 1
	[0162.684] GetFileType (hFile=0x344) returned 0x1
	[0162.684] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1789e, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.685] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0162.685] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0162.685] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0162.685] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788330 | out: pbBuffer=0x12788330) returned 1
	[0162.685] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\vSf2fRW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vsf2frw.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0162.686] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0162.686] WriteFile (in: hFile=0x33c, lpBuffer=0x125dca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125dca00*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.686] CloseHandle (hObject=0x33c) returned 1
	[0162.687] CloseHandle (hObject=0x344) returned 1
	[0162.688] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\vSf2fRW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vsf2frw.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\vSf2fRW.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vsf2frw.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.769] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.105] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.118] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.122] SetEvent (hEvent=0x320) returned 1
	[0163.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0163.123] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0163.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d)) returned 1
	[0163.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732080 | out: pbBuffer=0x12732080) returned 1
	[0163.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e030 | out: pbBuffer=0x1251e030) returned 1
	[0163.123] ReadFile (in: hFile=0x33c, lpBuffer=0x12582000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12582000*, lpNumberOfBytesRead=0x1242bd1c*=0xf1d, lpOverlapped=0x0) returned 1
	[0163.131] GetFileType (hFile=0x33c) returned 0x1
	[0163.131] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.131] WriteFile (in: hFile=0x33c, lpBuffer=0x125d3000*, nNumberOfBytesToWrite=0xf1d, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125d3000*, lpNumberOfBytesWritten=0x1242bd00*=0xf1d, lpOverlapped=0x1242bd0c) returned 1
	[0163.131] GetFileType (hFile=0x33c) returned 0x1
	[0163.131] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xf1d, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434601 | out: pbBuffer=0x12434601) returned 1
	[0163.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434701 | out: pbBuffer=0x12434701) returned 1
	[0163.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0163.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5e0 | out: pbBuffer=0x1251e5e0) returned 1
	[0163.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.132] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0163.132] WriteFile (in: hFile=0x350, lpBuffer=0x125d8500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125d8500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.132] CloseHandle (hObject=0x350) returned 1
	[0163.133] CloseHandle (hObject=0x33c) returned 1
	[0163.134] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.164] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.166] SetEvent (hEvent=0x80) returned 1
	[0163.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0163.167] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.167] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b)) returned 1
	[0163.168] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0163.168] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0163.168] ReadFile (in: hFile=0x33c, lpBuffer=0x12974000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12974000*, lpNumberOfBytesRead=0x124f5d1c*=0x58b, lpOverlapped=0x0) returned 1
	[0163.176] GetFileType (hFile=0x33c) returned 0x1
	[0163.176] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.177] WriteFile (in: hFile=0x33c, lpBuffer=0x1285a000*, nNumberOfBytesToWrite=0x58b, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1285a000*, lpNumberOfBytesWritten=0x124f5d00*=0x58b, lpOverlapped=0x124f5d0c) returned 1
	[0163.177] GetFileType (hFile=0x33c) returned 0x1
	[0163.177] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x58b, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.177] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0163.177] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0163.177] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0163.178] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0163.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.178] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.178] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.178] CloseHandle (hObject=0x34c) returned 1
	[0163.180] CloseHandle (hObject=0x33c) returned 1
	[0163.182] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.217] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.219] SetEvent (hEvent=0x80) returned 1
	[0163.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.220] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680)) returned 1
	[0163.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0163.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0163.220] ReadFile (in: hFile=0x344, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f3d1c*=0x680, lpOverlapped=0x0) returned 1
	[0163.232] GetFileType (hFile=0x344) returned 0x1
	[0163.232] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.232] WriteFile (in: hFile=0x344, lpBuffer=0x12518700*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12518700*, lpNumberOfBytesWritten=0x124f3d00*=0x680, lpOverlapped=0x124f3d0c) returned 1
	[0163.232] GetFileType (hFile=0x344) returned 0x1
	[0163.232] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x680, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0163.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0163.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0163.233] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0163.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.233] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.233] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.233] CloseHandle (hObject=0x2cc) returned 1
	[0163.235] CloseHandle (hObject=0x344) returned 1
	[0163.242] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.270] SetEvent (hEvent=0x2e4) returned 1
	[0163.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.271] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0163.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0163.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0163.271] ReadFile (in: hFile=0x344, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f3d1c*=0x1d7, lpOverlapped=0x0) returned 1
	[0163.276] GetFileType (hFile=0x344) returned 0x1
	[0163.276] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.276] WriteFile (in: hFile=0x344, lpBuffer=0x12600000*, nNumberOfBytesToWrite=0x1d7, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12600000*, lpNumberOfBytesWritten=0x124f3d00*=0x1d7, lpOverlapped=0x124f3d0c) returned 1
	[0163.276] GetFileType (hFile=0x344) returned 0x1
	[0163.276] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1d7, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.276] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0163.276] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0163.277] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0163.277] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103e0 | out: pbBuffer=0x124103e0) returned 1
	[0163.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.277] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.277] WriteFile (in: hFile=0x34c, lpBuffer=0x12636000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12636000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.277] CloseHandle (hObject=0x34c) returned 1
	[0163.281] CloseHandle (hObject=0x344) returned 1
	[0163.288] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.309] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1
	[0163.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0163.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410408 | out: pbBuffer=0x12410408) returned 1
	[0163.309] ReadFile (in: hFile=0x344, lpBuffer=0x125a2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x125a2000*, lpNumberOfBytesRead=0x1245dd1c*=0x648, lpOverlapped=0x0) returned 1
	[0163.317] GetFileType (hFile=0x344) returned 0x1
	[0163.317] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.317] WriteFile (in: hFile=0x344, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x648, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x1245dd00*=0x648, lpOverlapped=0x1245dd0c) returned 1
	[0163.318] GetFileType (hFile=0x344) returned 0x1
	[0163.318] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x648, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0163.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0163.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0163.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104e0 | out: pbBuffer=0x124104e0) returned 1
	[0163.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.319] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.319] WriteFile (in: hFile=0x34c, lpBuffer=0x12636500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12636500*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.319] CloseHandle (hObject=0x34c) returned 1
	[0163.327] CloseHandle (hObject=0x344) returned 1
	[0163.328] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.357] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.366] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.375] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.396] SetEvent (hEvent=0x2f4) returned 1
	[0163.396] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.397] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0163.397] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0163.397] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0163.397] ReadFile (in: hFile=0x344, lpBuffer=0x128ee000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128ee000*, lpNumberOfBytesRead=0x124f5d1c*=0x6e3, lpOverlapped=0x0) returned 1
	[0163.438] GetFileType (hFile=0x344) returned 0x1
	[0163.438] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.438] WriteFile (in: hFile=0x344, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0x6e3, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x124f5d00*=0x6e3, lpOverlapped=0x124f5d0c) returned 1
	[0163.438] GetFileType (hFile=0x344) returned 0x1
	[0163.438] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x6e3, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0163.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0163.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0163.439] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103d0 | out: pbBuffer=0x124103d0) returned 1
	[0163.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.439] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.439] WriteFile (in: hFile=0x2cc, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.439] CloseHandle (hObject=0x2cc) returned 1
	[0163.441] CloseHandle (hObject=0x344) returned 1
	[0163.442] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.468] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.483] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.484] SetEvent (hEvent=0x2f4) returned 1
	[0163.484] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.486] SetEvent (hEvent=0x2f4) returned 1
	[0163.486] SetEvent (hEvent=0x320) returned 1
	[0163.486] SwitchToThread () returned 1
	[0163.487] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.492] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.526] SetEvent (hEvent=0x320) returned 1
	[0163.526] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.527] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.527] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0163.527] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0163.528] ReadFile (in: hFile=0x34c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1245dd1c*=0x1cf, lpOverlapped=0x0) returned 1
	[0163.529] GetFileType (hFile=0x34c) returned 0x1
	[0163.529] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.529] WriteFile (in: hFile=0x34c, lpBuffer=0x124c81e0*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x124c81e0*, lpNumberOfBytesWritten=0x1245dd00*=0x1cf, lpOverlapped=0x1245dd0c) returned 1
	[0163.530] GetFileType (hFile=0x34c) returned 0x1
	[0163.530] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1cf, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.530] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0163.530] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0163.530] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0163.530] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0163.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.531] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.531] WriteFile (in: hFile=0x2cc, lpBuffer=0x125ce000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125ce000*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.531] CloseHandle (hObject=0x2cc) returned 1
	[0163.533] CloseHandle (hObject=0x34c) returned 1
	[0163.534] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.559] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.563] SetEvent (hEvent=0x320) returned 1
	[0163.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.563] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.564] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0163.564] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0163.564] ReadFile (in: hFile=0x34c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1245dd1c*=0x1cf, lpOverlapped=0x0) returned 1
	[0163.565] GetFileType (hFile=0x34c) returned 0x1
	[0163.565] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.565] WriteFile (in: hFile=0x34c, lpBuffer=0x124c83c0*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x124c83c0*, lpNumberOfBytesWritten=0x1245dd00*=0x1cf, lpOverlapped=0x1245dd0c) returned 1
	[0163.565] GetFileType (hFile=0x34c) returned 0x1
	[0163.565] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1cf, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0163.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0163.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0163.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0163.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.566] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.566] WriteFile (in: hFile=0x2cc, lpBuffer=0x125ce500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125ce500*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.567] CloseHandle (hObject=0x2cc) returned 1
	[0163.567] CloseHandle (hObject=0x34c) returned 1
	[0163.568] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.589] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.594] SetEvent (hEvent=0x320) returned 1
	[0163.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.595] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0163.595] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732680 | out: pbBuffer=0x12732680) returned 1
	[0163.595] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e738 | out: pbBuffer=0x1251e738) returned 1
	[0163.595] ReadFile (in: hFile=0x350, lpBuffer=0x1286a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1286a000*, lpNumberOfBytesRead=0x1245dd1c*=0x6e3, lpOverlapped=0x0) returned 1
	[0163.602] GetFileType (hFile=0x350) returned 0x1
	[0163.602] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.602] WriteFile (in: hFile=0x350, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0x6e3, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x1245dd00*=0x6e3, lpOverlapped=0x1245dd0c) returned 1
	[0163.603] GetFileType (hFile=0x350) returned 0x1
	[0163.603] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x6e3, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0163.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0163.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0163.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e840 | out: pbBuffer=0x1251e840) returned 1
	[0163.603] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.603] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.603] WriteFile (in: hFile=0x344, lpBuffer=0x125cef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125cef00*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.604] CloseHandle (hObject=0x344) returned 1
	[0163.604] CloseHandle (hObject=0x350) returned 1
	[0163.607] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.638] SetEvent (hEvent=0x2e4) returned 1
	[0163.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.639] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1
	[0163.639] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0163.639] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0163.639] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0163.642] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0163.642] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0163.642] SetEvent (hEvent=0xa0) returned 1
	[0163.642] SetEvent (hEvent=0x2e4) returned 1
	[0163.642] ReadFile (in: hFile=0x344, lpBuffer=0x1290a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1290a000*, lpNumberOfBytesRead=0x1245dd1c*=0x5e0, lpOverlapped=0x0) returned 1
	[0164.052] GetFileType (hFile=0x344) returned 0x1
	[0164.052] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.052] WriteFile (in: hFile=0x344, lpBuffer=0x124fc600*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x124fc600*, lpNumberOfBytesWritten=0x1245dd00*=0x5e0, lpOverlapped=0x1245dd0c) returned 1
	[0164.052] GetFileType (hFile=0x344) returned 0x1
	[0164.052] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x5e0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0164.053] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0164.053] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0164.053] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107f0 | out: pbBuffer=0x124107f0) returned 1
	[0164.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0164.054] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0164.054] WriteFile (in: hFile=0x2cc, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0164.054] CloseHandle (hObject=0x2cc) returned 1
	[0164.054] CloseHandle (hObject=0x344) returned 1
	[0164.054] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0164.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0164.685] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0164.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1
	[0164.685] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f700 | out: pbBuffer=0x1240f700) returned 1
	[0164.685] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410808 | out: pbBuffer=0x12410808) returned 1
	[0164.686] ReadFile (in: hFile=0x344, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x1245dd1c*=0x652, lpOverlapped=0x0) returned 1
	[0164.710] GetFileType (hFile=0x344) returned 0x1
	[0164.710] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.710] WriteFile (in: hFile=0x344, lpBuffer=0x12518e00*, nNumberOfBytesToWrite=0x652, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12518e00*, lpNumberOfBytesWritten=0x1245dd00*=0x652, lpOverlapped=0x1245dd0c) returned 1
	[0164.710] GetFileType (hFile=0x344) returned 0x1
	[0164.710] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x652, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.710] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401481 | out: pbBuffer=0x12401481) returned 1
	[0164.711] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401581 | out: pbBuffer=0x12401581) returned 1
	[0164.711] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401681 | out: pbBuffer=0x12401681) returned 1
	[0164.711] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410930 | out: pbBuffer=0x12410930) returned 1
	[0164.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0164.711] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0164.711] WriteFile (in: hFile=0x2cc, lpBuffer=0x1253a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1253a500*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0164.711] CloseHandle (hObject=0x2cc) returned 1
	[0164.712] CloseHandle (hObject=0x344) returned 1
	[0164.712] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0164.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1
	[0164.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed)) returned 1
	[0164.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0164.797] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0164.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1
	[0164.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0164.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0164.797] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x1245dd1c*=0x652, lpOverlapped=0x0) returned 1
	[0164.987] GetFileType (hFile=0x33c) returned 0x1
	[0164.987] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.987] WriteFile (in: hFile=0x33c, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x652, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x1245dd00*=0x652, lpOverlapped=0x1245dd0c) returned 1
	[0164.987] GetFileType (hFile=0x33c) returned 0x1
	[0164.987] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x652, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.988] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0164.988] SetEvent (hEvent=0x320) returned 1
	[0164.989] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0164.989] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0164.989] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0164.989] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440e0 | out: pbBuffer=0x127440e0) returned 1
	[0164.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0164.989] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0164.989] WriteFile (in: hFile=0x344, lpBuffer=0x125d6000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125d6000*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0164.990] CloseHandle (hObject=0x344) returned 1
	[0165.117] CloseHandle (hObject=0x33c) returned 1
	[0165.279] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0166.847] SetEvent (hEvent=0xa0) returned 1
	[0166.847] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0166.870] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0166.883] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0166.901] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0166.936] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0166.952] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0166.965] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0166.995] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.017] SetEvent (hEvent=0x30c) returned 1
	[0167.017] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.025] SetEvent (hEvent=0x30c) returned 1
	[0167.025] SetEvent (hEvent=0x318) returned 1
	[0167.025] SetEvent (hEvent=0x70) returned 1
	[0167.025] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.615] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.616] SetEvent (hEvent=0x2e8) returned 1
	[0167.616] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.618] SetEvent (hEvent=0x2e8) returned 1
	[0167.618] SetEvent (hEvent=0x80) returned 1
	[0167.618] SwitchToThread () returned 1
	[0167.619] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.642] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.667] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.702] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.717] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.739] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.755] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.770] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.794] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.811] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.824] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.834] SetEvent (hEvent=0x2f4) returned 1
	[0167.834] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0167.840] SetEvent (hEvent=0x80) returned 1
	[0167.841] SetEvent (hEvent=0x2e8) returned 1
	[0167.841] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0167.842] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0167.843] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0167.843] SetEvent (hEvent=0x30c) returned 1
	[0167.843] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0167.845] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.051] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.052] SetEvent (hEvent=0x80) returned 1
	[0168.052] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.056] SetEvent (hEvent=0x80) returned 1
	[0168.056] SetEvent (hEvent=0x2e8) returned 1
	[0168.056] SwitchToThread () returned 1
	[0168.072] SwitchToThread () returned 1
	[0168.074] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.078] SetEvent (hEvent=0x2e8) returned 1
	[0168.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.079] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196)) returned 1
	[0168.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0168.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0168.079] ReadFile (in: hFile=0x34c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0x196, lpOverlapped=0x0) returned 1
	[0168.081] GetFileType (hFile=0x34c) returned 0x1
	[0168.081] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.081] WriteFile (in: hFile=0x34c, lpBuffer=0x124b8000*, nNumberOfBytesToWrite=0x196, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124b8000*, lpNumberOfBytesWritten=0x124f5d00*=0x196, lpOverlapped=0x124f5d0c) returned 1
	[0168.081] GetFileType (hFile=0x34c) returned 0x1
	[0168.081] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x196, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0168.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0168.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0168.082] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0168.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.082] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.082] WriteFile (in: hFile=0x350, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.082] CloseHandle (hObject=0x350) returned 1
	[0168.083] CloseHandle (hObject=0x34c) returned 1
	[0168.084] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.111] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.122] SetEvent (hEvent=0x2e8) returned 1
	[0168.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.124] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0168.124] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0168.124] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0168.124] ReadFile (in: hFile=0x34c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12429d1c*=0x186, lpOverlapped=0x0) returned 1
	[0168.126] GetFileType (hFile=0x34c) returned 0x1
	[0168.126] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.127] WriteFile (in: hFile=0x34c, lpBuffer=0x12462d00*, nNumberOfBytesToWrite=0x186, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12462d00*, lpNumberOfBytesWritten=0x12429d00*=0x186, lpOverlapped=0x12429d0c) returned 1
	[0168.127] GetFileType (hFile=0x34c) returned 0x1
	[0168.127] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x186, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0168.128] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0168.128] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0168.128] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0168.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.128] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.129] WriteFile (in: hFile=0x350, lpBuffer=0x12784500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12784500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.129] CloseHandle (hObject=0x350) returned 1
	[0168.130] CloseHandle (hObject=0x34c) returned 1
	[0168.132] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.169] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.185] SetEvent (hEvent=0x2e8) returned 1
	[0168.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.187] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1
	[0168.187] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0168.187] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0168.187] ReadFile (in: hFile=0x34c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f1d1c*=0x1ae, lpOverlapped=0x0) returned 1
	[0168.195] GetFileType (hFile=0x34c) returned 0x1
	[0168.195] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.195] WriteFile (in: hFile=0x34c, lpBuffer=0x1271c540*, nNumberOfBytesToWrite=0x1ae, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1271c540*, lpNumberOfBytesWritten=0x124f1d00*=0x1ae, lpOverlapped=0x124f1d0c) returned 1
	[0168.195] GetFileType (hFile=0x34c) returned 0x1
	[0168.195] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1ae, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.195] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0168.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0168.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0168.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127882c0 | out: pbBuffer=0x127882c0) returned 1
	[0168.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.196] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.196] WriteFile (in: hFile=0x350, lpBuffer=0x12784f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12784f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.197] CloseHandle (hObject=0x350) returned 1
	[0168.199] CloseHandle (hObject=0x34c) returned 1
	[0168.200] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.260] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.266] SetEvent (hEvent=0x2e8) returned 1
	[0168.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.267] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1
	[0168.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0168.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0168.268] ReadFile (in: hFile=0x34c, lpBuffer=0x12886000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12886000*, lpNumberOfBytesRead=0x124f3d1c*=0x1a0, lpOverlapped=0x0) returned 1
	[0168.270] GetFileType (hFile=0x34c) returned 0x1
	[0168.270] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.270] WriteFile (in: hFile=0x34c, lpBuffer=0x12714b60*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12714b60*, lpNumberOfBytesWritten=0x124f3d00*=0x1a0, lpOverlapped=0x124f3d0c) returned 1
	[0168.270] GetFileType (hFile=0x34c) returned 0x1
	[0168.270] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.270] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0168.270] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0168.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0168.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744350 | out: pbBuffer=0x12744350) returned 1
	[0168.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.271] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.271] WriteFile (in: hFile=0x350, lpBuffer=0x1261a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261a500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.271] CloseHandle (hObject=0x350) returned 1
	[0168.272] CloseHandle (hObject=0x34c) returned 1
	[0168.274] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.316] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.321] SetEvent (hEvent=0x318) returned 1
	[0168.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0168.322] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0168.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0168.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410040 | out: pbBuffer=0x12410040) returned 1
	[0168.322] ReadFile (in: hFile=0x33c, lpBuffer=0x12906000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12906000*, lpNumberOfBytesRead=0x124f5d1c*=0x192, lpOverlapped=0x0) returned 1
	[0168.324] GetFileType (hFile=0x33c) returned 0x1
	[0168.324] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.324] WriteFile (in: hFile=0x33c, lpBuffer=0x12714000*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12714000*, lpNumberOfBytesWritten=0x124f5d00*=0x192, lpOverlapped=0x124f5d0c) returned 1
	[0168.324] GetFileType (hFile=0x33c) returned 0x1
	[0168.325] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0168.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0168.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0168.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0168.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.325] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.326] WriteFile (in: hFile=0x350, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.326] CloseHandle (hObject=0x350) returned 1
	[0168.328] CloseHandle (hObject=0x33c) returned 1
	[0168.329] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.364] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.368] SetEvent (hEvent=0x318) returned 1
	[0168.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.369] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0168.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0168.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0168.369] ReadFile (in: hFile=0x34c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x194, lpOverlapped=0x0) returned 1
	[0168.371] GetFileType (hFile=0x34c) returned 0x1
	[0168.371] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.371] WriteFile (in: hFile=0x34c, lpBuffer=0x125eeb60*, nNumberOfBytesToWrite=0x194, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125eeb60*, lpNumberOfBytesWritten=0x12429d00*=0x194, lpOverlapped=0x12429d0c) returned 1
	[0168.372] GetFileType (hFile=0x34c) returned 0x1
	[0168.372] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x194, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.372] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0168.372] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0168.372] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0168.372] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744460 | out: pbBuffer=0x12744460) returned 1
	[0168.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.373] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.373] WriteFile (in: hFile=0x350, lpBuffer=0x1261a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261a500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.373] CloseHandle (hObject=0x350) returned 1
	[0168.377] CloseHandle (hObject=0x34c) returned 1
	[0168.378] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.424] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.429] SetEvent (hEvent=0x318) returned 1
	[0168.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.431] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1
	[0168.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0168.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0168.431] ReadFile (in: hFile=0x34c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f1d1c*=0x18e, lpOverlapped=0x0) returned 1
	[0168.436] GetFileType (hFile=0x34c) returned 0x1
	[0168.436] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.436] WriteFile (in: hFile=0x34c, lpBuffer=0x1261eb60*, nNumberOfBytesToWrite=0x18e, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1261eb60*, lpNumberOfBytesWritten=0x124f1d00*=0x18e, lpOverlapped=0x124f1d0c) returned 1
	[0168.436] GetFileType (hFile=0x34c) returned 0x1
	[0168.436] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x18e, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.436] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0168.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0168.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0168.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0168.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.437] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.437] WriteFile (in: hFile=0x350, lpBuffer=0x12526500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12526500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.438] CloseHandle (hObject=0x350) returned 1
	[0168.442] CloseHandle (hObject=0x34c) returned 1
	[0168.443] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.491] SetEvent (hEvent=0x318) returned 1
	[0168.491] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0168.492] SetEvent (hEvent=0x318) returned 1
	[0168.493] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0168.493] SetEvent (hEvent=0x318) returned 1
	[0168.494] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0168.495] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.495] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0168.496] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.496] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0168.496] SetEvent (hEvent=0xa0) returned 1
	[0168.496] SetEvent (hEvent=0x318) returned 1
	[0168.497] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0168.527] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.729] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.769] SetEvent (hEvent=0x30c) returned 1
	[0168.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0168.770] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0168.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400)) returned 1
	[0168.770] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0168.770] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0168.770] ReadFile (in: hFile=0x1e4, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x1276dd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0168.794] GetFileType (hFile=0x1e4) returned 0x1
	[0168.794] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.794] WriteFile (in: hFile=0x1e4, lpBuffer=0x1259a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1259a000*, lpNumberOfBytesWritten=0x1276dd00*=0x20000, lpOverlapped=0x1276dd0c) returned 1
	[0168.795] GetFileType (hFile=0x1e4) returned 0x1
	[0168.795] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.795] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0168.795] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0168.795] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0168.795] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0168.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.796] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0168.796] WriteFile (in: hFile=0x350, lpBuffer=0x1271c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1271c000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.796] CloseHandle (hObject=0x350) returned 1
	[0168.796] CloseHandle (hObject=0x1e4) returned 1
	[0168.796] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.799] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.849] SetEvent (hEvent=0x80) returned 1
	[0168.849] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.858] SetEvent (hEvent=0x70) returned 1
	[0168.858] SetEvent (hEvent=0x318) returned 1
	[0168.858] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.859] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.942] SetEvent (hEvent=0x80) returned 1
	[0168.942] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.944] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0168.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.997] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1
	[0168.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1
	[0168.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.997] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.999] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0168.999] WriteFile (in: hFile=0x2dc, lpBuffer=0x125f6000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x125f6000*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0169.000] CloseHandle (hObject=0x2dc) returned 1
	[0169.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.120] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.121] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda2b43a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda5adf20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.121] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1
	[0169.121] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1
	[0169.121] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.121] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.131] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0169.131] WriteFile (in: hFile=0x2dc, lpBuffer=0x125f7300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x125f7300*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0169.132] CloseHandle (hObject=0x2dc) returned 1
	[0169.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5)) returned 1
	[0169.133] SetEvent (hEvent=0x2e8) returned 1
	[0169.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347)) returned 1
	[0169.134] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.134] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda5adf20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda5adf20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefc97c0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x3a5)) returned 1
	[0169.134] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322a0 | out: pbBuffer=0x127322a0) returned 1
	[0169.135] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e370 | out: pbBuffer=0x1251e370) returned 1
	[0169.135] ReadFile (in: hFile=0x2dc, lpBuffer=0x12906000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12906000*, lpNumberOfBytesRead=0x1276dd1c*=0x3a5, lpOverlapped=0x0) returned 1
	[0169.164] SetEvent (hEvent=0xa0) returned 1
	[0169.164] GetFileType (hFile=0x2dc) returned 0x1
	[0169.164] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.164] WriteFile (in: hFile=0x2dc, lpBuffer=0x12498400*, nNumberOfBytesToWrite=0x3a5, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12498400*, lpNumberOfBytesWritten=0x1276dd00*=0x3a5, lpOverlapped=0x1276dd0c) returned 1
	[0169.164] GetFileType (hFile=0x2dc) returned 0x1
	[0169.164] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x3a5, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0169.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0169.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0169.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e6d8 | out: pbBuffer=0x1251e6d8) returned 1
	[0169.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0169.165] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.165] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.165] CloseHandle (hObject=0x1e4) returned 1
	[0169.166] CloseHandle (hObject=0x2dc) returned 1
	[0169.166] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\48B76449F3D5FEFA1133AA805E420F0FCA643651.crl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\48b76449f3d5fefa1133aa805e420f0fca643651.crl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.168] SetEvent (hEvent=0x2e8) returned 1
	[0169.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.169] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda3e4ea0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda3e4ea0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xdefa3660, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x9347)) returned 1
	[0169.169] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324c0 | out: pbBuffer=0x127324c0) returned 1
	[0169.169] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e6f0 | out: pbBuffer=0x1251e6f0) returned 1
	[0169.169] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0169.172] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0169.172] SetEvent (hEvent=0x2e8) returned 1
	[0169.172] ReadFile (in: hFile=0x2dc, lpBuffer=0x12946000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12946000*, lpNumberOfBytesRead=0x1276dd1c*=0x9347, lpOverlapped=0x0) returned 1
	[0169.178] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0169.240] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0169.397] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0169.464] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0169.472] SetEvent (hEvent=0x318) returned 1
	[0169.472] SwitchToThread () returned 1
	[0169.472] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0169.570] SetEvent (hEvent=0x318) returned 1
	[0169.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.571] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6)) returned 1
	[0169.571] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0169.571] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0169.571] ReadFile (in: hFile=0x344, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1276dd1c*=0x1d6, lpOverlapped=0x0) returned 1
	[0169.573] GetFileType (hFile=0x344) returned 0x1
	[0169.573] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.573] WriteFile (in: hFile=0x344, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x1d6, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x1276dd00*=0x1d6, lpOverlapped=0x1276dd0c) returned 1
	[0169.573] GetFileType (hFile=0x344) returned 0x1
	[0169.574] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1d6, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.574] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0169.574] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0169.574] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0169.574] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0169.574] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0169.574] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.574] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.575] CloseHandle (hObject=0x34c) returned 1
	[0169.575] CloseHandle (hObject=0x344) returned 1
	[0169.575] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.578] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0169.783] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0169.786] SetEvent (hEvent=0x30c) returned 1
	[0169.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0169.787] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0169.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x57)) returned 1
	[0169.788] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0169.788] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0169.788] ReadFile (in: hFile=0x34c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12769d1c*=0x57, lpOverlapped=0x0) returned 1
	[0169.790] GetFileType (hFile=0x34c) returned 0x1
	[0169.790] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.790] WriteFile (in: hFile=0x34c, lpBuffer=0x12456120*, nNumberOfBytesToWrite=0x57, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12456120*, lpNumberOfBytesWritten=0x12769d00*=0x57, lpOverlapped=0x12769d0c) returned 1
	[0169.790] GetFileType (hFile=0x34c) returned 0x1
	[0169.790] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x57, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0169.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0169.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0169.791] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0169.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.791] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0169.791] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.791] CloseHandle (hObject=0x2dc) returned 1
	[0169.793] CloseHandle (hObject=0x34c) returned 1
	[0169.794] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.948] SetEvent (hEvent=0x80) returned 1
	[0169.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0169.950] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0169.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4eb0f970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5a7)) returned 1
	[0169.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4a0 | out: pbBuffer=0x1252e4a0) returned 1
	[0169.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744368 | out: pbBuffer=0x12744368) returned 1
	[0169.951] ReadFile (in: hFile=0x34c, lpBuffer=0x12946000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12946000*, lpNumberOfBytesRead=0x12769d1c*=0x5a7, lpOverlapped=0x0) returned 1
	[0169.980] GetFileType (hFile=0x34c) returned 0x1
	[0169.980] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.980] WriteFile (in: hFile=0x34c, lpBuffer=0x12990000*, nNumberOfBytesToWrite=0x5a7, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12990000*, lpNumberOfBytesWritten=0x12769d00*=0x5a7, lpOverlapped=0x12769d0c) returned 1
	[0169.981] GetFileType (hFile=0x34c) returned 0x1
	[0169.981] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x5a7, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0169.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0169.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8801 | out: pbBuffer=0x127e8801) returned 1
	[0169.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444d8 | out: pbBuffer=0x127444d8) returned 1
	[0169.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.982] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0169.982] WriteFile (in: hFile=0x2dc, lpBuffer=0x127d4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d4500*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.983] CloseHandle (hObject=0x2dc) returned 1
	[0169.983] CloseHandle (hObject=0x34c) returned 1
	[0169.983] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.990] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0170.084] SetEvent (hEvent=0x70) returned 1
	[0170.084] SetEvent (hEvent=0x80) returned 1
	[0170.084] SetEvent (hEvent=0x30c) returned 1
	[0170.084] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0170.085] SetEvent (hEvent=0x70) returned 1
	[0170.085] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0170.099] SetEvent (hEvent=0x30c) returned 1
	[0170.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.100] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0170.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad)) returned 1
	[0170.100] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0170.100] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0170.101] ReadFile (in: hFile=0x2dc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0x5ad, lpOverlapped=0x0) returned 1
	[0170.117] GetFileType (hFile=0x2dc) returned 0x1
	[0170.117] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.118] WriteFile (in: hFile=0x2dc, lpBuffer=0x12648000*, nNumberOfBytesToWrite=0x5ad, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12648000*, lpNumberOfBytesWritten=0x12429d00*=0x5ad, lpOverlapped=0x12429d0c) returned 1
	[0170.118] GetFileType (hFile=0x2dc) returned 0x1
	[0170.118] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x5ad, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0170.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0170.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0170.119] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744340 | out: pbBuffer=0x12744340) returned 1
	[0170.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.119] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0170.119] WriteFile (in: hFile=0x34c, lpBuffer=0x12818500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12818500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.119] CloseHandle (hObject=0x34c) returned 1
	[0170.120] CloseHandle (hObject=0x2dc) returned 1
	[0170.121] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.178] SetEvent (hEvent=0xa0) returned 1
	[0170.178] SetEvent (hEvent=0x70) returned 1
	[0170.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.179] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0170.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1
	[0170.180] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0170.180] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788028 | out: pbBuffer=0x12788028) returned 1
	[0170.180] ReadFile (in: hFile=0x2dc, lpBuffer=0x126c8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126c8000*, lpNumberOfBytesRead=0x12429d1c*=0x4cc, lpOverlapped=0x0) returned 1
	[0170.350] GetFileType (hFile=0x2dc) returned 0x1
	[0170.350] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.350] WriteFile (in: hFile=0x2dc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x4cc, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d00*=0x4cc, lpOverlapped=0x12429d0c) returned 1
	[0170.350] GetFileType (hFile=0x2dc) returned 0x1
	[0170.350] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x4cc, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0170.352] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0170.352] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0170.352] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e720 | out: pbBuffer=0x1251e720) returned 1
	[0170.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0170.353] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0170.353] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.353] CloseHandle (hObject=0x1e4) returned 1
	[0170.355] CloseHandle (hObject=0x2dc) returned 1
	[0170.356] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1
	[0170.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1
	[0170.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.380] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0170.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1
	[0170.380] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732680 | out: pbBuffer=0x12732680) returned 1
	[0170.380] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e738 | out: pbBuffer=0x1251e738) returned 1
	[0170.380] ReadFile (in: hFile=0x2dc, lpBuffer=0x128ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128ba000*, lpNumberOfBytesRead=0x12429d1c*=0x19c, lpOverlapped=0x0) returned 1
	[0170.382] GetFileType (hFile=0x2dc) returned 0x1
	[0170.382] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.382] WriteFile (in: hFile=0x2dc, lpBuffer=0x126001a0*, nNumberOfBytesToWrite=0x19c, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x126001a0*, lpNumberOfBytesWritten=0x12429d00*=0x19c, lpOverlapped=0x12429d0c) returned 1
	[0170.383] GetFileType (hFile=0x2dc) returned 0x1
	[0170.383] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x19c, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0170.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0170.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0170.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e860 | out: pbBuffer=0x1251e860) returned 1
	[0170.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0170.383] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0170.383] WriteFile (in: hFile=0x1e4, lpBuffer=0x12634000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12634000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.383] CloseHandle (hObject=0x1e4) returned 1
	[0170.386] CloseHandle (hObject=0x2dc) returned 1
	[0170.387] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.398] SetEvent (hEvent=0x2e8) returned 1
	[0170.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.399] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0170.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1
	[0170.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127328a0 | out: pbBuffer=0x127328a0) returned 1
	[0170.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e878 | out: pbBuffer=0x1251e878) returned 1
	[0170.400] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0170.401] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0170.401] SetEvent (hEvent=0xa0) returned 1
	[0170.401] SetEvent (hEvent=0x2e8) returned 1
	[0170.401] ReadFile (in: hFile=0x2dc, lpBuffer=0x128fa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128fa000*, lpNumberOfBytesRead=0x12429d1c*=0x110, lpOverlapped=0x0) returned 1
	[0170.403] GetFileType (hFile=0x2dc) returned 0x1
	[0170.403] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.403] WriteFile (in: hFile=0x2dc, lpBuffer=0x124f3e60*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124f3e60*, lpNumberOfBytesWritten=0x12429d00*=0x110, lpOverlapped=0x12429d0c) returned 1
	[0170.403] GetFileType (hFile=0x2dc) returned 0x1
	[0170.403] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.403] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435181 | out: pbBuffer=0x12435181) returned 1
	[0170.404] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435281 | out: pbBuffer=0x12435281) returned 1
	[0170.404] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435381 | out: pbBuffer=0x12435381) returned 1
	[0170.404] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e980 | out: pbBuffer=0x1251e980) returned 1
	[0170.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0170.404] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0170.404] WriteFile (in: hFile=0x1e4, lpBuffer=0x12634500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12634500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.404] CloseHandle (hObject=0x1e4) returned 1
	[0170.404] CloseHandle (hObject=0x2dc) returned 1
	[0170.405] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.410] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0170.426] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0170.427] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0170.427] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0170.427] SetEvent (hEvent=0x318) returned 1
	[0170.427] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0170.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0170.442] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0170.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4eb35ad0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0170.442] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0170.442] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0170.442] ReadFile (in: hFile=0x344, lpBuffer=0x1289a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1289a000*, lpNumberOfBytesRead=0x1242bd1c*=0xdd, lpOverlapped=0x0) returned 1
	[0170.448] GetFileType (hFile=0x344) returned 0x1
	[0170.448] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.448] WriteFile (in: hFile=0x344, lpBuffer=0x1248c000*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1248c000*, lpNumberOfBytesWritten=0x1242bd00*=0xdd, lpOverlapped=0x1242bd0c) returned 1
	[0170.448] GetFileType (hFile=0x344) returned 0x1
	[0170.448] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xdd, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.448] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0170.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0170.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0170.500] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103d0 | out: pbBuffer=0x124103d0) returned 1
	[0170.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0170.500] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0170.500] WriteFile (in: hFile=0x33c, lpBuffer=0x12818000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.500] CloseHandle (hObject=0x33c) returned 1
	[0170.500] CloseHandle (hObject=0x344) returned 1
	[0170.501] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.517] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0170.574] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0170.611] SetEvent (hEvent=0x70) returned 1
	[0170.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\Global.MPT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\global.mpt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.612] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0170.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\Global.MPT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\global.mpt"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600)) returned 1
	[0170.612] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0170.612] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0170.612] ReadFile (in: hFile=0x34c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12769d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0170.977] SetEvent (hEvent=0xa0) returned 1
	[0170.978] GetFileType (hFile=0x34c) returned 0x1
	[0170.978] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.978] WriteFile (in: hFile=0x34c, lpBuffer=0x1281a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1281a000*, lpNumberOfBytesWritten=0x12769d00*=0x20000, lpOverlapped=0x12769d0c) returned 1
	[0170.981] GetFileType (hFile=0x34c) returned 0x1
	[0170.981] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0170.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0170.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0170.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106a0 | out: pbBuffer=0x124106a0) returned 1
	[0170.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\Global.MPT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\global.mpt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.982] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0170.982] WriteFile (in: hFile=0x2dc, lpBuffer=0x12818f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12818f00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.985] CloseHandle (hObject=0x2dc) returned 1
	[0170.986] CloseHandle (hObject=0x34c) returned 1
	[0170.986] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\Global.MPT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\global.mpt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\Global.MPT.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\global.mpt.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.988] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0171.123] SetEvent (hEvent=0x30c) returned 1
	[0171.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0171.124] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0171.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382)) returned 1
	[0171.124] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c100 | out: pbBuffer=0x1244c100) returned 1
	[0171.124] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788588 | out: pbBuffer=0x12788588) returned 1
	[0171.124] ReadFile (in: hFile=0x34c, lpBuffer=0x1283a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1283a000*, lpNumberOfBytesRead=0x1276dd1c*=0x9382, lpOverlapped=0x0) returned 1
	[0171.215] SetEvent (hEvent=0xa0) returned 1
	[0171.215] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0171.215] SetEvent (hEvent=0x70) returned 1
	[0171.215] GetFileType (hFile=0x34c) returned 0x1
	[0171.215] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.215] WriteFile (in: hFile=0x34c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x9382, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1276dd00*=0x9382, lpOverlapped=0x1276dd0c) returned 1
	[0171.216] GetFileType (hFile=0x34c) returned 0x1
	[0171.216] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x9382, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9101 | out: pbBuffer=0x127e9101) returned 1
	[0171.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9201 | out: pbBuffer=0x127e9201) returned 1
	[0171.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9301 | out: pbBuffer=0x127e9301) returned 1
	[0171.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410a80 | out: pbBuffer=0x12410a80) returned 1
	[0171.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0171.217] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0171.217] WriteFile (in: hFile=0x1e4, lpBuffer=0x12634a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12634a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.217] CloseHandle (hObject=0x1e4) returned 1
	[0171.217] CloseHandle (hObject=0x34c) returned 1
	[0171.217] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\mso1033.acl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0171.222] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0171.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0171.222] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0171.222] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0171.222] ReadFile (in: hFile=0x34c, lpBuffer=0x128da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x128da000*, lpNumberOfBytesRead=0x1276dd1c*=0xa00, lpOverlapped=0x0) returned 1
	[0171.254] SetEvent (hEvent=0xa0) returned 1
	[0171.254] GetFileType (hFile=0x34c) returned 0x1
	[0171.254] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.254] WriteFile (in: hFile=0x34c, lpBuffer=0x12644a80*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12644a80*, lpNumberOfBytesWritten=0x1276dd00*=0xa00, lpOverlapped=0x1276dd0c) returned 1
	[0171.254] GetFileType (hFile=0x34c) returned 0x1
	[0171.254] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xa00, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.255] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0171.255] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8201 | out: pbBuffer=0x127e8201) returned 1
	[0171.255] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8301 | out: pbBuffer=0x127e8301) returned 1
	[0171.255] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0171.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0171.255] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0171.255] WriteFile (in: hFile=0x1e4, lpBuffer=0x12634000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12634000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.255] CloseHandle (hObject=0x1e4) returned 1
	[0171.255] CloseHandle (hObject=0x34c) returned 1
	[0171.255] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.srs.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.260] SetEvent (hEvent=0x80) returned 1
	[0171.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0171.261] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0171.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1
	[0171.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0171.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103c8 | out: pbBuffer=0x124103c8) returned 1
	[0171.261] ReadFile (in: hFile=0x34c, lpBuffer=0x12688000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12688000*, lpNumberOfBytesRead=0x1276dd1c*=0x9a2, lpOverlapped=0x0) returned 1
	[0171.264] GetFileType (hFile=0x34c) returned 0x1
	[0171.264] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.264] WriteFile (in: hFile=0x34c, lpBuffer=0x12645500*, nNumberOfBytesToWrite=0x9a2, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12645500*, lpNumberOfBytesWritten=0x1276dd00*=0x9a2, lpOverlapped=0x1276dd0c) returned 1
	[0171.264] GetFileType (hFile=0x34c) returned 0x1
	[0171.264] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x9a2, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.264] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8401 | out: pbBuffer=0x127e8401) returned 1
	[0171.264] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8501 | out: pbBuffer=0x127e8501) returned 1
	[0171.264] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0171.264] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104a0 | out: pbBuffer=0x124104a0) returned 1
	[0171.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0171.265] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0171.265] WriteFile (in: hFile=0x1e4, lpBuffer=0x12634500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12634500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.265] CloseHandle (hObject=0x1e4) returned 1
	[0171.265] CloseHandle (hObject=0x34c) returned 1
	[0171.265] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.267] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0171.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\synchist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.659] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0171.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\synchist"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c)) returned 1
	[0171.659] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0171.659] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0171.659] ReadFile (in: hFile=0x2dc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x1260fd1c*=0x4c, lpOverlapped=0x0) returned 1
	[0171.661] GetFileType (hFile=0x2dc) returned 0x1
	[0171.661] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.661] WriteFile (in: hFile=0x2dc, lpBuffer=0x125ec0a0*, nNumberOfBytesToWrite=0x4c, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x125ec0a0*, lpNumberOfBytesWritten=0x1260fd00*=0x4c, lpOverlapped=0x1260fd0c) returned 1
	[0171.661] GetFileType (hFile=0x2dc) returned 0x1
	[0171.661] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x4c, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0171.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0171.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0171.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0171.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\synchist"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.663] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0171.663] WriteFile (in: hFile=0x33c, lpBuffer=0x125c6000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x125c6000*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.663] CloseHandle (hObject=0x33c) returned 1
	[0171.663] CloseHandle (hObject=0x2dc) returned 1
	[0171.664] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\synchist"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\synchist.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.679] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0171.690] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0171.690] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0171.690] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0171.690] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0171.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.690] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0171.690] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.691] CloseHandle (hObject=0x33c) returned 1
	[0171.691] CloseHandle (hObject=0x344) returned 1
	[0171.691] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.693] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0171.953] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.076] SetEvent (hEvent=0x30c) returned 1
	[0172.076] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.078] SetEvent (hEvent=0x80) returned 1
	[0172.078] SetEvent (hEvent=0x318) returned 1
	[0172.078] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.093] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.103] SetEvent (hEvent=0x318) returned 1
	[0172.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.104] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000)) returned 1
	[0172.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0172.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0172.104] ReadFile (in: hFile=0x344, lpBuffer=0x12938000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12938000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0172.114] GetFileType (hFile=0x344) returned 0x1
	[0172.114] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.115] WriteFile (in: hFile=0x344, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0172.115] GetFileType (hFile=0x344) returned 0x1
	[0172.115] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.115] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0172.116] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0172.116] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0172.116] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0172.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.116] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.116] WriteFile (in: hFile=0x34c, lpBuffer=0x125c6000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125c6000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.117] CloseHandle (hObject=0x34c) returned 1
	[0172.118] CloseHandle (hObject=0x344) returned 1
	[0172.125] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.206] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.231] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.277] SetEvent (hEvent=0x30c) returned 1
	[0172.277] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.280] SetEvent (hEvent=0x30c) returned 1
	[0172.280] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.325] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1
	[0172.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0172.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0172.325] ReadFile (in: hFile=0x2dc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1260fd1c*=0x39, lpOverlapped=0x0) returned 1
	[0172.328] GetFileType (hFile=0x2dc) returned 0x1
	[0172.328] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.328] WriteFile (in: hFile=0x2dc, lpBuffer=0x12438000*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x12438000*, lpNumberOfBytesWritten=0x1260fd00*=0x39, lpOverlapped=0x1260fd0c) returned 1
	[0172.328] GetFileType (hFile=0x2dc) returned 0x1
	[0172.328] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x39, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.328] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0172.328] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0172.328] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0172.329] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744340 | out: pbBuffer=0x12744340) returned 1
	[0172.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.329] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.329] WriteFile (in: hFile=0x344, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.329] CloseHandle (hObject=0x344) returned 1
	[0172.329] CloseHandle (hObject=0x2dc) returned 1
	[0172.329] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.381] SetEvent (hEvent=0xa0) returned 1
	[0172.383] SetEvent (hEvent=0x2e8) returned 1
	[0172.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\parent.lock" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\parent.lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.385] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\parent.lock" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\parent.lock"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0172.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443f0 | out: pbBuffer=0x127443f0) returned 1
	[0172.385] ReadFile (in: hFile=0x2dc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x1260fd1c*=0x0, lpOverlapped=0x0) returned 1
	[0172.385] CloseHandle (hObject=0x2dc) returned 1
	[0172.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3b3f6e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0172.399] SetEvent (hEvent=0x80) returned 1
	[0172.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000)) returned 1
	[0172.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14)) returned 1
	[0172.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde)) returned 1
	[0172.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\search.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\search.json"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6fa8c70, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6fa8c70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4183)) returned 1
	[0172.457] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.510] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.568] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.578] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0172.955] SetEvent (hEvent=0x318) returned 1
	[0172.955] SetEvent (hEvent=0x80) returned 1
	[0172.955] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.104] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.245] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.260] SetEvent (hEvent=0x80) returned 1
	[0173.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499)) returned 1
	[0173.261] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.308] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.347] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.384] SetEvent (hEvent=0x30c) returned 1
	[0173.384] SetEvent (hEvent=0x80) returned 1
	[0173.385] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.446] SetEvent (hEvent=0x2f4) returned 1
	[0173.446] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.487] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.606] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.685] SetEvent (hEvent=0x2f4) returned 1
	[0173.685] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.851] SetEvent (hEvent=0x2e8) returned 1
	[0173.851] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.853] SetEvent (hEvent=0x2e8) returned 1
	[0173.853] SetEvent (hEvent=0x80) returned 1
	[0173.853] SwitchToThread () returned 1
	[0173.857] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0173.857] SetEvent (hEvent=0x80) returned 1
	[0173.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\A0BnHGSvqBhO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\a0bnhgsvqbho.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.859] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\A0BnHGSvqBhO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\a0bnhgsvqbho.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e057c20, ftCreationTime.dwHighDateTime=0x1d5dd42, ftLastAccessTime.dwLowDateTime=0x139a49c0, ftLastAccessTime.dwHighDateTime=0x1d5dad7, ftLastWriteTime.dwLowDateTime=0x139a49c0, ftLastWriteTime.dwHighDateTime=0x1d5dad7, nFileSizeHigh=0x0, nFileSizeLow=0x18a75)) returned 1
	[0173.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0173.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0173.859] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12767d1c*=0x18a75, lpOverlapped=0x0) returned 1
	[0173.864] GetFileType (hFile=0x33c) returned 0x1
	[0173.864] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.864] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x18a75, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12767d00*=0x18a75, lpOverlapped=0x12767d0c) returned 1
	[0173.864] GetFileType (hFile=0x33c) returned 0x1
	[0173.865] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x18a75, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0173.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0173.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0173.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0173.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\A0BnHGSvqBhO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\a0bnhgsvqbho.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0173.865] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.865] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.865] CloseHandle (hObject=0x2dc) returned 1
	[0173.886] SetEvent (hEvent=0xa0) returned 1
	[0173.886] CloseHandle (hObject=0x33c) returned 1
	[0173.889] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\A0BnHGSvqBhO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\a0bnhgsvqbho.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\A0BnHGSvqBhO.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\a0bnhgsvqbho.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\HesqnET.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\hesqnet.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.046] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\HesqnET.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\hesqnet.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcc11f0, ftCreationTime.dwHighDateTime=0x1d5dea2, ftLastAccessTime.dwLowDateTime=0x84501ca0, ftLastAccessTime.dwHighDateTime=0x1d5e6a6, ftLastWriteTime.dwLowDateTime=0x84501ca0, ftLastWriteTime.dwHighDateTime=0x1d5e6a6, nFileSizeHigh=0x0, nFileSizeLow=0x155b)) returned 1
	[0174.046] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0174.046] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0174.046] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1276dd1c*=0x155b, lpOverlapped=0x0) returned 1
	[0174.050] GetFileType (hFile=0x33c) returned 0x1
	[0174.050] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.050] WriteFile (in: hFile=0x33c, lpBuffer=0x12507800*, nNumberOfBytesToWrite=0x155b, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12507800*, lpNumberOfBytesWritten=0x1276dd00*=0x155b, lpOverlapped=0x1276dd0c) returned 1
	[0174.050] GetFileType (hFile=0x33c) returned 0x1
	[0174.050] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x155b, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.050] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0174.050] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0174.050] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0174.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0174.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\HesqnET.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\hesqnet.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.051] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.051] WriteFile (in: hFile=0x344, lpBuffer=0x1263c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.051] CloseHandle (hObject=0x344) returned 1
	[0174.052] CloseHandle (hObject=0x33c) returned 1
	[0174.053] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\HesqnET.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\hesqnet.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\HesqnET.gif.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\hesqnet.gif.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.225] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.261] SetEvent (hEvent=0x2f4) returned 1
	[0174.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\aLO21WMGRgzPBFjr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\alo21wmgrgzpbfjr.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.262] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\aLO21WMGRgzPBFjr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\alo21wmgrgzpbfjr.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5fd2e0, ftCreationTime.dwHighDateTime=0x1d5e1ec, ftLastAccessTime.dwLowDateTime=0xa2aedf30, ftLastAccessTime.dwHighDateTime=0x1d5dd71, ftLastWriteTime.dwLowDateTime=0xa2aedf30, ftLastWriteTime.dwHighDateTime=0x1d5dd71, nFileSizeHigh=0x0, nFileSizeLow=0xd692)) returned 1
	[0174.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e3a0 | out: pbBuffer=0x1252e3a0) returned 1
	[0174.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410468 | out: pbBuffer=0x12410468) returned 1
	[0174.263] ReadFile (in: hFile=0x344, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1242bd1c*=0xd692, lpOverlapped=0x0) returned 1
	[0174.268] GetFileType (hFile=0x344) returned 0x1
	[0174.268] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.268] WriteFile (in: hFile=0x344, lpBuffer=0x126b4000*, nNumberOfBytesToWrite=0xd692, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x126b4000*, lpNumberOfBytesWritten=0x1242bd00*=0xd692, lpOverlapped=0x1242bd0c) returned 1
	[0174.269] GetFileType (hFile=0x344) returned 0x1
	[0174.269] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xd692, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0174.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0174.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0174.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410540 | out: pbBuffer=0x12410540) returned 1
	[0174.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\aLO21WMGRgzPBFjr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\alo21wmgrgzpbfjr.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.270] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.270] WriteFile (in: hFile=0x34c, lpBuffer=0x124f2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x124f2500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.270] CloseHandle (hObject=0x34c) returned 1
	[0174.271] CloseHandle (hObject=0x344) returned 1
	[0174.272] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\aLO21WMGRgzPBFjr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\alo21wmgrgzpbfjr.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\aLO21WMGRgzPBFjr.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\alo21wmgrgzpbfjr.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.308] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.313] SetEvent (hEvent=0x2f4) returned 1
	[0174.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\fkidES4GNCj_7WaDF.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\fkides4gncj_7wadf.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0174.314] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\fkidES4GNCj_7WaDF.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\fkides4gncj_7wadf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfbc0, ftCreationTime.dwHighDateTime=0x1d5df67, ftLastAccessTime.dwLowDateTime=0x977ce750, ftLastAccessTime.dwHighDateTime=0x1d5dbb0, ftLastWriteTime.dwLowDateTime=0x977ce750, ftLastWriteTime.dwHighDateTime=0x1d5dbb0, nFileSizeHigh=0x0, nFileSizeLow=0x2057)) returned 1
	[0174.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0174.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0174.314] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0174.315] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.315] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0174.315] SetEvent (hEvent=0xa0) returned 1
	[0174.315] SetEvent (hEvent=0x2f4) returned 1
	[0174.315] ReadFile (in: hFile=0x1e4, lpBuffer=0x12872000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12872000*, lpNumberOfBytesRead=0x12767d1c*=0x2057, lpOverlapped=0x0) returned 1
	[0174.319] GetFileType (hFile=0x1e4) returned 0x1
	[0174.320] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.320] WriteFile (in: hFile=0x1e4, lpBuffer=0x128ba000*, nNumberOfBytesToWrite=0x2057, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x128ba000*, lpNumberOfBytesWritten=0x12767d00*=0x2057, lpOverlapped=0x12767d0c) returned 1
	[0174.320] GetFileType (hFile=0x1e4) returned 0x1
	[0174.320] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x2057, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0174.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f01 | out: pbBuffer=0x12400f01) returned 1
	[0174.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401001 | out: pbBuffer=0x12401001) returned 1
	[0174.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0174.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\fkidES4GNCj_7WaDF.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\fkides4gncj_7wadf.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.321] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.321] WriteFile (in: hFile=0x34c, lpBuffer=0x1263ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263ca00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.321] CloseHandle (hObject=0x34c) returned 1
	[0174.323] CloseHandle (hObject=0x1e4) returned 1
	[0174.324] SwitchToThread () returned 1
	[0174.325] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\fkidES4GNCj_7WaDF.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\fkides4gncj_7wadf.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\fkidES4GNCj_7WaDF.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\fkides4gncj_7wadf.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.368] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.371] SetEvent (hEvent=0x2f4) returned 1
	[0174.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tAUX3Ev9ahyZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\taux3ev9ahyz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.373] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tAUX3Ev9ahyZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\taux3ev9ahyz.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cb429a0, ftCreationTime.dwHighDateTime=0x1d5db7e, ftLastAccessTime.dwLowDateTime=0x8ef4fac0, ftLastAccessTime.dwHighDateTime=0x1d5e72a, ftLastWriteTime.dwLowDateTime=0x8ef4fac0, ftLastWriteTime.dwHighDateTime=0x1d5e72a, nFileSizeHigh=0x0, nFileSizeLow=0x2622)) returned 1
	[0174.373] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0174.373] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788020 | out: pbBuffer=0x12788020) returned 1
	[0174.373] ReadFile (in: hFile=0x344, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1260fd1c*=0x2622, lpOverlapped=0x0) returned 1
	[0174.376] GetFileType (hFile=0x344) returned 0x1
	[0174.376] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.376] WriteFile (in: hFile=0x344, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x2622, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x1260fd00*=0x2622, lpOverlapped=0x1260fd0c) returned 1
	[0174.376] GetFileType (hFile=0x344) returned 0x1
	[0174.376] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x2622, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0174.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0174.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0174.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0174.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tAUX3Ev9ahyZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\taux3ev9ahyz.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.377] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.377] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.378] CloseHandle (hObject=0x34c) returned 1
	[0174.380] CloseHandle (hObject=0x344) returned 1
	[0174.381] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tAUX3Ev9ahyZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\taux3ev9ahyz.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tAUX3Ev9ahyZ.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\taux3ev9ahyz.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d9M8iYC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d9m8iyc.png"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c3b80, ftCreationTime.dwHighDateTime=0x1d5da6b, ftLastAccessTime.dwLowDateTime=0xbb2c70e0, ftLastAccessTime.dwHighDateTime=0x1d5e348, ftLastWriteTime.dwLowDateTime=0xbb2c70e0, ftLastWriteTime.dwHighDateTime=0x1d5e348, nFileSizeHigh=0x0, nFileSizeLow=0x12eac)) returned 1
	[0174.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0174.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d9M8iYC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d9m8iyc.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.479] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d9M8iYC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d9m8iyc.png"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c3b80, ftCreationTime.dwHighDateTime=0x1d5da6b, ftLastAccessTime.dwLowDateTime=0xbb2c70e0, ftLastAccessTime.dwHighDateTime=0x1d5e348, ftLastWriteTime.dwLowDateTime=0xbb2c70e0, ftLastWriteTime.dwHighDateTime=0x1d5e348, nFileSizeHigh=0x0, nFileSizeLow=0x12eac)) returned 1
	[0174.479] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0174.479] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882a0 | out: pbBuffer=0x127882a0) returned 1
	[0174.479] ReadFile (in: hFile=0x34c, lpBuffer=0x12954000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12954000*, lpNumberOfBytesRead=0x1260fd1c*=0x12eac, lpOverlapped=0x0) returned 1
	[0174.499] SetEvent (hEvent=0x2f4) returned 1
	[0174.499] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0174.534] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.534] SetEvent (hEvent=0x80) returned 1
	[0174.534] GetFileType (hFile=0x34c) returned 0x1
	[0174.534] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12650ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.534] WriteFile (in: hFile=0x34c, lpBuffer=0x126b0000*, nNumberOfBytesToWrite=0x12eac, lpNumberOfBytesWritten=0x12650d00, lpOverlapped=0x12650d0c | out: lpBuffer=0x126b0000*, lpNumberOfBytesWritten=0x12650d00*=0x12eac, lpOverlapped=0x12650d0c) returned 1
	[0174.535] GetFileType (hFile=0x34c) returned 0x1
	[0174.535] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x12eac, lpNewFilePointer=0x0, dwMoveMethod=0x12650ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.535] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0174.535] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0174.536] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0174.536] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788358 | out: pbBuffer=0x12788358) returned 1
	[0174.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d9M8iYC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d9m8iyc.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.536] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.536] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.536] CloseHandle (hObject=0x33c) returned 1
	[0174.537] CloseHandle (hObject=0x34c) returned 1
	[0174.537] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d9M8iYC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d9m8iyc.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\d9M8iYC.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d9m8iyc.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.547] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.565] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nBrrxIz_IBZc4HR3prv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nbrrxiz_ibzc4hr3prv.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.611] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nBrrxIz_IBZc4HR3prv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nbrrxiz_ibzc4hr3prv.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cfb140, ftCreationTime.dwHighDateTime=0x1d5e69b, ftLastAccessTime.dwLowDateTime=0x64c49000, ftLastAccessTime.dwHighDateTime=0x1d5e01b, ftLastWriteTime.dwLowDateTime=0x64c49000, ftLastWriteTime.dwHighDateTime=0x1d5e01b, nFileSizeHigh=0x0, nFileSizeLow=0x22fc)) returned 1
	[0174.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0174.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0174.611] ReadFile (in: hFile=0x344, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1242bd1c*=0x22fc, lpOverlapped=0x0) returned 1
	[0174.620] GetFileType (hFile=0x344) returned 0x1
	[0174.621] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.621] WriteFile (in: hFile=0x344, lpBuffer=0x1270e000*, nNumberOfBytesToWrite=0x22fc, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1270e000*, lpNumberOfBytesWritten=0x1242bd00*=0x22fc, lpOverlapped=0x1242bd0c) returned 1
	[0174.621] GetFileType (hFile=0x344) returned 0x1
	[0174.621] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x22fc, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0174.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0174.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0174.622] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0174.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nBrrxIz_IBZc4HR3prv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nbrrxiz_ibzc4hr3prv.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0174.622] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.622] WriteFile (in: hFile=0x2dc, lpBuffer=0x12464000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12464000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.622] CloseHandle (hObject=0x2dc) returned 1
	[0174.623] CloseHandle (hObject=0x344) returned 1
	[0174.625] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nBrrxIz_IBZc4HR3prv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nbrrxiz_ibzc4hr3prv.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nBrrxIz_IBZc4HR3prv.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nbrrxiz_ibzc4hr3prv.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.663] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.678] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.718] SetEvent (hEvent=0x2e8) returned 1
	[0174.718] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.722] SetEvent (hEvent=0x80) returned 1
	[0174.722] SetEvent (hEvent=0x318) returned 1
	[0174.722] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.736] SetEvent (hEvent=0x2e8) returned 1
	[0174.736] SetEvent (hEvent=0x80) returned 1
	[0174.736] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.743] SetEvent (hEvent=0x80) returned 1
	[0174.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2kcD2Y9.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2kcd2y9.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.744] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0174.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2kcD2Y9.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2kcd2y9.odt"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118abb00, ftCreationTime.dwHighDateTime=0x1d5e659, ftLastAccessTime.dwLowDateTime=0x5539c1b0, ftLastAccessTime.dwHighDateTime=0x1d5dc5f, ftLastWriteTime.dwLowDateTime=0x5539c1b0, ftLastWriteTime.dwHighDateTime=0x1d5dc5f, nFileSizeHigh=0x0, nFileSizeLow=0xa750)) returned 1
	[0174.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0174.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0174.745] ReadFile (in: hFile=0x33c, lpBuffer=0x12664000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x12664000*, lpNumberOfBytesRead=0x12611d1c*=0xa750, lpOverlapped=0x0) returned 1
	[0174.758] GetFileType (hFile=0x33c) returned 0x1
	[0174.758] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.758] WriteFile (in: hFile=0x33c, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0xa750, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x12611d00*=0xa750, lpOverlapped=0x12611d0c) returned 1
	[0174.758] GetFileType (hFile=0x33c) returned 0x1
	[0174.758] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xa750, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.758] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0174.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0174.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0174.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0174.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2kcD2Y9.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2kcd2y9.odt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.760] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0174.760] WriteFile (in: hFile=0x34c, lpBuffer=0x1263c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c000*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.760] CloseHandle (hObject=0x34c) returned 1
	[0174.768] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.790] CloseHandle (hObject=0x33c) returned 1
	[0174.793] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2kcD2Y9.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2kcd2y9.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2kcD2Y9.odt.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2kcd2y9.odt.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.817] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.829] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.834] SetEvent (hEvent=0x80) returned 1
	[0174.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4dJk4wXbRHmGV.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4djk4wxbrhmgv.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.836] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0174.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4dJk4wXbRHmGV.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4djk4wxbrhmgv.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394012c0, ftCreationTime.dwHighDateTime=0x1d5d863, ftLastAccessTime.dwLowDateTime=0xc6585940, ftLastAccessTime.dwHighDateTime=0x1d5dfae, ftLastWriteTime.dwLowDateTime=0xc6585940, ftLastWriteTime.dwHighDateTime=0x1d5dfae, nFileSizeHigh=0x0, nFileSizeLow=0x1867c)) returned 1
	[0174.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0174.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0174.836] ReadFile (in: hFile=0x34c, lpBuffer=0x1294c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x1294c000*, lpNumberOfBytesRead=0x12611d1c*=0x1867c, lpOverlapped=0x0) returned 1
	[0174.842] GetFileType (hFile=0x34c) returned 0x1
	[0174.842] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.842] WriteFile (in: hFile=0x34c, lpBuffer=0x12684000*, nNumberOfBytesToWrite=0x1867c, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x12684000*, lpNumberOfBytesWritten=0x12611d00*=0x1867c, lpOverlapped=0x12611d0c) returned 1
	[0174.842] GetFileType (hFile=0x34c) returned 0x1
	[0174.842] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1867c, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.842] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0174.842] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0174.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0174.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0174.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4dJk4wXbRHmGV.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4djk4wxbrhmgv.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.843] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0174.843] WriteFile (in: hFile=0x33c, lpBuffer=0x1263c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c500*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.843] CloseHandle (hObject=0x33c) returned 1
	[0174.844] CloseHandle (hObject=0x34c) returned 1
	[0174.845] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4dJk4wXbRHmGV.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4djk4wxbrhmgv.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4dJk4wXbRHmGV.xlsx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4djk4wxbrhmgv.xlsx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.882] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.886] SetEvent (hEvent=0x30c) returned 1
	[0174.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A umHqwbP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a umhqwbp.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.888] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A umHqwbP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a umhqwbp.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbabc97f0, ftCreationTime.dwHighDateTime=0x1d55c18, ftLastAccessTime.dwLowDateTime=0x3f6767e0, ftLastAccessTime.dwHighDateTime=0x1d5648f, ftLastWriteTime.dwLowDateTime=0x3f6767e0, ftLastWriteTime.dwHighDateTime=0x1d5648f, nFileSizeHigh=0x0, nFileSizeLow=0x25b2)) returned 1
	[0174.888] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0174.888] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0174.888] ReadFile (in: hFile=0x344, lpBuffer=0x128d0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128d0000*, lpNumberOfBytesRead=0x1242bd1c*=0x25b2, lpOverlapped=0x0) returned 1
	[0174.891] GetFileType (hFile=0x344) returned 0x1
	[0174.891] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.891] WriteFile (in: hFile=0x344, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x25b2, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x1242bd00*=0x25b2, lpOverlapped=0x1242bd0c) returned 1
	[0174.891] GetFileType (hFile=0x344) returned 0x1
	[0174.891] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x25b2, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.891] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0174.891] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0174.892] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0174.892] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0174.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A umHqwbP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a umhqwbp.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.892] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.892] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.893] CloseHandle (hObject=0x33c) returned 1
	[0174.894] CloseHandle (hObject=0x344) returned 1
	[0174.896] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A umHqwbP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a umhqwbp.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A umHqwbP.xlsx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a umhqwbp.xlsx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.926] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.933] SetEvent (hEvent=0x30c) returned 1
	[0174.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FXLRch2eyG1i8c.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fxlrch2eyg1i8c.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.934] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FXLRch2eyG1i8c.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fxlrch2eyg1i8c.pps"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9558e7c0, ftCreationTime.dwHighDateTime=0x1d5db61, ftLastAccessTime.dwLowDateTime=0x1dfc9860, ftLastAccessTime.dwHighDateTime=0x1d5e134, ftLastWriteTime.dwLowDateTime=0x1dfc9860, ftLastWriteTime.dwHighDateTime=0x1d5e134, nFileSizeHigh=0x0, nFileSizeLow=0x7f3e)) returned 1
	[0174.935] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0174.935] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788108 | out: pbBuffer=0x12788108) returned 1
	[0174.935] ReadFile (in: hFile=0x344, lpBuffer=0x126aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126aa000*, lpNumberOfBytesRead=0x1276dd1c*=0x7f3e, lpOverlapped=0x0) returned 1
	[0174.938] GetFileType (hFile=0x344) returned 0x1
	[0174.938] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.939] WriteFile (in: hFile=0x344, lpBuffer=0x126ea000*, nNumberOfBytesToWrite=0x7f3e, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x126ea000*, lpNumberOfBytesWritten=0x1276dd00*=0x7f3e, lpOverlapped=0x1276dd0c) returned 1
	[0174.939] GetFileType (hFile=0x344) returned 0x1
	[0174.939] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x7f3e, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0174.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0174.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0174.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0174.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FXLRch2eyG1i8c.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fxlrch2eyg1i8c.pps"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.940] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.940] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.940] CloseHandle (hObject=0x33c) returned 1
	[0174.941] CloseHandle (hObject=0x344) returned 1
	[0174.942] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FXLRch2eyG1i8c.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fxlrch2eyg1i8c.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FXLRch2eyG1i8c.pps.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fxlrch2eyg1i8c.pps.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.979] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0174.985] SetEvent (hEvent=0x30c) returned 1
	[0174.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ja3F.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ja3f.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.986] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ja3F.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ja3f.doc"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x257509c0, ftCreationTime.dwHighDateTime=0x1d5d878, ftLastAccessTime.dwLowDateTime=0xd878d80, ftLastAccessTime.dwHighDateTime=0x1d5e2d0, ftLastWriteTime.dwLowDateTime=0xd878d80, ftLastWriteTime.dwHighDateTime=0x1d5e2d0, nFileSizeHigh=0x0, nFileSizeLow=0x18d8c)) returned 1
	[0174.986] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0174.986] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103f8 | out: pbBuffer=0x124103f8) returned 1
	[0174.986] ReadFile (in: hFile=0x34c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12767d1c*=0x18d8c, lpOverlapped=0x0) returned 1
	[0174.991] GetFileType (hFile=0x34c) returned 0x1
	[0174.991] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.991] WriteFile (in: hFile=0x34c, lpBuffer=0x1257a000*, nNumberOfBytesToWrite=0x18d8c, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1257a000*, lpNumberOfBytesWritten=0x12767d00*=0x18d8c, lpOverlapped=0x12767d0c) returned 1
	[0174.991] GetFileType (hFile=0x34c) returned 0x1
	[0174.991] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x18d8c, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.991] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0174.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0174.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0174.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104d0 | out: pbBuffer=0x124104d0) returned 1
	[0174.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ja3F.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ja3f.doc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.992] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.992] WriteFile (in: hFile=0x33c, lpBuffer=0x12602500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12602500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.992] CloseHandle (hObject=0x33c) returned 1
	[0174.994] CloseHandle (hObject=0x34c) returned 1
	[0174.994] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ja3F.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ja3f.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ja3F.doc.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ja3f.doc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0175.020] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0175.028] SetEvent (hEvent=0x30c) returned 1
	[0175.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0175.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x124f5a44 | out: lpFindFileData=0x124f5a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0175.028] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0175.432] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0175.703] SetEvent (hEvent=0x30c) returned 1
	[0175.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q86AHZhS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q86ahzhs.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0175.708] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0175.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q86AHZhS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q86ahzhs.docx"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c9b9a0, ftCreationTime.dwHighDateTime=0x1d5d6e8, ftLastAccessTime.dwLowDateTime=0x25e1f930, ftLastAccessTime.dwHighDateTime=0x1d5a2be, ftLastWriteTime.dwLowDateTime=0x25e1f930, ftLastWriteTime.dwHighDateTime=0x1d5a2be, nFileSizeHigh=0x0, nFileSizeLow=0x18c96)) returned 1
	[0175.708] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0175.708] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744020 | out: pbBuffer=0x12744020) returned 1
	[0175.709] ReadFile (in: hFile=0x34c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f5d1c*=0x18c96, lpOverlapped=0x0) returned 1
	[0175.902] GetFileType (hFile=0x34c) returned 0x1
	[0175.902] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.902] WriteFile (in: hFile=0x34c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x18c96, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x124f5d00*=0x18c96, lpOverlapped=0x124f5d0c) returned 1
	[0175.903] GetFileType (hFile=0x34c) returned 0x1
	[0175.903] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x18c96, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.903] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0175.903] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0175.903] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0175.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0175.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q86AHZhS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q86ahzhs.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0175.904] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0175.904] WriteFile (in: hFile=0x1e4, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0175.904] CloseHandle (hObject=0x1e4) returned 1
	[0175.904] CloseHandle (hObject=0x34c) returned 1
	[0175.904] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q86AHZhS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q86ahzhs.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q86AHZhS.docx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q86ahzhs.docx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0175.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WaKhJ6h4jGauFr7uwjsd.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wakhj6h4jgaufr7uwjsd.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0175.908] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0175.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WaKhJ6h4jGauFr7uwjsd.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wakhj6h4jgaufr7uwjsd.pps"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ec1530, ftCreationTime.dwHighDateTime=0x1d5d7fd, ftLastAccessTime.dwLowDateTime=0xf558cd30, ftLastAccessTime.dwHighDateTime=0x1d5d818, ftLastWriteTime.dwLowDateTime=0xf558cd30, ftLastWriteTime.dwHighDateTime=0x1d5d818, nFileSizeHigh=0x0, nFileSizeLow=0xf826)) returned 1
	[0175.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0175.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443c0 | out: pbBuffer=0x127443c0) returned 1
	[0175.908] ReadFile (in: hFile=0x34c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f5d1c*=0xf826, lpOverlapped=0x0) returned 1
	[0176.126] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0176.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_5fZW-MXhsqnxQT.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_5fzw-mxhsqnxqt.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0176.349] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0176.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_5fZW-MXhsqnxQT.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_5fzw-mxhsqnxqt.pptx"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c218a0, ftCreationTime.dwHighDateTime=0x1d576e7, ftLastAccessTime.dwLowDateTime=0x7fc550e0, ftLastAccessTime.dwHighDateTime=0x1d5d04b, ftLastWriteTime.dwLowDateTime=0x7fc550e0, ftLastWriteTime.dwHighDateTime=0x1d5d04b, nFileSizeHigh=0x0, nFileSizeLow=0xdb38)) returned 1
	[0176.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c4e0 | out: pbBuffer=0x1244c4e0) returned 1
	[0176.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0176.349] ReadFile (in: hFile=0x34c, lpBuffer=0x1289e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1289e000*, lpNumberOfBytesRead=0x124f5d1c*=0xdb38, lpOverlapped=0x0) returned 1
	[0176.358] GetFileType (hFile=0x34c) returned 0x1
	[0176.358] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.358] WriteFile (in: hFile=0x34c, lpBuffer=0x12984000*, nNumberOfBytesToWrite=0xdb38, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12984000*, lpNumberOfBytesWritten=0x124f5d00*=0xdb38, lpOverlapped=0x124f5d0c) returned 1
	[0176.358] GetFileType (hFile=0x34c) returned 0x1
	[0176.359] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xdb38, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0176.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0176.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d01 | out: pbBuffer=0x127e8d01) returned 1
	[0176.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410590 | out: pbBuffer=0x12410590) returned 1
	[0176.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_5fZW-MXhsqnxQT.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_5fzw-mxhsqnxqt.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0176.360] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0176.360] WriteFile (in: hFile=0x2dc, lpBuffer=0x1260cf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1260cf00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.361] CloseHandle (hObject=0x2dc) returned 1
	[0176.363] CloseHandle (hObject=0x34c) returned 1
	[0176.367] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_5fZW-MXhsqnxQT.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_5fzw-mxhsqnxqt.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_5fZW-MXhsqnxQT.pptx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_5fzw-mxhsqnxqt.pptx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.684] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0176.690] SetEvent (hEvent=0x2e8) returned 1
	[0176.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hJ p0fOGQhB3TSky.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hj p0fogqhb3tsky.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0176.692] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0176.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hJ p0fOGQhB3TSky.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hj p0fogqhb3tsky.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e83d090, ftCreationTime.dwHighDateTime=0x1d5b0b1, ftLastAccessTime.dwLowDateTime=0xa366f3c0, ftLastAccessTime.dwHighDateTime=0x1d5dcf1, ftLastWriteTime.dwLowDateTime=0xa366f3c0, ftLastWriteTime.dwHighDateTime=0x1d5dcf1, nFileSizeHigh=0x0, nFileSizeLow=0x1ba9)) returned 1
	[0176.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732680 | out: pbBuffer=0x12732680) returned 1
	[0176.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e128 | out: pbBuffer=0x1251e128) returned 1
	[0176.803] ReadFile (in: hFile=0x1e4, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0x1ba9, lpOverlapped=0x0) returned 1
	[0176.826] SetEvent (hEvent=0xa0) returned 1
	[0176.826] GetFileType (hFile=0x1e4) returned 0x1
	[0176.826] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.826] WriteFile (in: hFile=0x1e4, lpBuffer=0x127d8000*, nNumberOfBytesToWrite=0x1ba9, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127d8000*, lpNumberOfBytesWritten=0x124f3d00*=0x1ba9, lpOverlapped=0x124f3d0c) returned 1
	[0176.827] GetFileType (hFile=0x1e4) returned 0x1
	[0176.827] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x1ba9, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0176.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0176.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0176.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0176.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hJ p0fOGQhB3TSky.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hj p0fogqhb3tsky.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0176.828] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0176.828] WriteFile (in: hFile=0x34c, lpBuffer=0x12612a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.828] CloseHandle (hObject=0x34c) returned 1
	[0176.829] CloseHandle (hObject=0x1e4) returned 1
	[0176.830] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hJ p0fOGQhB3TSky.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hj p0fogqhb3tsky.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hJ p0fOGQhB3TSky.xlsx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hj p0fogqhb3tsky.xlsx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.877] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0176.882] SetEvent (hEvent=0x318) returned 1
	[0176.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iybTstxuOpsD-92nBh4r.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iybtstxuopsd-92nbh4r.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0176.883] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0176.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iybTstxuOpsD-92nBh4r.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iybtstxuopsd-92nbh4r.xls"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc1b440, ftCreationTime.dwHighDateTime=0x1d5e736, ftLastAccessTime.dwLowDateTime=0x7aba7d70, ftLastAccessTime.dwHighDateTime=0x1d5dcd3, ftLastWriteTime.dwLowDateTime=0x7aba7d70, ftLastWriteTime.dwHighDateTime=0x1d5dcd3, nFileSizeHigh=0x0, nFileSizeLow=0x5cb2)) returned 1
	[0176.883] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0176.883] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0176.883] ReadFile (in: hFile=0x1e4, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1242bd1c*=0x5cb2, lpOverlapped=0x0) returned 1
	[0176.889] GetFileType (hFile=0x1e4) returned 0x1
	[0176.889] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.889] WriteFile (in: hFile=0x1e4, lpBuffer=0x12522000*, nNumberOfBytesToWrite=0x5cb2, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12522000*, lpNumberOfBytesWritten=0x1242bd00*=0x5cb2, lpOverlapped=0x1242bd0c) returned 1
	[0176.889] GetFileType (hFile=0x1e4) returned 0x1
	[0176.889] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x5cb2, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.890] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0176.890] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0176.890] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0176.891] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0176.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iybTstxuOpsD-92nBh4r.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iybtstxuopsd-92nbh4r.xls"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0176.891] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0176.891] WriteFile (in: hFile=0x344, lpBuffer=0x125ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125ee000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.891] CloseHandle (hObject=0x344) returned 1
	[0176.892] CloseHandle (hObject=0x1e4) returned 1
	[0176.894] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iybTstxuOpsD-92nBh4r.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iybtstxuopsd-92nbh4r.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iybTstxuOpsD-92nBh4r.xls.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iybtstxuopsd-92nbh4r.xls.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.932] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0176.938] SetEvent (hEvent=0x318) returned 1
	[0176.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kWogcIjH5ya_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kwogcijh5ya_.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0176.940] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0176.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kWogcIjH5ya_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kwogcijh5ya_.doc"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b76870, ftCreationTime.dwHighDateTime=0x1d5df46, ftLastAccessTime.dwLowDateTime=0xc541bc40, ftLastAccessTime.dwHighDateTime=0x1d5e076, ftLastWriteTime.dwLowDateTime=0xc541bc40, ftLastWriteTime.dwHighDateTime=0x1d5e076, nFileSizeHigh=0x0, nFileSizeLow=0x182ce)) returned 1
	[0176.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0176.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0176.940] ReadFile (in: hFile=0x1e4, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12767d1c*=0x182ce, lpOverlapped=0x0) returned 1
	[0176.945] GetFileType (hFile=0x1e4) returned 0x1
	[0176.945] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.945] WriteFile (in: hFile=0x1e4, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x182ce, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x12767d00*=0x182ce, lpOverlapped=0x12767d0c) returned 1
	[0176.945] GetFileType (hFile=0x1e4) returned 0x1
	[0176.945] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x182ce, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.946] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434401 | out: pbBuffer=0x12434401) returned 1
	[0176.946] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434501 | out: pbBuffer=0x12434501) returned 1
	[0176.946] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0176.946] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0176.946] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kWogcIjH5ya_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kwogcijh5ya_.doc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0176.946] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0176.947] WriteFile (in: hFile=0x344, lpBuffer=0x12460000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12460000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.947] CloseHandle (hObject=0x344) returned 1
	[0176.948] CloseHandle (hObject=0x1e4) returned 1
	[0176.990] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kWogcIjH5ya_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kwogcijh5ya_.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kWogcIjH5ya_.doc.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kwogcijh5ya_.doc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.109] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0177.113] SetEvent (hEvent=0x318) returned 1
	[0177.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_HVk0JMlZKCohb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m_hvk0jmlzkcohb.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0177.114] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0177.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_HVk0JMlZKCohb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m_hvk0jmlzkcohb.docx"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc9210, ftCreationTime.dwHighDateTime=0x1d5953a, ftLastAccessTime.dwLowDateTime=0x639ef420, ftLastAccessTime.dwHighDateTime=0x1d5643a, ftLastWriteTime.dwLowDateTime=0x639ef420, ftLastWriteTime.dwHighDateTime=0x1d5643a, nFileSizeHigh=0x0, nFileSizeLow=0x12575)) returned 1
	[0177.115] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0177.115] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0177.115] ReadFile (in: hFile=0x1e4, lpBuffer=0x12852000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12852000*, lpNumberOfBytesRead=0x124f5d1c*=0x12575, lpOverlapped=0x0) returned 1
	[0177.120] GetFileType (hFile=0x1e4) returned 0x1
	[0177.120] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.120] WriteFile (in: hFile=0x1e4, lpBuffer=0x126f4000*, nNumberOfBytesToWrite=0x12575, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x126f4000*, lpNumberOfBytesWritten=0x124f5d00*=0x12575, lpOverlapped=0x124f5d0c) returned 1
	[0177.121] GetFileType (hFile=0x1e4) returned 0x1
	[0177.121] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x12575, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.121] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0177.121] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d01 | out: pbBuffer=0x12434d01) returned 1
	[0177.121] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e01 | out: pbBuffer=0x12434e01) returned 1
	[0177.122] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0177.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_HVk0JMlZKCohb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m_hvk0jmlzkcohb.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0177.122] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0177.122] WriteFile (in: hFile=0x344, lpBuffer=0x12460500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12460500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0177.122] CloseHandle (hObject=0x344) returned 1
	[0177.124] CloseHandle (hObject=0x1e4) returned 1
	[0177.125] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_HVk0JMlZKCohb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m_hvk0jmlzkcohb.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_HVk0JMlZKCohb.docx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m_hvk0jmlzkcohb.docx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.171] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0177.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x2Ywzp6f.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x2ywzp6f.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0177.178] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0177.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x2Ywzp6f.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x2ywzp6f.pptx"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3564d820, ftCreationTime.dwHighDateTime=0x1d5db47, ftLastAccessTime.dwLowDateTime=0xac4191e0, ftLastAccessTime.dwHighDateTime=0x1d58e94, ftLastWriteTime.dwLowDateTime=0xac4191e0, ftLastWriteTime.dwHighDateTime=0x1d58e94, nFileSizeHigh=0x0, nFileSizeLow=0xeff4)) returned 1
	[0177.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0177.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0177.179] ReadFile (in: hFile=0x2dc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0xeff4, lpOverlapped=0x0) returned 1
	[0177.183] GetFileType (hFile=0x2dc) returned 0x1
	[0177.183] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.183] WriteFile (in: hFile=0x2dc, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0xeff4, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x124f3d00*=0xeff4, lpOverlapped=0x124f3d0c) returned 1
	[0177.183] GetFileType (hFile=0x2dc) returned 0x1
	[0177.183] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0xeff4, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0177.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0177.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0177.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0177.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x2Ywzp6f.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x2ywzp6f.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0177.184] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0177.184] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0177.184] CloseHandle (hObject=0x344) returned 1
	[0177.185] CloseHandle (hObject=0x2dc) returned 1
	[0177.186] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x2Ywzp6f.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x2ywzp6f.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x2Ywzp6f.pptx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x2ywzp6f.pptx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.458] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0178.087] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0178.087] SetEvent (hEvent=0x2f4) returned 1
	[0178.087] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0178.088] SetEvent (hEvent=0x2f4) returned 1
	[0178.088] SetEvent (hEvent=0x318) returned 1
	[0178.088] SwitchToThread () returned 1
	[0178.088] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0178.127] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0178.280] SetEvent (hEvent=0x318) returned 1
	[0178.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0178.282] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0178.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0178.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0178.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744010 | out: pbBuffer=0x12744010) returned 1
	[0178.282] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12769d1c*=0x85, lpOverlapped=0x0) returned 1
	[0178.284] GetFileType (hFile=0x33c) returned 0x1
	[0178.284] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0178.284] WriteFile (in: hFile=0x33c, lpBuffer=0x1262a120*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1262a120*, lpNumberOfBytesWritten=0x12769d00*=0x85, lpOverlapped=0x12769d0c) returned 1
	[0178.284] GetFileType (hFile=0x33c) returned 0x1
	[0178.284] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0178.284] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0178.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0178.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0178.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744128 | out: pbBuffer=0x12744128) returned 1
	[0178.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0178.285] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0178.285] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0178.285] CloseHandle (hObject=0x2dc) returned 1
	[0178.286] CloseHandle (hObject=0x33c) returned 1
	[0178.288] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0179.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0179.941] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0179.941] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0179.981] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.981] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
	[0179.981] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
	[0179.981] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
	[0179.981] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
	[0179.981] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0179.981] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0179.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0179.983] SetEvent (hEvent=0x30c) returned 1
	[0179.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0179.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0179.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0180.441] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0180.441] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0180.441] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0180.441] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0180.441] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
	[0180.441] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0180.441] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0180.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0180.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0180.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0180.445] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0180.445] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0180.446] CloseHandle (hObject=0x344) returned 1
	[0180.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6)) returned 1
	[0180.625] SetEvent (hEvent=0xa0) returned 1
	[0180.625] SetEvent (hEvent=0x2f4) returned 1
	[0180.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1)) returned 1
	[0180.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b)) returned 1
	[0181.336] SetEvent (hEvent=0x2e8) returned 1
	[0181.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1
	[0182.127] SetEvent (hEvent=0xa0) returned 1
	[0182.127] SetEvent (hEvent=0x2f4) returned 1
	[0182.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0182.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0182.129] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0182.130] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0182.130] CloseHandle (hObject=0x33c) returned 1
	[0182.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9cda0a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9cda0a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0182.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0182.130] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9cda0a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9cda0a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0182.471] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9cda0a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9cda0a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.471] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc34ceb0, ftCreationTime.dwHighDateTime=0x1d5e05f, ftLastAccessTime.dwLowDateTime=0x84b7aa20, ftLastAccessTime.dwHighDateTime=0x1d5e40b, ftLastWriteTime.dwLowDateTime=0x84b7aa20, ftLastWriteTime.dwHighDateTime=0x1d5e40b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4W OpAHh1eRq", cAlternateFileName="4WOPAH~1")) returned 1
	[0182.471] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x859b5f0, ftCreationTime.dwHighDateTime=0x1d5d7e4, ftLastAccessTime.dwLowDateTime=0x71f34ff0, ftLastAccessTime.dwHighDateTime=0x1d5e516, ftLastWriteTime.dwLowDateTime=0x71f34ff0, ftLastWriteTime.dwHighDateTime=0x1d5e516, nFileSizeHigh=0x0, nFileSizeLow=0x14e07, dwReserved0=0x0, dwReserved1=0x0, cFileName="6EB2NMUfOJHLz_o.m4a", cAlternateFileName="6EB2NM~1.M4A")) returned 1
	[0182.471] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0182.471] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31517f0, ftCreationTime.dwHighDateTime=0x1d5e66d, ftLastAccessTime.dwLowDateTime=0xca00f650, ftLastAccessTime.dwHighDateTime=0x1d5e3c9, ftLastWriteTime.dwLowDateTime=0xca00f650, ftLastWriteTime.dwHighDateTime=0x1d5e3c9, nFileSizeHigh=0x0, nFileSizeLow=0xe2b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HYv95_2F.mp3", cAlternateFileName="")) returned 1
	[0182.471] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x152b8a40, ftCreationTime.dwHighDateTime=0x1d5e13c, ftLastAccessTime.dwLowDateTime=0x473524f0, ftLastAccessTime.dwHighDateTime=0x1d5db66, ftLastWriteTime.dwLowDateTime=0x473524f0, ftLastWriteTime.dwHighDateTime=0x1d5db66, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lndbLmi_-qHI10e9", cAlternateFileName="LNDBLM~1")) returned 1
	[0182.471] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45506db0, ftCreationTime.dwHighDateTime=0x1d5e32d, ftLastAccessTime.dwLowDateTime=0x65e03ef0, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0x65e03ef0, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x4052, dwReserved0=0x0, dwReserved1=0x0, cFileName="m EtbAAEF-MOesvq.m4a", cAlternateFileName="METBAA~1.M4A")) returned 1
	[0182.471] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488de410, ftCreationTime.dwHighDateTime=0x1d5e7d0, ftLastAccessTime.dwLowDateTime=0x5c061e20, ftLastAccessTime.dwHighDateTime=0x1d5db02, ftLastWriteTime.dwLowDateTime=0x5c061e20, ftLastWriteTime.dwHighDateTime=0x1d5db02, nFileSizeHigh=0x0, nFileSizeLow=0x4ffe, dwReserved0=0x0, dwReserved1=0x0, cFileName="W  wunh.wav", cAlternateFileName="WWUNH~1.WAV")) returned 1
	[0182.471] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0182.472] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0182.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0182.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0182.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0182.476] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0182.476] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0182.477] CloseHandle (hObject=0x33c) returned 1
	[0182.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc34ceb0, ftCreationTime.dwHighDateTime=0x1d5e05f, ftLastAccessTime.dwLowDateTime=0x84b7aa20, ftLastAccessTime.dwHighDateTime=0x1d5e40b, ftLastWriteTime.dwLowDateTime=0x84b7aa20, ftLastWriteTime.dwHighDateTime=0x1d5e40b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0182.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0182.515] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc34ceb0, ftCreationTime.dwHighDateTime=0x1d5e05f, ftLastAccessTime.dwLowDateTime=0x84b7aa20, ftLastAccessTime.dwHighDateTime=0x1d5e40b, ftLastWriteTime.dwLowDateTime=0x84b7aa20, ftLastWriteTime.dwHighDateTime=0x1d5e40b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0182.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbc34ceb0, ftCreationTime.dwHighDateTime=0x1d5e05f, ftLastAccessTime.dwLowDateTime=0x84b7aa20, ftLastAccessTime.dwHighDateTime=0x1d5e40b, ftLastWriteTime.dwLowDateTime=0x84b7aa20, ftLastWriteTime.dwHighDateTime=0x1d5e40b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x955b1e50, ftCreationTime.dwHighDateTime=0x1d5e33b, ftLastAccessTime.dwLowDateTime=0xe38703c0, ftLastAccessTime.dwHighDateTime=0x1d5dede, ftLastWriteTime.dwLowDateTime=0xe38703c0, ftLastWriteTime.dwHighDateTime=0x1d5dede, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-z-zOTVuKU_-cgZEI", cAlternateFileName="-Z-ZOT~1")) returned 1
	[0182.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa261d960, ftCreationTime.dwHighDateTime=0x1d5e01e, ftLastAccessTime.dwLowDateTime=0xe1fe6250, ftLastAccessTime.dwHighDateTime=0x1d5d817, ftLastWriteTime.dwLowDateTime=0xe1fe6250, ftLastWriteTime.dwHighDateTime=0x1d5d817, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ozI7J1h", cAlternateFileName="")) returned 1
	[0182.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c26adc0, ftCreationTime.dwHighDateTime=0x1d5d8d3, ftLastAccessTime.dwLowDateTime=0x362d7ac0, ftLastAccessTime.dwHighDateTime=0x1d5e257, ftLastWriteTime.dwLowDateTime=0x362d7ac0, ftLastWriteTime.dwHighDateTime=0x1d5e257, nFileSizeHigh=0x0, nFileSizeLow=0x134b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="7cnWgjSIxz6a6j.wav", cAlternateFileName="7CNWGJ~1.WAV")) returned 1
	[0182.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6ea6480, ftCreationTime.dwHighDateTime=0x1d5e3c3, ftLastAccessTime.dwLowDateTime=0xb9837510, ftLastAccessTime.dwHighDateTime=0x1d5d932, ftLastWriteTime.dwLowDateTime=0xb9837510, ftLastWriteTime.dwHighDateTime=0x1d5d932, nFileSizeHigh=0x0, nFileSizeLow=0xe293, dwReserved0=0x0, dwReserved1=0x0, cFileName="aDmUv.mp3", cAlternateFileName="")) returned 1
	[0182.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c40070, ftCreationTime.dwHighDateTime=0x1d5e170, ftLastAccessTime.dwLowDateTime=0xd3a71a00, ftLastAccessTime.dwHighDateTime=0x1d5dcb6, ftLastWriteTime.dwLowDateTime=0xd3a71a00, ftLastWriteTime.dwHighDateTime=0x1d5dcb6, nFileSizeHigh=0x0, nFileSizeLow=0xe570, dwReserved0=0x0, dwReserved1=0x0, cFileName="nclcKB.m4a", cAlternateFileName="")) returned 1
	[0182.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f9215d0, ftCreationTime.dwHighDateTime=0x1d5d9a2, ftLastAccessTime.dwLowDateTime=0x8f1b0130, ftLastAccessTime.dwHighDateTime=0x1d5e5e9, ftLastWriteTime.dwLowDateTime=0x8f1b0130, ftLastWriteTime.dwHighDateTime=0x1d5e5e9, nFileSizeHigh=0x0, nFileSizeLow=0x11563, dwReserved0=0x0, dwReserved1=0x0, cFileName="o zJSHAGklYWfvj-A.wav", cAlternateFileName="OZJSHA~1.WAV")) returned 1
	[0182.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b364f50, ftCreationTime.dwHighDateTime=0x1d5de7c, ftLastAccessTime.dwLowDateTime=0x84763880, ftLastAccessTime.dwHighDateTime=0x1d5dcb1, ftLastWriteTime.dwLowDateTime=0x84763880, ftLastWriteTime.dwHighDateTime=0x1d5dcb1, nFileSizeHigh=0x0, nFileSizeLow=0x10489, dwReserved0=0x0, dwReserved1=0x0, cFileName="oiURl7eLwLiEF9t.wav", cAlternateFileName="OIURL7~1.WAV")) returned 1
	[0182.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e3d3230, ftCreationTime.dwHighDateTime=0x1d5e6fe, ftLastAccessTime.dwLowDateTime=0x9ae19790, ftLastAccessTime.dwHighDateTime=0x1d5e27e, ftLastWriteTime.dwLowDateTime=0x9ae19790, ftLastWriteTime.dwHighDateTime=0x1d5e27e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQc4kjU_CjpgRTnHf", cAlternateFileName="SQC4KJ~1")) returned 1
	[0182.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3f212d0, ftCreationTime.dwHighDateTime=0x1d5e240, ftLastAccessTime.dwLowDateTime=0x9a465a30, ftLastAccessTime.dwHighDateTime=0x1d5e5b9, ftLastWriteTime.dwLowDateTime=0x9a465a30, ftLastWriteTime.dwHighDateTime=0x1d5e5b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZMrxS ESO", cAlternateFileName="ZMRXSE~1")) returned 1
	[0182.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0182.552] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0182.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0182.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0182.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0182.556] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0182.556] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0182.558] CloseHandle (hObject=0x33c) returned 1
	[0182.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x955b1e50, ftCreationTime.dwHighDateTime=0x1d5e33b, ftLastAccessTime.dwLowDateTime=0xe38703c0, ftLastAccessTime.dwHighDateTime=0x1d5dede, ftLastWriteTime.dwLowDateTime=0xe38703c0, ftLastWriteTime.dwHighDateTime=0x1d5dede, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0182.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0182.596] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x955b1e50, ftCreationTime.dwHighDateTime=0x1d5e33b, ftLastAccessTime.dwLowDateTime=0xe38703c0, ftLastAccessTime.dwHighDateTime=0x1d5dede, ftLastWriteTime.dwLowDateTime=0xe38703c0, ftLastWriteTime.dwHighDateTime=0x1d5dede, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0182.632] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x955b1e50, ftCreationTime.dwHighDateTime=0x1d5e33b, ftLastAccessTime.dwLowDateTime=0xe38703c0, ftLastAccessTime.dwHighDateTime=0x1d5dede, ftLastWriteTime.dwLowDateTime=0xe38703c0, ftLastWriteTime.dwHighDateTime=0x1d5dede, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0182.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ce5f940, ftCreationTime.dwHighDateTime=0x1d5e6a7, ftLastAccessTime.dwLowDateTime=0x7d11d610, ftLastAccessTime.dwHighDateTime=0x1d5db82, ftLastWriteTime.dwLowDateTime=0x7d11d610, ftLastWriteTime.dwHighDateTime=0x1d5db82, nFileSizeHigh=0x0, nFileSizeLow=0xbf8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cUBfh0Uy-2kRB6QQS.mp3", cAlternateFileName="CUBFH0~1.MP3")) returned 1
	[0182.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9a2f40, ftCreationTime.dwHighDateTime=0x1d5e6be, ftLastAccessTime.dwLowDateTime=0x108468d0, ftLastAccessTime.dwHighDateTime=0x1d5e38b, ftLastWriteTime.dwLowDateTime=0x108468d0, ftLastWriteTime.dwHighDateTime=0x1d5e38b, nFileSizeHigh=0x0, nFileSizeLow=0xd472, dwReserved0=0x0, dwReserved1=0x0, cFileName="G2y8y37kBRwgiq-X-z.mp3", cAlternateFileName="G2Y8Y3~1.MP3")) returned 1
	[0182.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84df20, ftCreationTime.dwHighDateTime=0x1d5d9ac, ftLastAccessTime.dwLowDateTime=0x5d11b300, ftLastAccessTime.dwHighDateTime=0x1d5e4cc, ftLastWriteTime.dwLowDateTime=0x5d11b300, ftLastWriteTime.dwHighDateTime=0x1d5e4cc, nFileSizeHigh=0x0, nFileSizeLow=0xe406, dwReserved0=0x0, dwReserved1=0x0, cFileName="S1Iu.wav", cAlternateFileName="")) returned 1
	[0182.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf82d80, ftCreationTime.dwHighDateTime=0x1d5e821, ftLastAccessTime.dwLowDateTime=0x1fe75af0, ftLastAccessTime.dwHighDateTime=0x1d5e622, ftLastWriteTime.dwLowDateTime=0x1fe75af0, ftLastWriteTime.dwHighDateTime=0x1d5e622, nFileSizeHigh=0x0, nFileSizeLow=0xb7c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="UdmV2Oja.m4a", cAlternateFileName="")) returned 1
	[0182.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0182.633] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0182.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0182.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0182.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0182.637] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0182.637] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0182.638] CloseHandle (hObject=0x33c) returned 1
	[0182.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\G2y8y37kBRwgiq-X-z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\g2y8y37kbrwgiq-x-z.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9a2f40, ftCreationTime.dwHighDateTime=0x1d5e6be, ftLastAccessTime.dwLowDateTime=0x108468d0, ftLastAccessTime.dwHighDateTime=0x1d5e38b, ftLastWriteTime.dwLowDateTime=0x108468d0, ftLastWriteTime.dwHighDateTime=0x1d5e38b, nFileSizeHigh=0x0, nFileSizeLow=0xd472)) returned 1
	[0182.712] SetEvent (hEvent=0x318) returned 1
	[0182.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\S1Iu.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\s1iu.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84df20, ftCreationTime.dwHighDateTime=0x1d5d9ac, ftLastAccessTime.dwLowDateTime=0x5d11b300, ftLastAccessTime.dwHighDateTime=0x1d5e4cc, ftLastWriteTime.dwLowDateTime=0x5d11b300, ftLastWriteTime.dwHighDateTime=0x1d5e4cc, nFileSizeHigh=0x0, nFileSizeLow=0xe406)) returned 1
	[0182.961] SetEvent (hEvent=0x80) returned 1
	[0182.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\UdmV2Oja.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\udmv2oja.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf82d80, ftCreationTime.dwHighDateTime=0x1d5e821, ftLastAccessTime.dwLowDateTime=0x1fe75af0, ftLastAccessTime.dwHighDateTime=0x1d5e622, ftLastWriteTime.dwLowDateTime=0x1fe75af0, ftLastWriteTime.dwHighDateTime=0x1d5e622, nFileSizeHigh=0x0, nFileSizeLow=0xb7c6)) returned 1
	[0183.010] SetEvent (hEvent=0xa0) returned 1
	[0183.010] SetEvent (hEvent=0x318) returned 1
	[0183.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\cUBfh0Uy-2kRB6QQS.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\cubfh0uy-2krb6qqs.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ce5f940, ftCreationTime.dwHighDateTime=0x1d5e6a7, ftLastAccessTime.dwLowDateTime=0x7d11d610, ftLastAccessTime.dwHighDateTime=0x1d5db82, ftLastWriteTime.dwLowDateTime=0x7d11d610, ftLastWriteTime.dwHighDateTime=0x1d5db82, nFileSizeHigh=0x0, nFileSizeLow=0xbf8f)) returned 1
	[0183.041] SetEvent (hEvent=0x2f4) returned 1
	[0183.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa261d960, ftCreationTime.dwHighDateTime=0x1d5e01e, ftLastAccessTime.dwLowDateTime=0xe1fe6250, ftLastAccessTime.dwHighDateTime=0x1d5d817, ftLastWriteTime.dwLowDateTime=0xe1fe6250, ftLastWriteTime.dwHighDateTime=0x1d5d817, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0183.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0183.043] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa261d960, ftCreationTime.dwHighDateTime=0x1d5e01e, ftLastAccessTime.dwLowDateTime=0xe1fe6250, ftLastAccessTime.dwHighDateTime=0x1d5d817, ftLastWriteTime.dwLowDateTime=0xe1fe6250, ftLastWriteTime.dwHighDateTime=0x1d5d817, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0183.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa261d960, ftCreationTime.dwHighDateTime=0x1d5e01e, ftLastAccessTime.dwLowDateTime=0xe1fe6250, ftLastAccessTime.dwHighDateTime=0x1d5d817, ftLastWriteTime.dwLowDateTime=0xe1fe6250, ftLastWriteTime.dwHighDateTime=0x1d5d817, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0183.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84a7480, ftCreationTime.dwHighDateTime=0x1d5e0db, ftLastAccessTime.dwLowDateTime=0x916aeaa0, ftLastAccessTime.dwHighDateTime=0x1d5e336, ftLastWriteTime.dwLowDateTime=0x916aeaa0, ftLastWriteTime.dwHighDateTime=0x1d5e336, nFileSizeHigh=0x0, nFileSizeLow=0xb3cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="591celDKWeJi5.wav", cAlternateFileName="591CEL~1.WAV")) returned 1
	[0183.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10e02740, ftCreationTime.dwHighDateTime=0x1d5dae1, ftLastAccessTime.dwLowDateTime=0x807b54d0, ftLastAccessTime.dwHighDateTime=0x1d5df7d, ftLastWriteTime.dwLowDateTime=0x807b54d0, ftLastWriteTime.dwHighDateTime=0x1d5df7d, nFileSizeHigh=0x0, nFileSizeLow=0xc9c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Exbj2tZr  _6Vr2s.m4a", cAlternateFileName="EXBJ2T~1.M4A")) returned 1
	[0183.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9998700, ftCreationTime.dwHighDateTime=0x1d5dba2, ftLastAccessTime.dwLowDateTime=0xa55c01d0, ftLastAccessTime.dwHighDateTime=0x1d5d863, ftLastWriteTime.dwLowDateTime=0xa55c01d0, ftLastWriteTime.dwHighDateTime=0x1d5d863, nFileSizeHigh=0x0, nFileSizeLow=0x624a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LTtHTD2SyO7vFh.wav", cAlternateFileName="LTTHTD~1.WAV")) returned 1
	[0183.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef41250, ftCreationTime.dwHighDateTime=0x1d5dc18, ftLastAccessTime.dwLowDateTime=0xc0218c30, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0xc0218c30, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x9536, dwReserved0=0x0, dwReserved1=0x0, cFileName="PBNhapvAlAurNqggK.wav", cAlternateFileName="PBNHAP~1.WAV")) returned 1
	[0183.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7bc10, ftCreationTime.dwHighDateTime=0x1d5e13e, ftLastAccessTime.dwLowDateTime=0x43eacc50, ftLastAccessTime.dwHighDateTime=0x1d5e624, ftLastWriteTime.dwLowDateTime=0x43eacc50, ftLastWriteTime.dwHighDateTime=0x1d5e624, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RVf -n4SMBW5IlxH", cAlternateFileName="RVF-N4~1")) returned 1
	[0183.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc206d0, ftCreationTime.dwHighDateTime=0x1d5e29f, ftLastAccessTime.dwLowDateTime=0x7158fc90, ftLastAccessTime.dwHighDateTime=0x1d5de43, ftLastWriteTime.dwLowDateTime=0x7158fc90, ftLastWriteTime.dwHighDateTime=0x1d5de43, nFileSizeHigh=0x0, nFileSizeLow=0x83ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="W47IEbkFsT0lZ.m4a", cAlternateFileName="W47IEB~1.M4A")) returned 1
	[0183.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67431c30, ftCreationTime.dwHighDateTime=0x1d5e77c, ftLastAccessTime.dwLowDateTime=0x3ee609f0, ftLastAccessTime.dwHighDateTime=0x1d5e754, ftLastWriteTime.dwLowDateTime=0x3ee609f0, ftLastWriteTime.dwHighDateTime=0x1d5e754, nFileSizeHigh=0x0, nFileSizeLow=0xf8cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="y7CVLXeKX6g.m4a", cAlternateFileName="Y7CVLX~1.M4A")) returned 1
	[0183.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52d15ce0, ftCreationTime.dwHighDateTime=0x1d5e1f4, ftLastAccessTime.dwLowDateTime=0x73c775a0, ftLastAccessTime.dwHighDateTime=0x1d5e353, ftLastWriteTime.dwLowDateTime=0x73c775a0, ftLastWriteTime.dwHighDateTime=0x1d5e353, nFileSizeHigh=0x0, nFileSizeLow=0x103dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="zw17nOJ0IwCKgijhA.m4a", cAlternateFileName="ZW17NO~1.M4A")) returned 1
	[0183.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0183.056] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0183.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0183.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0183.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.063] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0183.063] WriteFile (in: hFile=0x34c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0183.064] CloseHandle (hObject=0x34c) returned 1
	[0183.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\591celDKWeJi5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\591celdkweji5.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84a7480, ftCreationTime.dwHighDateTime=0x1d5e0db, ftLastAccessTime.dwLowDateTime=0x916aeaa0, ftLastAccessTime.dwHighDateTime=0x1d5e336, ftLastWriteTime.dwLowDateTime=0x916aeaa0, ftLastWriteTime.dwHighDateTime=0x1d5e336, nFileSizeHigh=0x0, nFileSizeLow=0xb3cd)) returned 1
	[0183.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\Exbj2tZr  _6Vr2s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\exbj2tzr  _6vr2s.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10e02740, ftCreationTime.dwHighDateTime=0x1d5dae1, ftLastAccessTime.dwLowDateTime=0x807b54d0, ftLastAccessTime.dwHighDateTime=0x1d5df7d, ftLastWriteTime.dwLowDateTime=0x807b54d0, ftLastWriteTime.dwHighDateTime=0x1d5df7d, nFileSizeHigh=0x0, nFileSizeLow=0xc9c4)) returned 1
	[0183.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\591celDKWeJi5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\591celdkweji5.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.069] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0183.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\591celDKWeJi5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\591celdkweji5.wav"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84a7480, ftCreationTime.dwHighDateTime=0x1d5e0db, ftLastAccessTime.dwLowDateTime=0x916aeaa0, ftLastAccessTime.dwHighDateTime=0x1d5e336, ftLastWriteTime.dwLowDateTime=0x916aeaa0, ftLastWriteTime.dwHighDateTime=0x1d5e336, nFileSizeHigh=0x0, nFileSizeLow=0xb3cd)) returned 1
	[0183.069] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e340 | out: pbBuffer=0x1252e340) returned 1
	[0183.070] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e138 | out: pbBuffer=0x1251e138) returned 1
	[0183.070] ReadFile (in: hFile=0x34c, lpBuffer=0x12880000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12880000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3cd, lpOverlapped=0x0) returned 1
	[0183.080] GetFileType (hFile=0x34c) returned 0x1
	[0183.080] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.080] WriteFile (in: hFile=0x34c, lpBuffer=0x127d6000*, nNumberOfBytesToWrite=0xb3cd, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127d6000*, lpNumberOfBytesWritten=0x1242bd00*=0xb3cd, lpOverlapped=0x1242bd0c) returned 1
	[0183.080] GetFileType (hFile=0x34c) returned 0x1
	[0183.080] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xb3cd, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.080] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434601 | out: pbBuffer=0x12434601) returned 1
	[0183.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434701 | out: pbBuffer=0x12434701) returned 1
	[0183.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0183.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e680 | out: pbBuffer=0x1251e680) returned 1
	[0183.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\591celDKWeJi5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\591celdkweji5.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.081] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0183.081] WriteFile (in: hFile=0x344, lpBuffer=0x1277c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1277c500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.081] CloseHandle (hObject=0x344) returned 1
	[0183.081] CloseHandle (hObject=0x34c) returned 1
	[0183.082] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\591celDKWeJi5.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\591celdkweji5.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\591celDKWeJi5.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\591celdkweji5.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.084] SetEvent (hEvent=0x70) returned 1
	[0183.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\Exbj2tZr  _6Vr2s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\exbj2tzr  _6vr2s.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.085] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0183.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\Exbj2tZr  _6Vr2s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\exbj2tzr  _6vr2s.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10e02740, ftCreationTime.dwHighDateTime=0x1d5dae1, ftLastAccessTime.dwLowDateTime=0x807b54d0, ftLastAccessTime.dwHighDateTime=0x1d5df7d, ftLastWriteTime.dwLowDateTime=0x807b54d0, ftLastWriteTime.dwHighDateTime=0x1d5df7d, nFileSizeHigh=0x0, nFileSizeLow=0xc9c4)) returned 1
	[0183.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e560 | out: pbBuffer=0x1252e560) returned 1
	[0183.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e698 | out: pbBuffer=0x1251e698) returned 1
	[0183.088] ReadFile (in: hFile=0x34c, lpBuffer=0x128c0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128c0000*, lpNumberOfBytesRead=0x1242bd1c*=0xc9c4, lpOverlapped=0x0) returned 1
	[0183.094] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0183.107] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0183.122] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0183.133] SetEvent (hEvent=0x2f4) returned 1
	[0183.133] SwitchToThread () returned 1
	[0183.144] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0183.158] SetEvent (hEvent=0x80) returned 1
	[0183.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\IvRPZEaw.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\ivrpzeaw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.159] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\IvRPZEaw.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\ivrpzeaw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b338c90, ftCreationTime.dwHighDateTime=0x1d5e7f3, ftLastAccessTime.dwLowDateTime=0xf221f2c0, ftLastAccessTime.dwHighDateTime=0x1d5dc16, ftLastWriteTime.dwLowDateTime=0xf221f2c0, ftLastWriteTime.dwHighDateTime=0x1d5dc16, nFileSizeHigh=0x0, nFileSizeLow=0x30ff)) returned 1
	[0183.159] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0183.159] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0183.159] ReadFile (in: hFile=0x2dc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12767d1c*=0x30ff, lpOverlapped=0x0) returned 1
	[0183.175] GetFileType (hFile=0x2dc) returned 0x1
	[0183.175] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.175] WriteFile (in: hFile=0x2dc, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x30ff, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x12767d00*=0x30ff, lpOverlapped=0x12767d0c) returned 1
	[0183.176] GetFileType (hFile=0x2dc) returned 0x1
	[0183.176] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x30ff, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.176] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0183.176] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0183.176] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0183.176] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0183.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\IvRPZEaw.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\ivrpzeaw.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.177] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.177] WriteFile (in: hFile=0x344, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.177] CloseHandle (hObject=0x344) returned 1
	[0183.181] CloseHandle (hObject=0x2dc) returned 1
	[0183.181] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\IvRPZEaw.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\ivrpzeaw.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\IvRPZEaw.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\ivrpzeaw.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\W47IEbkFsT0lZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\w47iebkfst0lz.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.186] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\W47IEbkFsT0lZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\w47iebkfst0lz.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc206d0, ftCreationTime.dwHighDateTime=0x1d5e29f, ftLastAccessTime.dwLowDateTime=0x7158fc90, ftLastAccessTime.dwHighDateTime=0x1d5de43, ftLastWriteTime.dwLowDateTime=0x7158fc90, ftLastWriteTime.dwHighDateTime=0x1d5de43, nFileSizeHigh=0x0, nFileSizeLow=0x83ea)) returned 1
	[0183.186] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e360 | out: pbBuffer=0x1252e360) returned 1
	[0183.186] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0183.186] ReadFile (in: hFile=0x2dc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x12767d1c*=0x83ea, lpOverlapped=0x0) returned 1
	[0183.207] GetFileType (hFile=0x2dc) returned 0x1
	[0183.207] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.207] WriteFile (in: hFile=0x2dc, lpBuffer=0x127d4000*, nNumberOfBytesToWrite=0x83ea, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x127d4000*, lpNumberOfBytesWritten=0x12767d00*=0x83ea, lpOverlapped=0x12767d0c) returned 1
	[0183.208] GetFileType (hFile=0x2dc) returned 0x1
	[0183.208] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x83ea, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.208] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0183.208] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0183.208] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0183.208] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0183.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\W47IEbkFsT0lZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\w47iebkfst0lz.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0183.208] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.208] WriteFile (in: hFile=0x1e4, lpBuffer=0x1277c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277c500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.209] CloseHandle (hObject=0x1e4) returned 1
	[0183.209] CloseHandle (hObject=0x2dc) returned 1
	[0183.209] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\W47IEbkFsT0lZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\w47iebkfst0lz.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\W47IEbkFsT0lZ.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\w47iebkfst0lz.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\zw17nOJ0IwCKgijhA.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\zw17noj0iwckgijha.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.213] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\zw17nOJ0IwCKgijhA.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\zw17noj0iwckgijha.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52d15ce0, ftCreationTime.dwHighDateTime=0x1d5e1f4, ftLastAccessTime.dwLowDateTime=0x73c775a0, ftLastAccessTime.dwHighDateTime=0x1d5e353, ftLastWriteTime.dwLowDateTime=0x73c775a0, ftLastWriteTime.dwHighDateTime=0x1d5e353, nFileSizeHigh=0x0, nFileSizeLow=0x103dc)) returned 1
	[0183.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e7e0 | out: pbBuffer=0x1252e7e0) returned 1
	[0183.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0183.213] ReadFile (in: hFile=0x2dc, lpBuffer=0x1268c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1268c000*, lpNumberOfBytesRead=0x12767d1c*=0x103dc, lpOverlapped=0x0) returned 1
	[0183.237] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0183.351] SetEvent (hEvent=0x80) returned 1
	[0183.351] SetEvent (hEvent=0x2f4) returned 1
	[0183.351] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0183.354] SetEvent (hEvent=0x318) returned 1
	[0183.354] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0183.373] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0183.504] SetEvent (hEvent=0x318) returned 1
	[0183.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\HNs37_UjDGV3b-6tLN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\hns37_ujdgv3b-6tln.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.505] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\HNs37_UjDGV3b-6tLN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\hns37_ujdgv3b-6tln.wav"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd787920, ftCreationTime.dwHighDateTime=0x1d5e40b, ftLastAccessTime.dwLowDateTime=0xa0e652d0, ftLastAccessTime.dwHighDateTime=0x1d5dd32, ftLastWriteTime.dwLowDateTime=0xa0e652d0, ftLastWriteTime.dwHighDateTime=0x1d5dd32, nFileSizeHigh=0x0, nFileSizeLow=0xcca7)) returned 1
	[0183.506] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0183.506] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0183.506] ReadFile (in: hFile=0x2dc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12767d1c*=0xcca7, lpOverlapped=0x0) returned 1
	[0183.551] GetFileType (hFile=0x2dc) returned 0x1
	[0183.551] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.551] WriteFile (in: hFile=0x2dc, lpBuffer=0x1271a000*, nNumberOfBytesToWrite=0xcca7, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1271a000*, lpNumberOfBytesWritten=0x12767d00*=0xcca7, lpOverlapped=0x12767d0c) returned 1
	[0183.552] GetFileType (hFile=0x2dc) returned 0x1
	[0183.552] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0xcca7, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0183.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0183.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0183.553] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0183.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\HNs37_UjDGV3b-6tLN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\hns37_ujdgv3b-6tln.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0183.553] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.553] WriteFile (in: hFile=0x1e4, lpBuffer=0x12742500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12742500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.553] CloseHandle (hObject=0x1e4) returned 1
	[0183.553] CloseHandle (hObject=0x2dc) returned 1
	[0183.553] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\HNs37_UjDGV3b-6tLN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\hns37_ujdgv3b-6tln.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\HNs37_UjDGV3b-6tLN.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\hns37_ujdgv3b-6tln.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\oiURl7eLwLiEF9t.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\oiurl7elwlief9t.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.558] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\oiURl7eLwLiEF9t.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\oiurl7elwlief9t.wav"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b364f50, ftCreationTime.dwHighDateTime=0x1d5de7c, ftLastAccessTime.dwLowDateTime=0x84763880, ftLastAccessTime.dwHighDateTime=0x1d5dcb1, ftLastWriteTime.dwLowDateTime=0x84763880, ftLastWriteTime.dwHighDateTime=0x1d5dcb1, nFileSizeHigh=0x0, nFileSizeLow=0x10489)) returned 1
	[0183.558] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0183.559] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744378 | out: pbBuffer=0x12744378) returned 1
	[0183.559] ReadFile (in: hFile=0x2dc, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x12767d1c*=0x10489, lpOverlapped=0x0) returned 1
	[0183.630] GetFileType (hFile=0x2dc) returned 0x1
	[0183.630] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.630] WriteFile (in: hFile=0x2dc, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x10489, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x12767d00*=0x10489, lpOverlapped=0x12767d0c) returned 1
	[0183.631] GetFileType (hFile=0x2dc) returned 0x1
	[0183.631] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x10489, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0183.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0183.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0183.632] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744430 | out: pbBuffer=0x12744430) returned 1
	[0183.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\oiURl7eLwLiEF9t.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\oiurl7elwlief9t.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.633] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.634] WriteFile (in: hFile=0x344, lpBuffer=0x12742a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12742a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.634] CloseHandle (hObject=0x344) returned 1
	[0183.634] CloseHandle (hObject=0x2dc) returned 1
	[0183.634] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\oiURl7eLwLiEF9t.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\oiurl7elwlief9t.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\oiURl7eLwLiEF9t.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\oiurl7elwlief9t.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.651] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0183.683] SetEvent (hEvent=0x2f4) returned 1
	[0183.683] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0183.687] SetEvent (hEvent=0x2f4) returned 1
	[0183.688] SetEvent (hEvent=0x318) returned 1
	[0183.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W  wunh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w  wunh.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488de410, ftCreationTime.dwHighDateTime=0x1d5e7d0, ftLastAccessTime.dwLowDateTime=0x5c061e20, ftLastAccessTime.dwHighDateTime=0x1d5db02, ftLastWriteTime.dwLowDateTime=0x5c061e20, ftLastWriteTime.dwHighDateTime=0x1d5db02, nFileSizeHigh=0x0, nFileSizeLow=0x4ffe)) returned 1
	[0183.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0183.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x152b8a40, ftCreationTime.dwHighDateTime=0x1d5e13c, ftLastAccessTime.dwLowDateTime=0x473524f0, ftLastAccessTime.dwHighDateTime=0x1d5db66, ftLastWriteTime.dwLowDateTime=0x473524f0, ftLastWriteTime.dwHighDateTime=0x1d5db66, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0183.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0183.691] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x152b8a40, ftCreationTime.dwHighDateTime=0x1d5e13c, ftLastAccessTime.dwLowDateTime=0x473524f0, ftLastAccessTime.dwHighDateTime=0x1d5db66, ftLastWriteTime.dwLowDateTime=0x473524f0, ftLastWriteTime.dwHighDateTime=0x1d5db66, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0183.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x152b8a40, ftCreationTime.dwHighDateTime=0x1d5e13c, ftLastAccessTime.dwLowDateTime=0x473524f0, ftLastAccessTime.dwHighDateTime=0x1d5db66, ftLastWriteTime.dwLowDateTime=0x473524f0, ftLastWriteTime.dwHighDateTime=0x1d5db66, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0183.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f2ef30, ftCreationTime.dwHighDateTime=0x1d5e215, ftLastAccessTime.dwLowDateTime=0xe9262150, ftLastAccessTime.dwHighDateTime=0x1d5df22, ftLastWriteTime.dwLowDateTime=0xe9262150, ftLastWriteTime.dwHighDateTime=0x1d5df22, nFileSizeHigh=0x0, nFileSizeLow=0xcbcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0z4rLjFebCjEx.mp3", cAlternateFileName="0Z4RLJ~1.MP3")) returned 1
	[0183.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5bf5710, ftCreationTime.dwHighDateTime=0x1d5e2c8, ftLastAccessTime.dwLowDateTime=0x6bc72250, ftLastAccessTime.dwHighDateTime=0x1d5e6fb, ftLastWriteTime.dwLowDateTime=0x6bc72250, ftLastWriteTime.dwHighDateTime=0x1d5e6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd004, dwReserved0=0x0, dwReserved1=0x0, cFileName="1CJEGD.m4a", cAlternateFileName="")) returned 1
	[0183.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13893160, ftCreationTime.dwHighDateTime=0x1d5e1eb, ftLastAccessTime.dwLowDateTime=0x8993ebe0, ftLastAccessTime.dwHighDateTime=0x1d5dd07, ftLastWriteTime.dwLowDateTime=0x8993ebe0, ftLastWriteTime.dwHighDateTime=0x1d5dd07, nFileSizeHigh=0x0, nFileSizeLow=0x17c92, dwReserved0=0x0, dwReserved1=0x0, cFileName="4_fPzbCxmDTNY2BjBf.m4a", cAlternateFileName="4_FPZB~1.M4A")) returned 1
	[0183.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddd286b0, ftCreationTime.dwHighDateTime=0x1d5e56f, ftLastAccessTime.dwLowDateTime=0x8feacc40, ftLastAccessTime.dwHighDateTime=0x1d5e705, ftLastWriteTime.dwLowDateTime=0x8feacc40, ftLastWriteTime.dwHighDateTime=0x1d5e705, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HsjjX", cAlternateFileName="")) returned 1
	[0183.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30edec80, ftCreationTime.dwHighDateTime=0x1d5dce8, ftLastAccessTime.dwLowDateTime=0x694b24f0, ftLastAccessTime.dwHighDateTime=0x1d5d949, ftLastWriteTime.dwLowDateTime=0x694b24f0, ftLastWriteTime.dwHighDateTime=0x1d5d949, nFileSizeHigh=0x0, nFileSizeLow=0xd307, dwReserved0=0x0, dwReserved1=0x0, cFileName="uJ4z.mp3", cAlternateFileName="")) returned 1
	[0183.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0183.702] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0183.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0183.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0183.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.711] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0183.711] WriteFile (in: hFile=0x34c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0183.712] CloseHandle (hObject=0x34c) returned 1
	[0183.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\0z4rLjFebCjEx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\0z4rljfebcjex.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f2ef30, ftCreationTime.dwHighDateTime=0x1d5e215, ftLastAccessTime.dwLowDateTime=0xe9262150, ftLastAccessTime.dwHighDateTime=0x1d5df22, ftLastWriteTime.dwLowDateTime=0xe9262150, ftLastWriteTime.dwHighDateTime=0x1d5df22, nFileSizeHigh=0x0, nFileSizeLow=0xcbcd)) returned 1
	[0183.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\1CJEGD.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\1cjegd.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5bf5710, ftCreationTime.dwHighDateTime=0x1d5e2c8, ftLastAccessTime.dwLowDateTime=0x6bc72250, ftLastAccessTime.dwHighDateTime=0x1d5e6fb, ftLastWriteTime.dwLowDateTime=0x6bc72250, ftLastWriteTime.dwHighDateTime=0x1d5e6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd004)) returned 1
	[0183.756] SetEvent (hEvent=0x318) returned 1
	[0183.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\4_fPzbCxmDTNY2BjBf.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\4_fpzbcxmdtny2bjbf.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13893160, ftCreationTime.dwHighDateTime=0x1d5e1eb, ftLastAccessTime.dwLowDateTime=0x8993ebe0, ftLastAccessTime.dwHighDateTime=0x1d5dd07, ftLastWriteTime.dwLowDateTime=0x8993ebe0, ftLastWriteTime.dwHighDateTime=0x1d5dd07, nFileSizeHigh=0x0, nFileSizeLow=0x17c92)) returned 1
	[0183.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddd286b0, ftCreationTime.dwHighDateTime=0x1d5e56f, ftLastAccessTime.dwLowDateTime=0x8feacc40, ftLastAccessTime.dwHighDateTime=0x1d5e705, ftLastWriteTime.dwLowDateTime=0x8feacc40, ftLastWriteTime.dwHighDateTime=0x1d5e705, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0183.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0183.764] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddd286b0, ftCreationTime.dwHighDateTime=0x1d5e56f, ftLastAccessTime.dwLowDateTime=0x8feacc40, ftLastAccessTime.dwHighDateTime=0x1d5e705, ftLastWriteTime.dwLowDateTime=0x8feacc40, ftLastWriteTime.dwHighDateTime=0x1d5e705, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0183.764] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xddd286b0, ftCreationTime.dwHighDateTime=0x1d5e56f, ftLastAccessTime.dwLowDateTime=0x8feacc40, ftLastAccessTime.dwHighDateTime=0x1d5e705, ftLastWriteTime.dwLowDateTime=0x8feacc40, ftLastWriteTime.dwHighDateTime=0x1d5e705, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0183.764] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe8e60, ftCreationTime.dwHighDateTime=0x1d5d928, ftLastAccessTime.dwLowDateTime=0xe86cbda0, ftLastAccessTime.dwHighDateTime=0x1d5e35a, ftLastWriteTime.dwLowDateTime=0xe86cbda0, ftLastWriteTime.dwHighDateTime=0x1d5e35a, nFileSizeHigh=0x0, nFileSizeLow=0xdc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6ozqyj P.wav", cAlternateFileName="E6OZQY~1.WAV")) returned 1
	[0183.764] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91db1500, ftCreationTime.dwHighDateTime=0x1d5e29b, ftLastAccessTime.dwLowDateTime=0xe9cbdac0, ftLastAccessTime.dwHighDateTime=0x1d5da8e, ftLastWriteTime.dwLowDateTime=0xe9cbdac0, ftLastWriteTime.dwHighDateTime=0x1d5da8e, nFileSizeHigh=0x0, nFileSizeLow=0x16b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="F9 beT.wav", cAlternateFileName="F9BET~1.WAV")) returned 1
	[0183.764] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0183.764] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0183.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0183.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0183.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0184.666] SetEvent (hEvent=0xa0) returned 1
	[0184.666] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0184.666] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0184.667] CloseHandle (hObject=0x33c) returned 1
	[0184.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\E6ozqyj P.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\e6ozqyj p.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe8e60, ftCreationTime.dwHighDateTime=0x1d5d928, ftLastAccessTime.dwLowDateTime=0xe86cbda0, ftLastAccessTime.dwHighDateTime=0x1d5e35a, ftLastWriteTime.dwLowDateTime=0xe86cbda0, ftLastWriteTime.dwHighDateTime=0x1d5e35a, nFileSizeHigh=0x0, nFileSizeLow=0xdc1)) returned 1
	[0184.710] SetEvent (hEvent=0x2f4) returned 1
	[0184.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\F9 beT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\f9 bet.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91db1500, ftCreationTime.dwHighDateTime=0x1d5e29b, ftLastAccessTime.dwLowDateTime=0xe9cbdac0, ftLastAccessTime.dwHighDateTime=0x1d5da8e, ftLastWriteTime.dwLowDateTime=0xe9cbdac0, ftLastWriteTime.dwHighDateTime=0x1d5da8e, nFileSizeHigh=0x0, nFileSizeLow=0x16b08)) returned 1
	[0184.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\uJ4z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\uj4z.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30edec80, ftCreationTime.dwHighDateTime=0x1d5dce8, ftLastAccessTime.dwLowDateTime=0x694b24f0, ftLastAccessTime.dwHighDateTime=0x1d5d949, ftLastWriteTime.dwLowDateTime=0x694b24f0, ftLastWriteTime.dwHighDateTime=0x1d5d949, nFileSizeHigh=0x0, nFileSizeLow=0xd307)) returned 1
	[0184.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\m EtbAAEF-MOesvq.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\m etbaaef-moesvq.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45506db0, ftCreationTime.dwHighDateTime=0x1d5e32d, ftLastAccessTime.dwLowDateTime=0x65e03ef0, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0x65e03ef0, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x4052)) returned 1
	[0184.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0184.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0184.715] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0184.715] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0184.715] CloseHandle (hObject=0x33c) returned 1
	[0184.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\m EtbAAEF-MOesvq.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\m etbaaef-moesvq.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0184.716] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0184.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\m EtbAAEF-MOesvq.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\m etbaaef-moesvq.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45506db0, ftCreationTime.dwHighDateTime=0x1d5e32d, ftLastAccessTime.dwLowDateTime=0x65e03ef0, ftLastAccessTime.dwHighDateTime=0x1d5db96, ftLastWriteTime.dwLowDateTime=0x65e03ef0, ftLastWriteTime.dwHighDateTime=0x1d5db96, nFileSizeHigh=0x0, nFileSizeLow=0x4052)) returned 1
	[0184.717] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e400 | out: pbBuffer=0x1240e400) returned 1
	[0184.717] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d0 | out: pbBuffer=0x124103d0) returned 1
	[0184.717] ReadFile (in: hFile=0x33c, lpBuffer=0x1290c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1290c000*, lpNumberOfBytesRead=0x12429d1c*=0x4052, lpOverlapped=0x0) returned 1
	[0184.759] GetFileType (hFile=0x33c) returned 0x1
	[0184.759] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0184.759] WriteFile (in: hFile=0x33c, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x4052, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x12429d00*=0x4052, lpOverlapped=0x12429d0c) returned 1
	[0184.759] GetFileType (hFile=0x33c) returned 0x1
	[0184.760] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4052, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0184.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec501 | out: pbBuffer=0x124ec501) returned 1
	[0184.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec601 | out: pbBuffer=0x124ec601) returned 1
	[0184.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0184.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104e8 | out: pbBuffer=0x124104e8) returned 1
	[0184.760] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0184.796] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0184.796] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0184.796] SetEvent (hEvent=0xa0) returned 1
	[0184.796] SetEvent (hEvent=0x318) returned 1
	[0184.796] SetEvent (hEvent=0x30c) returned 1
	[0184.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\m EtbAAEF-MOesvq.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\m etbaaef-moesvq.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0184.797] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0184.797] WriteFile (in: hFile=0x2dc, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0184.797] CloseHandle (hObject=0x2dc) returned 1
	[0184.797] CloseHandle (hObject=0x33c) returned 1
	[0184.797] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\m EtbAAEF-MOesvq.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\m etbaaef-moesvq.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\m EtbAAEF-MOesvq.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\m etbaaef-moesvq.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0184.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\my documents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0184.800] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0184.800] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0184.846] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0184.846] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0184.917] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0184.917] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0184.999] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0184.999] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0184.999] SetEvent (hEvent=0xa0) returned 1
	[0184.999] SetEvent (hEvent=0x2f4) returned 1
	[0184.999] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0185.065] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0185.066] GetFileType (hFile=0x34c) returned 0x1
	[0185.066] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.066] WriteFile (in: hFile=0x34c, lpBuffer=0x128e4000*, nNumberOfBytesToWrite=0x16b08, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x128e4000*, lpNumberOfBytesWritten=0x12767d00*=0x16b08, lpOverlapped=0x12767d0c) returned 1
	[0185.066] GetFileType (hFile=0x34c) returned 0x1
	[0185.066] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x16b08, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.066] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0185.066] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0185.067] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0185.067] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0185.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\F9 beT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\f9 bet.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.067] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0185.067] WriteFile (in: hFile=0x2dc, lpBuffer=0x127dc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x127dc500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.067] CloseHandle (hObject=0x2dc) returned 1
	[0185.067] CloseHandle (hObject=0x34c) returned 1
	[0185.067] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\F9 beT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\f9 bet.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\F9 beT.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\f9 bet.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3afd80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3afd80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1
	[0185.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0185.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0185.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0185.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0185.071] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms\\*", lpFindFileData=0x12767a44 | out: lpFindFileData=0x12767a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0185.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0185.072] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms\\*", lpFindFileData=0x12767a44 | out: lpFindFileData=0x12767a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0185.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0185.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0185.136] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0185.136] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0185.136] CloseHandle (hObject=0x33c) returned 1
	[0185.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda1c2e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda1c2e00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0185.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0185.137] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda1c2e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda1c2e00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0185.177] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda1c2e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda1c2e00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0185.177] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb93f3d80, ftCreationTime.dwHighDateTime=0x1d5de7f, ftLastAccessTime.dwLowDateTime=0xdb516de0, ftLastAccessTime.dwHighDateTime=0x1d5e46e, ftLastWriteTime.dwLowDateTime=0xdb516de0, ftLastWriteTime.dwHighDateTime=0x1d5e46e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="-B2p1eoc", cAlternateFileName="")) returned 1
	[0185.177] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf49080, ftCreationTime.dwHighDateTime=0x1d5e43e, ftLastAccessTime.dwLowDateTime=0x96614890, ftLastAccessTime.dwHighDateTime=0x1d5e21b, ftLastWriteTime.dwLowDateTime=0x96614890, ftLastWriteTime.dwHighDateTime=0x1d5e21b, nFileSizeHigh=0x0, nFileSizeLow=0x143f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="5bBpGkcu3tYsh6hWIw.png", cAlternateFileName="5BBPGK~1.PNG")) returned 1
	[0185.177] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb022b40, ftCreationTime.dwHighDateTime=0x1d5d945, ftLastAccessTime.dwLowDateTime=0x7efa9c40, ftLastAccessTime.dwHighDateTime=0x1d5dd90, ftLastWriteTime.dwLowDateTime=0x7efa9c40, ftLastWriteTime.dwHighDateTime=0x1d5dd90, nFileSizeHigh=0x0, nFileSizeLow=0x11430, dwReserved0=0x0, dwReserved1=0x0, cFileName="aepOA.png", cAlternateFileName="")) returned 1
	[0185.177] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffbd0710, ftCreationTime.dwHighDateTime=0x1d5e609, ftLastAccessTime.dwLowDateTime=0xad8c1c20, ftLastAccessTime.dwHighDateTime=0x1d5e04a, ftLastWriteTime.dwLowDateTime=0xad8c1c20, ftLastWriteTime.dwHighDateTime=0x1d5e04a, nFileSizeHigh=0x0, nFileSizeLow=0x9304, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEQmAz4ZoU3y.png", cAlternateFileName="DEQMAZ~1.PNG")) returned 1
	[0185.177] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0185.177] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54cb4f20, ftCreationTime.dwHighDateTime=0x1d5e4c8, ftLastAccessTime.dwLowDateTime=0x5394e220, ftLastAccessTime.dwHighDateTime=0x1d5e3f0, ftLastWriteTime.dwLowDateTime=0x5394e220, ftLastWriteTime.dwHighDateTime=0x1d5e3f0, nFileSizeHigh=0x0, nFileSizeLow=0xcfa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="dM0lseJn14p.png", cAlternateFileName="DM0LSE~1.PNG")) returned 1
	[0185.177] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9e90c00, ftCreationTime.dwHighDateTime=0x1d5d832, ftLastAccessTime.dwLowDateTime=0xa6ff8680, ftLastAccessTime.dwHighDateTime=0x1d5e315, ftLastWriteTime.dwLowDateTime=0xa6ff8680, ftLastWriteTime.dwHighDateTime=0x1d5e315, nFileSizeHigh=0x0, nFileSizeLow=0x10369, dwReserved0=0x0, dwReserved1=0x0, cFileName="D_dPNp.jpg", cAlternateFileName="")) returned 1
	[0185.177] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f720840, ftCreationTime.dwHighDateTime=0x1d5d8d2, ftLastAccessTime.dwLowDateTime=0x55876140, ftLastAccessTime.dwHighDateTime=0x1d5d895, ftLastWriteTime.dwLowDateTime=0x55876140, ftLastWriteTime.dwHighDateTime=0x1d5d895, nFileSizeHigh=0x0, nFileSizeLow=0x1172a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExV5.png", cAlternateFileName="")) returned 1
	[0185.177] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f55c4f0, ftCreationTime.dwHighDateTime=0x1d5d9cf, ftLastAccessTime.dwLowDateTime=0x5ef5fd50, ftLastAccessTime.dwHighDateTime=0x1d5e0f0, ftLastWriteTime.dwLowDateTime=0x5ef5fd50, ftLastWriteTime.dwHighDateTime=0x1d5e0f0, nFileSizeHigh=0x0, nFileSizeLow=0x1396, dwReserved0=0x0, dwReserved1=0x0, cFileName="hBmyV.jpg", cAlternateFileName="")) returned 1
	[0185.177] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed51a2d0, ftCreationTime.dwHighDateTime=0x1d5e5d6, ftLastAccessTime.dwLowDateTime=0x122cdb40, ftLastAccessTime.dwHighDateTime=0x1d5e223, ftLastWriteTime.dwLowDateTime=0x122cdb40, ftLastWriteTime.dwHighDateTime=0x1d5e223, nFileSizeHigh=0x0, nFileSizeLow=0xa45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="j3Rq Ii5dtLqm.gif", cAlternateFileName="J3RQII~1.GIF")) returned 1
	[0185.178] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a8b00, ftCreationTime.dwHighDateTime=0x1d5e704, ftLastAccessTime.dwLowDateTime=0x7b93abf0, ftLastAccessTime.dwHighDateTime=0x1d5d7dc, ftLastWriteTime.dwLowDateTime=0x7b93abf0, ftLastWriteTime.dwHighDateTime=0x1d5d7dc, nFileSizeHigh=0x0, nFileSizeLow=0xeb1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="msM- tsE9FgNH.bmp", cAlternateFileName="MSM-TS~1.BMP")) returned 1
	[0185.178] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef51a40, ftCreationTime.dwHighDateTime=0x1d5df19, ftLastAccessTime.dwLowDateTime=0x82ad8180, ftLastAccessTime.dwHighDateTime=0x1d5e377, ftLastWriteTime.dwLowDateTime=0x82ad8180, ftLastWriteTime.dwHighDateTime=0x1d5e377, nFileSizeHigh=0x0, nFileSizeLow=0x13226, dwReserved0=0x0, dwReserved1=0x0, cFileName="OmRMKwrtkfriC1zpJ5Qk.jpg", cAlternateFileName="OMRMKW~1.JPG")) returned 1
	[0185.178] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bba91b0, ftCreationTime.dwHighDateTime=0x1d5e67e, ftLastAccessTime.dwLowDateTime=0xa5ec5c70, ftLastAccessTime.dwHighDateTime=0x1d5e34f, ftLastWriteTime.dwLowDateTime=0xa5ec5c70, ftLastWriteTime.dwHighDateTime=0x1d5e34f, nFileSizeHigh=0x0, nFileSizeLow=0x180b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="oRq7IhOIsJvjWIQ1.jpg", cAlternateFileName="ORQ7IH~1.JPG")) returned 1
	[0185.178] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f01500, ftCreationTime.dwHighDateTime=0x1d5de81, ftLastAccessTime.dwLowDateTime=0xcef2ebe0, ftLastAccessTime.dwHighDateTime=0x1d5e479, ftLastWriteTime.dwLowDateTime=0xcef2ebe0, ftLastWriteTime.dwHighDateTime=0x1d5e479, nFileSizeHigh=0x0, nFileSizeLow=0x13f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ow0iTrzqcyPAOKrzeb.jpg", cAlternateFileName="OW0ITR~1.JPG")) returned 1
	[0185.178] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33017e0, ftCreationTime.dwHighDateTime=0x1d5debc, ftLastAccessTime.dwLowDateTime=0x40a93300, ftLastAccessTime.dwHighDateTime=0x1d5e4bd, ftLastWriteTime.dwLowDateTime=0x40a93300, ftLastWriteTime.dwHighDateTime=0x1d5e4bd, nFileSizeHigh=0x0, nFileSizeLow=0x106fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="scwtaQ7.jpg", cAlternateFileName="")) returned 1
	[0185.178] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2552c570, ftCreationTime.dwHighDateTime=0x1d5e491, ftLastAccessTime.dwLowDateTime=0x6277e0b0, ftLastAccessTime.dwHighDateTime=0x1d5e4d8, ftLastWriteTime.dwLowDateTime=0x6277e0b0, ftLastWriteTime.dwHighDateTime=0x1d5e4d8, nFileSizeHigh=0x0, nFileSizeLow=0x15041, dwReserved0=0x0, dwReserved1=0x0, cFileName="UvvU4.jpg", cAlternateFileName="")) returned 1
	[0185.178] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702c9fe0, ftCreationTime.dwHighDateTime=0x1d5e4f9, ftLastAccessTime.dwLowDateTime=0x334e2d40, ftLastAccessTime.dwHighDateTime=0x1d5e383, ftLastWriteTime.dwLowDateTime=0x334e2d40, ftLastWriteTime.dwHighDateTime=0x1d5e383, nFileSizeHigh=0x0, nFileSizeLow=0x987d, dwReserved0=0x0, dwReserved1=0x0, cFileName="UYTlfh-cQYwpU.bmp", cAlternateFileName="UYTLFH~1.BMP")) returned 1
	[0185.178] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dba22c0, ftCreationTime.dwHighDateTime=0x1d5e52d, ftLastAccessTime.dwLowDateTime=0xa421e660, ftLastAccessTime.dwHighDateTime=0x1d5de51, ftLastWriteTime.dwLowDateTime=0xa421e660, ftLastWriteTime.dwHighDateTime=0x1d5de51, nFileSizeHigh=0x0, nFileSizeLow=0x13de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vidbZBYUutx.png", cAlternateFileName="VIDBZB~1.PNG")) returned 1
	[0185.178] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6434ba0, ftCreationTime.dwHighDateTime=0x1d5d8c5, ftLastAccessTime.dwLowDateTime=0xc8459360, ftLastAccessTime.dwHighDateTime=0x1d5e73a, ftLastWriteTime.dwLowDateTime=0xc8459360, ftLastWriteTime.dwHighDateTime=0x1d5e73a, nFileSizeHigh=0x0, nFileSizeLow=0xf1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-kG.bmp", cAlternateFileName="")) returned 1
	[0185.178] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0185.178] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0185.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0185.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0185.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0185.183] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0185.183] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0185.185] CloseHandle (hObject=0x33c) returned 1
	[0185.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb93f3d80, ftCreationTime.dwHighDateTime=0x1d5de7f, ftLastAccessTime.dwLowDateTime=0xdb516de0, ftLastAccessTime.dwHighDateTime=0x1d5e46e, ftLastWriteTime.dwLowDateTime=0xdb516de0, ftLastWriteTime.dwHighDateTime=0x1d5e46e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0185.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0185.186] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb93f3d80, ftCreationTime.dwHighDateTime=0x1d5de7f, ftLastAccessTime.dwLowDateTime=0xdb516de0, ftLastAccessTime.dwHighDateTime=0x1d5e46e, ftLastWriteTime.dwLowDateTime=0xdb516de0, ftLastWriteTime.dwHighDateTime=0x1d5e46e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0185.226] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb93f3d80, ftCreationTime.dwHighDateTime=0x1d5de7f, ftLastAccessTime.dwLowDateTime=0xdb516de0, ftLastAccessTime.dwHighDateTime=0x1d5e46e, ftLastWriteTime.dwLowDateTime=0xdb516de0, ftLastWriteTime.dwHighDateTime=0x1d5e46e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0185.226] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f849e0, ftCreationTime.dwHighDateTime=0x1d5dc95, ftLastAccessTime.dwLowDateTime=0x224526f0, ftLastAccessTime.dwHighDateTime=0x1d5d8c2, ftLastWriteTime.dwLowDateTime=0x224526f0, ftLastWriteTime.dwHighDateTime=0x1d5d8c2, nFileSizeHigh=0x0, nFileSizeLow=0x16277, dwReserved0=0x0, dwReserved1=0x0, cFileName="0IIsKDBIH6Gt5E0Cf.jpg", cAlternateFileName="0IISKD~1.JPG")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ff44c90, ftCreationTime.dwHighDateTime=0x1d5e5f6, ftLastAccessTime.dwLowDateTime=0xcc176de0, ftLastAccessTime.dwHighDateTime=0x1d5e192, ftLastWriteTime.dwLowDateTime=0xcc176de0, ftLastWriteTime.dwHighDateTime=0x1d5e192, nFileSizeHigh=0x0, nFileSizeLow=0xf27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="0ph-4.bmp", cAlternateFileName="")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573cc710, ftCreationTime.dwHighDateTime=0x1d5d911, ftLastAccessTime.dwLowDateTime=0xf3a86790, ftLastAccessTime.dwHighDateTime=0x1d5e78e, ftLastWriteTime.dwLowDateTime=0xf3a86790, ftLastWriteTime.dwHighDateTime=0x1d5e78e, nFileSizeHigh=0x0, nFileSizeLow=0x3ead, dwReserved0=0x0, dwReserved1=0x0, cFileName="6OSJe_C.png", cAlternateFileName="")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71423f0, ftCreationTime.dwHighDateTime=0x1d5e645, ftLastAccessTime.dwLowDateTime=0x1455df40, ftLastAccessTime.dwHighDateTime=0x1d5dba0, ftLastWriteTime.dwLowDateTime=0x1455df40, ftLastWriteTime.dwHighDateTime=0x1d5dba0, nFileSizeHigh=0x0, nFileSizeLow=0x48b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7ad1CUaE5sbE.bmp", cAlternateFileName="7AD1CU~1.BMP")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf883ff10, ftCreationTime.dwHighDateTime=0x1d5e395, ftLastAccessTime.dwLowDateTime=0xbf6c9bb0, ftLastAccessTime.dwHighDateTime=0x1d5e5f2, ftLastWriteTime.dwLowDateTime=0xbf6c9bb0, ftLastWriteTime.dwHighDateTime=0x1d5e5f2, nFileSizeHigh=0x0, nFileSizeLow=0xc5fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="dTbYfu SzaY6-cp8.bmp", cAlternateFileName="DTBYFU~1.BMP")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32440720, ftCreationTime.dwHighDateTime=0x1d5e56e, ftLastAccessTime.dwLowDateTime=0x1149c050, ftLastAccessTime.dwHighDateTime=0x1d5e46a, ftLastWriteTime.dwLowDateTime=0x1149c050, ftLastWriteTime.dwHighDateTime=0x1d5e46a, nFileSizeHigh=0x0, nFileSizeLow=0x41f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="g5Z1.jpg", cAlternateFileName="")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9464cd20, ftCreationTime.dwHighDateTime=0x1d5db48, ftLastAccessTime.dwLowDateTime=0x5f8c50b0, ftLastAccessTime.dwHighDateTime=0x1d5e560, ftLastWriteTime.dwLowDateTime=0x5f8c50b0, ftLastWriteTime.dwHighDateTime=0x1d5e560, nFileSizeHigh=0x0, nFileSizeLow=0xb37f, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw-KpJ4CGM5D1Nr2-5J.png", cAlternateFileName="IW-KPJ~1.PNG")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54170390, ftCreationTime.dwHighDateTime=0x1d5e044, ftLastAccessTime.dwLowDateTime=0xdfa6c550, ftLastAccessTime.dwHighDateTime=0x1d5dc0a, ftLastWriteTime.dwLowDateTime=0xdfa6c550, ftLastWriteTime.dwHighDateTime=0x1d5dc0a, nFileSizeHigh=0x0, nFileSizeLow=0x17a86, dwReserved0=0x0, dwReserved1=0x0, cFileName="JMq_jER1jE.bmp", cAlternateFileName="JMQ_JE~1.BMP")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e766950, ftCreationTime.dwHighDateTime=0x1d5dc10, ftLastAccessTime.dwLowDateTime=0x27332ed0, ftLastAccessTime.dwHighDateTime=0x1d5dc39, ftLastWriteTime.dwLowDateTime=0x27332ed0, ftLastWriteTime.dwHighDateTime=0x1d5dc39, nFileSizeHigh=0x0, nFileSizeLow=0x2d16, dwReserved0=0x0, dwReserved1=0x0, cFileName="LWmU.png", cAlternateFileName="")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8c81e0, ftCreationTime.dwHighDateTime=0x1d5dd21, ftLastAccessTime.dwLowDateTime=0x77b3ef20, ftLastAccessTime.dwHighDateTime=0x1d5e03f, ftLastWriteTime.dwLowDateTime=0x77b3ef20, ftLastWriteTime.dwHighDateTime=0x1d5e03f, nFileSizeHigh=0x0, nFileSizeLow=0x534, dwReserved0=0x0, dwReserved1=0x0, cFileName="NFcBSPRjS7jgBPvh.png", cAlternateFileName="NFCBSP~1.PNG")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd5ff020, ftCreationTime.dwHighDateTime=0x1d5e11a, ftLastAccessTime.dwLowDateTime=0x671ed900, ftLastAccessTime.dwHighDateTime=0x1d5e0f2, ftLastWriteTime.dwLowDateTime=0x671ed900, ftLastWriteTime.dwHighDateTime=0x1d5e0f2, nFileSizeHigh=0x0, nFileSizeLow=0x15873, dwReserved0=0x0, dwReserved1=0x0, cFileName="NYF3WL1mE.png", cAlternateFileName="NYF3WL~1.PNG")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1d8f70, ftCreationTime.dwHighDateTime=0x1d5e0f9, ftLastAccessTime.dwLowDateTime=0x9f0893e0, ftLastAccessTime.dwHighDateTime=0x1d5e50e, ftLastWriteTime.dwLowDateTime=0x9f0893e0, ftLastWriteTime.dwHighDateTime=0x1d5e50e, nFileSizeHigh=0x0, nFileSizeLow=0x652b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PkdJzMOwu-e.gif", cAlternateFileName="PKDJZM~1.GIF")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd3225a0, ftCreationTime.dwHighDateTime=0x1d5e514, ftLastAccessTime.dwLowDateTime=0x8ea5efb0, ftLastAccessTime.dwHighDateTime=0x1d5e361, ftLastWriteTime.dwLowDateTime=0x8ea5efb0, ftLastWriteTime.dwHighDateTime=0x1d5e361, nFileSizeHigh=0x0, nFileSizeLow=0xbd84, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIWX_fwu7g1qdZF.png", cAlternateFileName="TIWX_F~1.PNG")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11fecf70, ftCreationTime.dwHighDateTime=0x1d5e0fc, ftLastAccessTime.dwLowDateTime=0xb3a38870, ftLastAccessTime.dwHighDateTime=0x1d5dc24, ftLastWriteTime.dwLowDateTime=0xb3a38870, ftLastWriteTime.dwHighDateTime=0x1d5dc24, nFileSizeHigh=0x0, nFileSizeLow=0x5f46, dwReserved0=0x0, dwReserved1=0x0, cFileName="TP3bdPfUcde_x.jpg", cAlternateFileName="TP3BDP~1.JPG")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb88b6100, ftCreationTime.dwHighDateTime=0x1d5e318, ftLastAccessTime.dwLowDateTime=0xe77bbbe0, ftLastAccessTime.dwHighDateTime=0x1d5e273, ftLastWriteTime.dwLowDateTime=0xe77bbbe0, ftLastWriteTime.dwHighDateTime=0x1d5e273, nFileSizeHigh=0x0, nFileSizeLow=0x9285, dwReserved0=0x0, dwReserved1=0x0, cFileName="u6eTER.png", cAlternateFileName="")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5edb80, ftCreationTime.dwHighDateTime=0x1d5e0cb, ftLastAccessTime.dwLowDateTime=0xf8c7fb70, ftLastAccessTime.dwHighDateTime=0x1d5e7ff, ftLastWriteTime.dwLowDateTime=0xf8c7fb70, ftLastWriteTime.dwHighDateTime=0x1d5e7ff, nFileSizeHigh=0x0, nFileSizeLow=0x380f, dwReserved0=0x0, dwReserved1=0x0, cFileName="v-OFHGzr.png", cAlternateFileName="")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8504a310, ftCreationTime.dwHighDateTime=0x1d5d912, ftLastAccessTime.dwLowDateTime=0xfd81f0f0, ftLastAccessTime.dwHighDateTime=0x1d5e555, ftLastWriteTime.dwLowDateTime=0xfd81f0f0, ftLastWriteTime.dwHighDateTime=0x1d5e555, nFileSizeHigh=0x0, nFileSizeLow=0x2cbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIzBq.jpg", cAlternateFileName="")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf5ec3d0, ftCreationTime.dwHighDateTime=0x1d5d91f, ftLastAccessTime.dwLowDateTime=0x53b89040, ftLastAccessTime.dwHighDateTime=0x1d5dbac, ftLastWriteTime.dwLowDateTime=0x53b89040, ftLastWriteTime.dwHighDateTime=0x1d5dbac, nFileSizeHigh=0x0, nFileSizeLow=0x10ca1, dwReserved0=0x0, dwReserved1=0x0, cFileName="vZtfgQE6NXgqZFh_Uj0T.jpg", cAlternateFileName="VZTFGQ~1.JPG")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0f5540, ftCreationTime.dwHighDateTime=0x1d5db65, ftLastAccessTime.dwLowDateTime=0xd8db0510, ftLastAccessTime.dwHighDateTime=0x1d5e7ef, ftLastWriteTime.dwLowDateTime=0xd8db0510, ftLastWriteTime.dwHighDateTime=0x1d5e7ef, nFileSizeHigh=0x0, nFileSizeLow=0x16c7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="whCheRSH3O8nQ.bmp", cAlternateFileName="WHCHER~1.BMP")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909fd7b0, ftCreationTime.dwHighDateTime=0x1d5e260, ftLastAccessTime.dwLowDateTime=0xe32038b0, ftLastAccessTime.dwHighDateTime=0x1d5e4de, ftLastWriteTime.dwLowDateTime=0xe32038b0, ftLastWriteTime.dwHighDateTime=0x1d5e4de, nFileSizeHigh=0x0, nFileSizeLow=0xfc78, dwReserved0=0x0, dwReserved1=0x0, cFileName="zs2ZOx tk3_Sr7MqXp.jpg", cAlternateFileName="ZS2ZOX~1.JPG")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7ab60, ftCreationTime.dwHighDateTime=0x1d5dc49, ftLastAccessTime.dwLowDateTime=0x62279e50, ftLastAccessTime.dwHighDateTime=0x1d5e39a, ftLastWriteTime.dwLowDateTime=0x62279e50, ftLastWriteTime.dwHighDateTime=0x1d5e39a, nFileSizeHigh=0x0, nFileSizeLow=0x156f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="_wrmhDdA.gif", cAlternateFileName="")) returned 1
	[0185.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0185.228] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0185.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0185.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0185.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0185.266] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0185.267] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0185.268] CloseHandle (hObject=0x33c) returned 1
	[0185.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0IIsKDBIH6Gt5E0Cf.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0iiskdbih6gt5e0cf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f849e0, ftCreationTime.dwHighDateTime=0x1d5dc95, ftLastAccessTime.dwLowDateTime=0x224526f0, ftLastAccessTime.dwHighDateTime=0x1d5d8c2, ftLastWriteTime.dwLowDateTime=0x224526f0, ftLastWriteTime.dwHighDateTime=0x1d5d8c2, nFileSizeHigh=0x0, nFileSizeLow=0x16277)) returned 1
	[0185.325] SetEvent (hEvent=0x2f4) returned 1
	[0185.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0ph-4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0ph-4.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ff44c90, ftCreationTime.dwHighDateTime=0x1d5e5f6, ftLastAccessTime.dwLowDateTime=0xcc176de0, ftLastAccessTime.dwHighDateTime=0x1d5e192, ftLastWriteTime.dwLowDateTime=0xcc176de0, ftLastWriteTime.dwHighDateTime=0x1d5e192, nFileSizeHigh=0x0, nFileSizeLow=0xf27f)) returned 1
	[0185.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\6OSJe_C.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\6osje_c.png"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573cc710, ftCreationTime.dwHighDateTime=0x1d5d911, ftLastAccessTime.dwLowDateTime=0xf3a86790, ftLastAccessTime.dwHighDateTime=0x1d5e78e, ftLastWriteTime.dwLowDateTime=0xf3a86790, ftLastWriteTime.dwHighDateTime=0x1d5e78e, nFileSizeHigh=0x0, nFileSizeLow=0x3ead)) returned 1
	[0185.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\7ad1CUaE5sbE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\7ad1cuae5sbe.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71423f0, ftCreationTime.dwHighDateTime=0x1d5e645, ftLastAccessTime.dwLowDateTime=0x1455df40, ftLastAccessTime.dwHighDateTime=0x1d5dba0, ftLastWriteTime.dwLowDateTime=0x1455df40, ftLastWriteTime.dwHighDateTime=0x1d5dba0, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1
	[0185.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\JMq_jER1jE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\jmq_jer1je.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54170390, ftCreationTime.dwHighDateTime=0x1d5e044, ftLastAccessTime.dwLowDateTime=0xdfa6c550, ftLastAccessTime.dwHighDateTime=0x1d5dc0a, ftLastWriteTime.dwLowDateTime=0xdfa6c550, ftLastWriteTime.dwHighDateTime=0x1d5dc0a, nFileSizeHigh=0x0, nFileSizeLow=0x17a86)) returned 1
	[0185.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\7ad1CUaE5sbE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\7ad1cuae5sbe.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0185.330] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0185.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\7ad1CUaE5sbE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\7ad1cuae5sbe.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71423f0, ftCreationTime.dwHighDateTime=0x1d5e645, ftLastAccessTime.dwLowDateTime=0x1455df40, ftLastAccessTime.dwHighDateTime=0x1d5dba0, ftLastWriteTime.dwLowDateTime=0x1455df40, ftLastWriteTime.dwHighDateTime=0x1d5dba0, nFileSizeHigh=0x0, nFileSizeLow=0x48b4)) returned 1
	[0185.330] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127325a0 | out: pbBuffer=0x127325a0) returned 1
	[0185.330] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0185.331] ReadFile (in: hFile=0x33c, lpBuffer=0x128fc000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x128fc000*, lpNumberOfBytesRead=0x12767d1c*=0x48b4, lpOverlapped=0x0) returned 1
	[0185.370] GetFileType (hFile=0x33c) returned 0x1
	[0185.370] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.370] WriteFile (in: hFile=0x33c, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x48b4, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x12767d00*=0x48b4, lpOverlapped=0x12767d0c) returned 1
	[0185.370] GetFileType (hFile=0x33c) returned 0x1
	[0185.370] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x48b4, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0185.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0185.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d01 | out: pbBuffer=0x127e8d01) returned 1
	[0185.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788338 | out: pbBuffer=0x12788338) returned 1
	[0185.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\7ad1CUaE5sbE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\7ad1cuae5sbe.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.371] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0185.371] WriteFile (in: hFile=0x2dc, lpBuffer=0x127dca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x127dca00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.372] CloseHandle (hObject=0x2dc) returned 1
	[0185.372] CloseHandle (hObject=0x33c) returned 1
	[0185.372] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\7ad1CUaE5sbE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\7ad1cuae5sbe.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\7ad1CUaE5sbE.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\7ad1cuae5sbe.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\JMq_jER1jE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\jmq_jer1je.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0185.375] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0185.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\JMq_jER1jE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\jmq_jer1je.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54170390, ftCreationTime.dwHighDateTime=0x1d5e044, ftLastAccessTime.dwLowDateTime=0xdfa6c550, ftLastAccessTime.dwHighDateTime=0x1d5dc0a, ftLastWriteTime.dwLowDateTime=0xdfa6c550, ftLastWriteTime.dwHighDateTime=0x1d5dc0a, nFileSizeHigh=0x0, nFileSizeLow=0x17a86)) returned 1
	[0185.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127327c0 | out: pbBuffer=0x127327c0) returned 1
	[0185.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0185.375] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12767d1c*=0x17a86, lpOverlapped=0x0) returned 1
	[0185.431] GetFileType (hFile=0x33c) returned 0x1
	[0185.431] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.431] WriteFile (in: hFile=0x33c, lpBuffer=0x127ba000*, nNumberOfBytesToWrite=0x17a86, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x127ba000*, lpNumberOfBytesWritten=0x12767d00*=0x17a86, lpOverlapped=0x12767d0c) returned 1
	[0185.432] GetFileType (hFile=0x33c) returned 0x1
	[0185.432] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x17a86, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8f01 | out: pbBuffer=0x127e8f01) returned 1
	[0185.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9001 | out: pbBuffer=0x127e9001) returned 1
	[0185.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9101 | out: pbBuffer=0x127e9101) returned 1
	[0185.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788418 | out: pbBuffer=0x12788418) returned 1
	[0185.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\JMq_jER1jE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\jmq_jer1je.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0185.433] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0185.433] WriteFile (in: hFile=0x344, lpBuffer=0x127dcf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x127dcf00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.433] CloseHandle (hObject=0x344) returned 1
	[0185.433] CloseHandle (hObject=0x33c) returned 1
	[0185.433] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\JMq_jER1jE.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\jmq_jer1je.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\JMq_jER1jE.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\jmq_jer1je.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\LWmU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\lwmu.png"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e766950, ftCreationTime.dwHighDateTime=0x1d5dc10, ftLastAccessTime.dwLowDateTime=0x27332ed0, ftLastAccessTime.dwHighDateTime=0x1d5dc39, ftLastWriteTime.dwLowDateTime=0x27332ed0, ftLastWriteTime.dwHighDateTime=0x1d5dc39, nFileSizeHigh=0x0, nFileSizeLow=0x2d16)) returned 1
	[0185.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NFcBSPRjS7jgBPvh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nfcbsprjs7jgbpvh.png"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8c81e0, ftCreationTime.dwHighDateTime=0x1d5dd21, ftLastAccessTime.dwLowDateTime=0x77b3ef20, ftLastAccessTime.dwHighDateTime=0x1d5e03f, ftLastWriteTime.dwLowDateTime=0x77b3ef20, ftLastWriteTime.dwHighDateTime=0x1d5e03f, nFileSizeHigh=0x0, nFileSizeLow=0x534)) returned 1
	[0185.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NYF3WL1mE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nyf3wl1me.png"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd5ff020, ftCreationTime.dwHighDateTime=0x1d5e11a, ftLastAccessTime.dwLowDateTime=0x671ed900, ftLastAccessTime.dwHighDateTime=0x1d5e0f2, ftLastWriteTime.dwLowDateTime=0x671ed900, ftLastWriteTime.dwHighDateTime=0x1d5e0f2, nFileSizeHigh=0x0, nFileSizeLow=0x15873)) returned 1
	[0185.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NFcBSPRjS7jgBPvh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nfcbsprjs7jgbpvh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0185.439] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0185.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NFcBSPRjS7jgBPvh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nfcbsprjs7jgbpvh.png"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8c81e0, ftCreationTime.dwHighDateTime=0x1d5dd21, ftLastAccessTime.dwLowDateTime=0x77b3ef20, ftLastAccessTime.dwHighDateTime=0x1d5e03f, ftLastWriteTime.dwLowDateTime=0x77b3ef20, ftLastWriteTime.dwHighDateTime=0x1d5e03f, nFileSizeHigh=0x0, nFileSizeLow=0x534)) returned 1
	[0185.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127329e0 | out: pbBuffer=0x127329e0) returned 1
	[0185.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788430 | out: pbBuffer=0x12788430) returned 1
	[0185.440] ReadFile (in: hFile=0x33c, lpBuffer=0x126c6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x126c6000*, lpNumberOfBytesRead=0x12767d1c*=0x534, lpOverlapped=0x0) returned 1
	[0185.494] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0185.904] SetEvent (hEvent=0x318) returned 1
	[0185.904] SetEvent (hEvent=0x30c) returned 1
	[0185.904] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.031] SetEvent (hEvent=0x70) returned 1
	[0186.031] GetFileType (hFile=0x34c) returned 0x1
	[0186.031] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.031] WriteFile (in: hFile=0x34c, lpBuffer=0x127d4000*, nNumberOfBytesToWrite=0x41f7, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x127d4000*, lpNumberOfBytesWritten=0x1276dd00*=0x41f7, lpOverlapped=0x1276dd0c) returned 1
	[0186.032] GetFileType (hFile=0x34c) returned 0x1
	[0186.032] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x41f7, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.032] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0186.032] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0186.032] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0186.032] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0186.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\g5Z1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\g5z1.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.032] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0186.032] WriteFile (in: hFile=0x33c, lpBuffer=0x12618500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12618500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.033] CloseHandle (hObject=0x33c) returned 1
	[0186.033] CloseHandle (hObject=0x34c) returned 1
	[0186.033] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\g5Z1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\g5z1.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\g5Z1.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\g5z1.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\vZtfgQE6NXgqZFh_Uj0T.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vztfgqe6nxgqzfh_uj0t.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.044] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0186.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\vZtfgQE6NXgqZFh_Uj0T.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vztfgqe6nxgqzfh_uj0t.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf5ec3d0, ftCreationTime.dwHighDateTime=0x1d5d91f, ftLastAccessTime.dwLowDateTime=0x53b89040, ftLastAccessTime.dwHighDateTime=0x1d5dbac, ftLastWriteTime.dwLowDateTime=0x53b89040, ftLastWriteTime.dwHighDateTime=0x1d5dbac, nFileSizeHigh=0x0, nFileSizeLow=0x10ca1)) returned 1
	[0186.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127326c0 | out: pbBuffer=0x127326c0) returned 1
	[0186.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882b8 | out: pbBuffer=0x127882b8) returned 1
	[0186.045] ReadFile (in: hFile=0x34c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1276dd1c*=0x10ca1, lpOverlapped=0x0) returned 1
	[0186.128] GetFileType (hFile=0x34c) returned 0x1
	[0186.128] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.128] WriteFile (in: hFile=0x34c, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x10ca1, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x1276dd00*=0x10ca1, lpOverlapped=0x1276dd0c) returned 1
	[0186.128] GetFileType (hFile=0x34c) returned 0x1
	[0186.128] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x10ca1, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8901 | out: pbBuffer=0x127e8901) returned 1
	[0186.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a01 | out: pbBuffer=0x127e8a01) returned 1
	[0186.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0186.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788380 | out: pbBuffer=0x12788380) returned 1
	[0186.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\vZtfgQE6NXgqZFh_Uj0T.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vztfgqe6nxgqzfh_uj0t.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.129] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0186.129] WriteFile (in: hFile=0x1e4, lpBuffer=0x12618a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12618a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.129] CloseHandle (hObject=0x1e4) returned 1
	[0186.129] CloseHandle (hObject=0x34c) returned 1
	[0186.129] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\vZtfgQE6NXgqZFh_Uj0T.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vztfgqe6nxgqzfh_uj0t.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\vZtfgQE6NXgqZFh_Uj0T.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vztfgqe6nxgqzfh_uj0t.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.279] SetEvent (hEvent=0x2f4) returned 1
	[0186.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\zs2ZOx tk3_Sr7MqXp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\zs2zox tk3_sr7mqxp.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.280] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0186.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\zs2ZOx tk3_Sr7MqXp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\zs2zox tk3_sr7mqxp.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909fd7b0, ftCreationTime.dwHighDateTime=0x1d5e260, ftLastAccessTime.dwLowDateTime=0xe32038b0, ftLastAccessTime.dwHighDateTime=0x1d5e4de, ftLastWriteTime.dwLowDateTime=0xe32038b0, ftLastWriteTime.dwHighDateTime=0x1d5e4de, nFileSizeHigh=0x0, nFileSizeLow=0xfc78)) returned 1
	[0186.280] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0186.281] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0186.281] ReadFile (in: hFile=0x34c, lpBuffer=0x1256a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1256a000*, lpNumberOfBytesRead=0x1276dd1c*=0xfc78, lpOverlapped=0x0) returned 1
	[0186.284] GetFileType (hFile=0x34c) returned 0x1
	[0186.284] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.284] WriteFile (in: hFile=0x34c, lpBuffer=0x125aa000*, nNumberOfBytesToWrite=0xfc78, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x125aa000*, lpNumberOfBytesWritten=0x1276dd00*=0xfc78, lpOverlapped=0x1276dd0c) returned 1
	[0186.285] GetFileType (hFile=0x34c) returned 0x1
	[0186.285] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xfc78, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0186.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0186.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0186.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744350 | out: pbBuffer=0x12744350) returned 1
	[0186.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\zs2ZOx tk3_Sr7MqXp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\zs2zox tk3_sr7mqxp.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.285] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0186.286] WriteFile (in: hFile=0x1e4, lpBuffer=0x1245c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1245c500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.286] CloseHandle (hObject=0x1e4) returned 1
	[0186.286] CloseHandle (hObject=0x34c) returned 1
	[0186.287] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\zs2ZOx tk3_Sr7MqXp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\zs2zox tk3_sr7mqxp.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\zs2ZOx tk3_Sr7MqXp.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\zs2zox tk3_sr7mqxp.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.315] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.325] SetEvent (hEvent=0x30c) returned 1
	[0186.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UYTlfh-cQYwpU.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uytlfh-cqywpu.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702c9fe0, ftCreationTime.dwHighDateTime=0x1d5e4f9, ftLastAccessTime.dwLowDateTime=0x334e2d40, ftLastAccessTime.dwHighDateTime=0x1d5e383, ftLastWriteTime.dwLowDateTime=0x334e2d40, ftLastWriteTime.dwHighDateTime=0x1d5e383, nFileSizeHigh=0x0, nFileSizeLow=0x987d)) returned 1
	[0186.326] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UvvU4.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uvvu4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2552c570, ftCreationTime.dwHighDateTime=0x1d5e491, ftLastAccessTime.dwLowDateTime=0x6277e0b0, ftLastAccessTime.dwHighDateTime=0x1d5e4d8, ftLastWriteTime.dwLowDateTime=0x6277e0b0, ftLastWriteTime.dwHighDateTime=0x1d5e4d8, nFileSizeHigh=0x0, nFileSizeLow=0x15041)) returned 1
	[0186.327] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UYTlfh-cQYwpU.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uytlfh-cqywpu.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.348] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0186.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UYTlfh-cQYwpU.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uytlfh-cqywpu.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x702c9fe0, ftCreationTime.dwHighDateTime=0x1d5e4f9, ftLastAccessTime.dwLowDateTime=0x334e2d40, ftLastAccessTime.dwHighDateTime=0x1d5e383, ftLastWriteTime.dwLowDateTime=0x334e2d40, ftLastWriteTime.dwHighDateTime=0x1d5e383, nFileSizeHigh=0x0, nFileSizeLow=0x987d)) returned 1
	[0186.348] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0186.348] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0186.348] ReadFile (in: hFile=0x344, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x1276dd1c*=0x987d, lpOverlapped=0x0) returned 1
	[0186.359] GetFileType (hFile=0x344) returned 0x1
	[0186.359] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.359] WriteFile (in: hFile=0x344, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x987d, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x1276dd00*=0x987d, lpOverlapped=0x1276dd0c) returned 1
	[0186.360] GetFileType (hFile=0x344) returned 0x1
	[0186.360] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x987d, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.360] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0186.360] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0186.360] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0186.360] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0186.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UYTlfh-cQYwpU.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uytlfh-cqywpu.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.360] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0186.360] WriteFile (in: hFile=0x1e4, lpBuffer=0x128de000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x128de000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.361] CloseHandle (hObject=0x1e4) returned 1
	[0186.363] CloseHandle (hObject=0x344) returned 1
	[0186.364] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UYTlfh-cQYwpU.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uytlfh-cqywpu.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UYTlfh-cQYwpU.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uytlfh-cqywpu.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.405] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.409] SetEvent (hEvent=0x70) returned 1
	[0186.410] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.411] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0186.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0186.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e6e8 | out: pbBuffer=0x1251e6e8) returned 1
	[0186.411] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0186.412] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0186.412] SetEvent (hEvent=0x70) returned 1
	[0186.413] ReadFile (in: hFile=0x2dc, lpBuffer=0x12944000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12944000*, lpNumberOfBytesRead=0x1242bd1c*=0x1f8, lpOverlapped=0x0) returned 1
	[0186.415] GetFileType (hFile=0x2dc) returned 0x1
	[0186.415] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.415] WriteFile (in: hFile=0x2dc, lpBuffer=0x1272a400*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1272a400*, lpNumberOfBytesWritten=0x1242bd00*=0x1f8, lpOverlapped=0x1242bd0c) returned 1
	[0186.415] GetFileType (hFile=0x2dc) returned 0x1
	[0186.415] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.415] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0186.415] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0186.415] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435081 | out: pbBuffer=0x12435081) returned 1
	[0186.416] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e870 | out: pbBuffer=0x1251e870) returned 1
	[0186.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.416] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.416] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.416] CloseHandle (hObject=0x33c) returned 1
	[0186.417] CloseHandle (hObject=0x2dc) returned 1
	[0186.419] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.442] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.446] SetEvent (hEvent=0x80) returned 1
	[0186.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\msM- tsE9FgNH.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\msm- tse9fgnh.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.447] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\msM- tsE9FgNH.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\msm- tse9fgnh.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a8b00, ftCreationTime.dwHighDateTime=0x1d5e704, ftLastAccessTime.dwLowDateTime=0x7b93abf0, ftLastAccessTime.dwHighDateTime=0x1d5d7dc, ftLastWriteTime.dwLowDateTime=0x7b93abf0, ftLastWriteTime.dwHighDateTime=0x1d5d7dc, nFileSizeHigh=0x0, nFileSizeLow=0xeb1f)) returned 1
	[0186.447] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0186.447] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410040 | out: pbBuffer=0x12410040) returned 1
	[0186.447] ReadFile (in: hFile=0x2dc, lpBuffer=0x12944000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x12944000*, lpNumberOfBytesRead=0x12727d1c*=0xeb1f, lpOverlapped=0x0) returned 1
	[0186.450] GetFileType (hFile=0x2dc) returned 0x1
	[0186.450] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.450] WriteFile (in: hFile=0x2dc, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0xeb1f, lpNumberOfBytesWritten=0x12727d00, lpOverlapped=0x12727d0c | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x12727d00*=0xeb1f, lpOverlapped=0x12727d0c) returned 1
	[0186.450] GetFileType (hFile=0x2dc) returned 0x1
	[0186.450] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0xeb1f, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0186.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0186.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0186.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c8 | out: pbBuffer=0x124103c8) returned 1
	[0186.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\msM- tsE9FgNH.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\msm- tse9fgnh.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.451] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.451] WriteFile (in: hFile=0x34c, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12727d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x12727d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.451] CloseHandle (hObject=0x34c) returned 1
	[0186.452] CloseHandle (hObject=0x2dc) returned 1
	[0186.453] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\msM- tsE9FgNH.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\msm- tse9fgnh.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\msM- tsE9FgNH.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\msm- tse9fgnh.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.477] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.486] SetEvent (hEvent=0x80) returned 1
	[0186.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\scwtaQ7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\scwtaq7.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.487] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\scwtaQ7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\scwtaq7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33017e0, ftCreationTime.dwHighDateTime=0x1d5debc, ftLastAccessTime.dwLowDateTime=0x40a93300, ftLastAccessTime.dwHighDateTime=0x1d5e4bd, ftLastWriteTime.dwLowDateTime=0x40a93300, ftLastWriteTime.dwHighDateTime=0x1d5e4bd, nFileSizeHigh=0x0, nFileSizeLow=0x106fc)) returned 1
	[0186.487] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0186.487] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0186.487] ReadFile (in: hFile=0x344, lpBuffer=0x1258e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1258e000*, lpNumberOfBytesRead=0x12767d1c*=0x106fc, lpOverlapped=0x0) returned 1
	[0186.492] GetFileType (hFile=0x344) returned 0x1
	[0186.492] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.492] WriteFile (in: hFile=0x344, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x106fc, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x12767d00*=0x106fc, lpOverlapped=0x12767d0c) returned 1
	[0186.493] GetFileType (hFile=0x344) returned 0x1
	[0186.493] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x106fc, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.493] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0186.493] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0186.493] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0186.494] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0186.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\scwtaQ7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\scwtaq7.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.494] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.494] WriteFile (in: hFile=0x34c, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.494] CloseHandle (hObject=0x34c) returned 1
	[0186.496] CloseHandle (hObject=0x344) returned 1
	[0186.496] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\scwtaQ7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\scwtaq7.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\scwtaQ7.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\scwtaq7.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.538] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0186.544] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0186.548] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0186.548] SetEvent (hEvent=0x2e8) returned 1
	[0186.548] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0186.553] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.561] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.581] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.591] SetEvent (hEvent=0x318) returned 1
	[0186.591] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\0lwQDDkDOmzghUp7Q3s.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\0lwqddkdomzghup7q3s.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.592] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\0lwQDDkDOmzghUp7Q3s.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\0lwqddkdomzghup7q3s.flv"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x579136c0, ftCreationTime.dwHighDateTime=0x1d5dbd1, ftLastAccessTime.dwLowDateTime=0x7b434c0, ftLastAccessTime.dwHighDateTime=0x1d5e335, ftLastWriteTime.dwLowDateTime=0x7b434c0, ftLastWriteTime.dwHighDateTime=0x1d5e335, nFileSizeHigh=0x0, nFileSizeLow=0x13220)) returned 1
	[0186.592] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322c0 | out: pbBuffer=0x127322c0) returned 1
	[0186.592] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788160 | out: pbBuffer=0x12788160) returned 1
	[0186.592] ReadFile (in: hFile=0x34c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12727d1c*=0x13220, lpOverlapped=0x0) returned 1
	[0186.608] GetFileType (hFile=0x34c) returned 0x1
	[0186.609] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.609] WriteFile (in: hFile=0x34c, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x13220, lpNumberOfBytesWritten=0x12727d00, lpOverlapped=0x12727d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x12727d00*=0x13220, lpOverlapped=0x12727d0c) returned 1
	[0186.609] GetFileType (hFile=0x34c) returned 0x1
	[0186.609] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x13220, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434901 | out: pbBuffer=0x12434901) returned 1
	[0186.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0186.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0186.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788218 | out: pbBuffer=0x12788218) returned 1
	[0186.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\0lwQDDkDOmzghUp7Q3s.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\0lwqddkdomzghup7q3s.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.610] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.610] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12727d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12727d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.610] CloseHandle (hObject=0x344) returned 1
	[0186.610] CloseHandle (hObject=0x34c) returned 1
	[0186.610] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\0lwQDDkDOmzghUp7Q3s.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\0lwqddkdomzghup7q3s.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\0lwQDDkDOmzghUp7Q3s.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\0lwqddkdomzghup7q3s.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.612] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\Zw4Y8xErWav.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\zw4y8xerwav.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.613] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\Zw4Y8xErWav.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\zw4y8xerwav.flv"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacecf390, ftCreationTime.dwHighDateTime=0x1d5db34, ftLastAccessTime.dwLowDateTime=0x80ff1960, ftLastAccessTime.dwHighDateTime=0x1d5e323, ftLastWriteTime.dwLowDateTime=0x80ff1960, ftLastWriteTime.dwHighDateTime=0x1d5e323, nFileSizeHigh=0x0, nFileSizeLow=0x114c9)) returned 1
	[0186.613] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324e0 | out: pbBuffer=0x127324e0) returned 1
	[0186.613] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788230 | out: pbBuffer=0x12788230) returned 1
	[0186.613] ReadFile (in: hFile=0x34c, lpBuffer=0x1284c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x1284c000*, lpNumberOfBytesRead=0x12727d1c*=0x114c9, lpOverlapped=0x0) returned 1
	[0186.713] GetFileType (hFile=0x34c) returned 0x1
	[0186.713] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.714] WriteFile (in: hFile=0x34c, lpBuffer=0x12924000*, nNumberOfBytesToWrite=0x114c9, lpNumberOfBytesWritten=0x12727d00, lpOverlapped=0x12727d0c | out: lpBuffer=0x12924000*, lpNumberOfBytesWritten=0x12727d00*=0x114c9, lpOverlapped=0x12727d0c) returned 1
	[0186.714] GetFileType (hFile=0x34c) returned 0x1
	[0186.714] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x114c9, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.714] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d01 | out: pbBuffer=0x12434d01) returned 1
	[0186.714] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e01 | out: pbBuffer=0x12434e01) returned 1
	[0186.737] SetEvent (hEvent=0x2e8) returned 1
	[0186.737] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.741] SetEvent (hEvent=0x80) returned 1
	[0186.741] SetEvent (hEvent=0x2f4) returned 1
	[0186.742] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0186.759] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0186.776] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0186.776] SetEvent (hEvent=0x318) returned 1
	[0186.776] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0186.794] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.794] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X2vjdwVFBKUbkwNn7V.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x2vjdwvfbkubkwnn7v.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b27850, ftCreationTime.dwHighDateTime=0x1d5df0b, ftLastAccessTime.dwLowDateTime=0xed25b770, ftLastAccessTime.dwHighDateTime=0x1d5e05d, ftLastWriteTime.dwLowDateTime=0xed25b770, ftLastWriteTime.dwHighDateTime=0x1d5e05d, nFileSizeHigh=0x0, nFileSizeLow=0xa738)) returned 1
	[0186.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X8JJ-VkxiBmN a8vFoL.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x8jj-vkxibmn a8vfol.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f8f810, ftCreationTime.dwHighDateTime=0x1d5e71f, ftLastAccessTime.dwLowDateTime=0xcceb5cb0, ftLastAccessTime.dwHighDateTime=0x1d5d7ef, ftLastWriteTime.dwLowDateTime=0xcceb5cb0, ftLastWriteTime.dwHighDateTime=0x1d5d7ef, nFileSizeHigh=0x0, nFileSizeLow=0x9194)) returned 1
	[0186.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X2vjdwVFBKUbkwNn7V.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x2vjdwvfbkubkwnn7v.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.852] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X2vjdwVFBKUbkwNn7V.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x2vjdwvfbkubkwnn7v.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b27850, ftCreationTime.dwHighDateTime=0x1d5df0b, ftLastAccessTime.dwLowDateTime=0xed25b770, ftLastAccessTime.dwHighDateTime=0x1d5e05d, ftLastWriteTime.dwLowDateTime=0xed25b770, ftLastWriteTime.dwHighDateTime=0x1d5e05d, nFileSizeHigh=0x0, nFileSizeLow=0xa738)) returned 1
	[0186.852] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0186.852] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0186.852] ReadFile (in: hFile=0x33c, lpBuffer=0x128aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x128aa000*, lpNumberOfBytesRead=0x12727d1c*=0xa738, lpOverlapped=0x0) returned 1
	[0186.875] GetFileType (hFile=0x33c) returned 0x1
	[0186.875] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.875] WriteFile (in: hFile=0x33c, lpBuffer=0x12714000*, nNumberOfBytesToWrite=0xa738, lpNumberOfBytesWritten=0x12727d00, lpOverlapped=0x12727d0c | out: lpBuffer=0x12714000*, lpNumberOfBytesWritten=0x12727d00*=0xa738, lpOverlapped=0x12727d0c) returned 1
	[0186.876] GetFileType (hFile=0x33c) returned 0x1
	[0186.876] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xa738, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.876] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0186.876] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0186.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0186.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0186.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X2vjdwVFBKUbkwNn7V.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x2vjdwvfbkubkwnn7v.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.877] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.877] WriteFile (in: hFile=0x2dc, lpBuffer=0x128e0500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12727d0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0500*, lpNumberOfBytesWritten=0x12727d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.877] CloseHandle (hObject=0x2dc) returned 1
	[0186.877] CloseHandle (hObject=0x33c) returned 1
	[0186.877] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X2vjdwVFBKUbkwNn7V.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x2vjdwvfbkubkwnn7v.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X2vjdwVFBKUbkwNn7V.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x2vjdwvfbkubkwnn7v.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.880] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0186.984] SetEvent (hEvent=0x2e8) returned 1
	[0186.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec21a170, ftCreationTime.dwHighDateTime=0x1d5dd8a, ftLastAccessTime.dwLowDateTime=0x71208a0, ftLastAccessTime.dwHighDateTime=0x1d5dca3, ftLastWriteTime.dwLowDateTime=0x71208a0, ftLastWriteTime.dwHighDateTime=0x1d5dca3, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec21a170, ftCreationTime.dwHighDateTime=0x1d5dd8a, ftLastAccessTime.dwLowDateTime=0x71208a0, ftLastAccessTime.dwHighDateTime=0x1d5dca3, ftLastWriteTime.dwLowDateTime=0x71208a0, ftLastWriteTime.dwHighDateTime=0x1d5dca3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.989] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec21a170, ftCreationTime.dwHighDateTime=0x1d5dd8a, ftLastAccessTime.dwLowDateTime=0x71208a0, ftLastAccessTime.dwHighDateTime=0x1d5dca3, ftLastWriteTime.dwLowDateTime=0x71208a0, ftLastWriteTime.dwHighDateTime=0x1d5dca3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.989] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd05d25b0, ftCreationTime.dwHighDateTime=0x1d5da72, ftLastAccessTime.dwLowDateTime=0xcb66e180, ftLastAccessTime.dwHighDateTime=0x1d5e4d2, ftLastWriteTime.dwLowDateTime=0xcb66e180, ftLastWriteTime.dwHighDateTime=0x1d5e4d2, nFileSizeHigh=0x0, nFileSizeLow=0x542d, dwReserved0=0x0, dwReserved1=0x0, cFileName="7Slv_zqdZ5jk.swf", cAlternateFileName="7SLV_Z~1.SWF")) returned 1
	[0186.989] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd5ed40, ftCreationTime.dwHighDateTime=0x1d5e806, ftLastAccessTime.dwLowDateTime=0x44f2f310, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0x44f2f310, ftLastWriteTime.dwHighDateTime=0x1d5df09, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="byAw", cAlternateFileName="")) returned 1
	[0186.989] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4096b110, ftCreationTime.dwHighDateTime=0x1d5e75d, ftLastAccessTime.dwLowDateTime=0x56878b0, ftLastAccessTime.dwHighDateTime=0x1d5da71, ftLastWriteTime.dwLowDateTime=0x56878b0, ftLastWriteTime.dwHighDateTime=0x1d5da71, nFileSizeHigh=0x0, nFileSizeLow=0xbbd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pxRjH_WjQp7.mkv", cAlternateFileName="PXRJH_~1.MKV")) returned 1
	[0186.989] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84dfdf0, ftCreationTime.dwHighDateTime=0x1d5e60d, ftLastAccessTime.dwLowDateTime=0x8f9dad0, ftLastAccessTime.dwHighDateTime=0x1d5da87, ftLastWriteTime.dwLowDateTime=0x8f9dad0, ftLastWriteTime.dwHighDateTime=0x1d5da87, nFileSizeHigh=0x0, nFileSizeLow=0x5220, dwReserved0=0x0, dwReserved1=0x0, cFileName="xp_t-U1vlWF9cYtgh.swf", cAlternateFileName="XP_T-U~1.SWF")) returned 1
	[0186.989] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.989] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.994] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0186.994] WriteFile (in: hFile=0x2dc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0186.995] CloseHandle (hObject=0x2dc) returned 1
	[0186.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\7Slv_zqdZ5jk.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\7slv_zqdz5jk.swf"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd05d25b0, ftCreationTime.dwHighDateTime=0x1d5da72, ftLastAccessTime.dwLowDateTime=0xcb66e180, ftLastAccessTime.dwHighDateTime=0x1d5e4d2, ftLastWriteTime.dwLowDateTime=0xcb66e180, ftLastWriteTime.dwHighDateTime=0x1d5e4d2, nFileSizeHigh=0x0, nFileSizeLow=0x542d)) returned 1
	[0186.996] SetEvent (hEvent=0x2f4) returned 1
	[0186.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd5ed40, ftCreationTime.dwHighDateTime=0x1d5e806, ftLastAccessTime.dwLowDateTime=0x44f2f310, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0x44f2f310, ftLastWriteTime.dwHighDateTime=0x1d5df09, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.997] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd5ed40, ftCreationTime.dwHighDateTime=0x1d5e806, ftLastAccessTime.dwLowDateTime=0x44f2f310, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0x44f2f310, ftLastWriteTime.dwHighDateTime=0x1d5df09, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd5ed40, ftCreationTime.dwHighDateTime=0x1d5e806, ftLastAccessTime.dwLowDateTime=0x44f2f310, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0x44f2f310, ftLastWriteTime.dwHighDateTime=0x1d5df09, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de6f30, ftCreationTime.dwHighDateTime=0x1d5dda2, ftLastAccessTime.dwLowDateTime=0x17b1dc0, ftLastAccessTime.dwHighDateTime=0x1d5db75, ftLastWriteTime.dwLowDateTime=0x17b1dc0, ftLastWriteTime.dwHighDateTime=0x1d5db75, nFileSizeHigh=0x0, nFileSizeLow=0x1183b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8zDHmf.mkv", cAlternateFileName="")) returned 1
	[0186.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb541cef0, ftCreationTime.dwHighDateTime=0x1d5de70, ftLastAccessTime.dwLowDateTime=0x7a437a00, ftLastAccessTime.dwHighDateTime=0x1d5e79a, ftLastWriteTime.dwLowDateTime=0x7a437a00, ftLastWriteTime.dwHighDateTime=0x1d5e79a, nFileSizeHigh=0x0, nFileSizeLow=0x17223, dwReserved0=0x0, dwReserved1=0x0, cFileName="9M QqIKYO.avi", cAlternateFileName="9MQQIK~1.AVI")) returned 1
	[0186.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cab3bf0, ftCreationTime.dwHighDateTime=0x1d5dd1e, ftLastAccessTime.dwLowDateTime=0xb7b07160, ftLastAccessTime.dwHighDateTime=0x1d5df96, ftLastWriteTime.dwLowDateTime=0xb7b07160, ftLastWriteTime.dwHighDateTime=0x1d5df96, nFileSizeHigh=0x0, nFileSizeLow=0x10161, dwReserved0=0x0, dwReserved1=0x0, cFileName="hlU6.flv", cAlternateFileName="")) returned 1
	[0186.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10c222f0, ftCreationTime.dwHighDateTime=0x1d5e1bb, ftLastAccessTime.dwLowDateTime=0x98035960, ftLastAccessTime.dwHighDateTime=0x1d5e548, ftLastWriteTime.dwLowDateTime=0x98035960, ftLastWriteTime.dwHighDateTime=0x1d5e548, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="oDQP.flv", cAlternateFileName="")) returned 1
	[0186.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.998] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0187.017] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0187.017] WriteFile (in: hFile=0x1e4, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0187.018] CloseHandle (hObject=0x1e4) returned 1
	[0187.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\8zDHmf.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\8zdhmf.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de6f30, ftCreationTime.dwHighDateTime=0x1d5dda2, ftLastAccessTime.dwLowDateTime=0x17b1dc0, ftLastAccessTime.dwHighDateTime=0x1d5db75, ftLastWriteTime.dwLowDateTime=0x17b1dc0, ftLastWriteTime.dwHighDateTime=0x1d5db75, nFileSizeHigh=0x0, nFileSizeLow=0x1183b)) returned 1
	[0187.020] GetFileType (hFile=0x344) returned 0x1
	[0187.020] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.020] WriteFile (in: hFile=0x344, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x16220, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x12769d00*=0x16220, lpOverlapped=0x12769d0c) returned 1
	[0187.022] GetFileType (hFile=0x344) returned 0x1
	[0187.022] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x16220, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0187.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0187.023] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0187.023] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744400 | out: pbBuffer=0x12744400) returned 1
	[0187.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\NWK49oPh4.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\nwk49oph4.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0187.023] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0187.023] WriteFile (in: hFile=0x1e4, lpBuffer=0x12990a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12990a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.023] CloseHandle (hObject=0x1e4) returned 1
	[0187.023] CloseHandle (hObject=0x344) returned 1
	[0187.024] SwitchToThread () returned 1
	[0187.035] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\NWK49oPh4.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\nwk49oph4.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\NWK49oPh4.mp4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\nwk49oph4.mp4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\9M QqIKYO.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\9m qqikyo.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0187.039] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0187.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\9M QqIKYO.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\9m qqikyo.avi"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb541cef0, ftCreationTime.dwHighDateTime=0x1d5de70, ftLastAccessTime.dwLowDateTime=0x7a437a00, ftLastAccessTime.dwHighDateTime=0x1d5e79a, ftLastWriteTime.dwLowDateTime=0x7a437a00, ftLastWriteTime.dwHighDateTime=0x1d5e79a, nFileSizeHigh=0x0, nFileSizeLow=0x17223)) returned 1
	[0187.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c700 | out: pbBuffer=0x1244c700) returned 1
	[0187.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744418 | out: pbBuffer=0x12744418) returned 1
	[0187.039] ReadFile (in: hFile=0x344, lpBuffer=0x127c0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127c0000*, lpNumberOfBytesRead=0x12769d1c*=0x17223, lpOverlapped=0x0) returned 1
	[0187.103] GetFileType (hFile=0x344) returned 0x1
	[0187.103] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.103] WriteFile (in: hFile=0x344, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x17223, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12769d00*=0x17223, lpOverlapped=0x12769d0c) returned 1
	[0187.104] GetFileType (hFile=0x344) returned 0x1
	[0187.104] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x17223, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0187.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0187.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0187.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444d0 | out: pbBuffer=0x127444d0) returned 1
	[0187.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\9M QqIKYO.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\9m qqikyo.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0187.105] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0187.105] WriteFile (in: hFile=0x2dc, lpBuffer=0x12990f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12990f00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.105] CloseHandle (hObject=0x2dc) returned 1
	[0187.105] CloseHandle (hObject=0x344) returned 1
	[0187.105] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\9M QqIKYO.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\9m qqikyo.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\9M QqIKYO.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\9m qqikyo.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\xp_t-U1vlWF9cYtgh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\xp_t-u1vlwf9cytgh.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0187.110] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0187.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\xp_t-U1vlWF9cYtgh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\xp_t-u1vlwf9cytgh.swf"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84dfdf0, ftCreationTime.dwHighDateTime=0x1d5e60d, ftLastAccessTime.dwLowDateTime=0x8f9dad0, ftLastAccessTime.dwHighDateTime=0x1d5da87, ftLastWriteTime.dwLowDateTime=0x8f9dad0, ftLastWriteTime.dwHighDateTime=0x1d5da87, nFileSizeHigh=0x0, nFileSizeLow=0x5220)) returned 1
	[0187.110] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c920 | out: pbBuffer=0x1244c920) returned 1
	[0187.110] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127444e8 | out: pbBuffer=0x127444e8) returned 1
	[0187.110] ReadFile (in: hFile=0x344, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12769d1c*=0x5220, lpOverlapped=0x0) returned 1
	[0187.224] GetFileType (hFile=0x344) returned 0x1
	[0187.225] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.225] WriteFile (in: hFile=0x344, lpBuffer=0x124a6a00*, nNumberOfBytesToWrite=0x5220, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x124a6a00*, lpNumberOfBytesWritten=0x12769d00*=0x5220, lpOverlapped=0x12769d0c) returned 1
	[0187.225] GetFileType (hFile=0x344) returned 0x1
	[0187.225] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x5220, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400901 | out: pbBuffer=0x12400901) returned 1
	[0187.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0187.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0187.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0187.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\xp_t-U1vlWF9cYtgh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\xp_t-u1vlwf9cytgh.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0187.226] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0187.226] WriteFile (in: hFile=0x34c, lpBuffer=0x128e0500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0500*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.226] CloseHandle (hObject=0x34c) returned 1
	[0187.226] CloseHandle (hObject=0x344) returned 1
	[0187.226] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\xp_t-U1vlWF9cYtgh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\xp_t-u1vlwf9cytgh.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\xp_t-U1vlWF9cYtgh.swf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\xp_t-u1vlwf9cytgh.swf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.229] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0187.332] SetEvent (hEvent=0x2f4) returned 1
	[0187.332] SetEvent (hEvent=0x80) returned 1
	[0187.332] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0188.777] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0189.698] SetEvent (hEvent=0x318) returned 1
	[0189.698] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0189.746] SetEvent (hEvent=0x318) returned 1
	[0189.746] SetEvent (hEvent=0x2e8) returned 1
	[0189.746] SetEvent (hEvent=0x80) returned 1
	[0189.746] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0189.843] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0189.844] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0189.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c)) returned 1
	[0189.844] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0189.844] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0189.844] ReadFile (in: hFile=0x344, lpBuffer=0x12924000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12924000*, lpNumberOfBytesRead=0x12767d1c*=0x1106c, lpOverlapped=0x0) returned 1
	[0189.904] GetFileType (hFile=0x344) returned 0x1
	[0189.904] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0189.904] WriteFile (in: hFile=0x344, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x1106c, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12767d00*=0x1106c, lpOverlapped=0x12767d0c) returned 1
	[0189.905] GetFileType (hFile=0x344) returned 0x1
	[0189.905] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1106c, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0189.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0189.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0189.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0189.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0189.909] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0189.909] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0189.909] WriteFile (in: hFile=0x1e4, lpBuffer=0x12626000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0189.909] CloseHandle (hObject=0x1e4) returned 1
	[0189.909] CloseHandle (hObject=0x344) returned 1
	[0189.909] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0189.912] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0189.912] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0189.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0189.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0189.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0189.913] ReadFile (in: hFile=0x344, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12767d1c*=0x414, lpOverlapped=0x0) returned 1
	[0190.112] GetFileType (hFile=0x344) returned 0x1
	[0190.112] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.112] WriteFile (in: hFile=0x344, lpBuffer=0x125fa480*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x125fa480*, lpNumberOfBytesWritten=0x12767d00*=0x414, lpOverlapped=0x12767d0c) returned 1
	[0190.112] GetFileType (hFile=0x344) returned 0x1
	[0190.112] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x414, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.112] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0190.112] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0190.113] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0190.113] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744210 | out: pbBuffer=0x12744210) returned 1
	[0190.113] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0190.113] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.113] WriteFile (in: hFile=0x350, lpBuffer=0x12626500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.113] CloseHandle (hObject=0x350) returned 1
	[0190.113] CloseHandle (hObject=0x344) returned 1
	[0190.114] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.326] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0190.328] SetEvent (hEvent=0x318) returned 1
	[0190.328] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.329] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1
	[0190.329] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0190.329] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0190.329] ReadFile (in: hFile=0x344, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x1276dd1c*=0x4f3, lpOverlapped=0x0) returned 1
	[0190.342] GetFileType (hFile=0x344) returned 0x1
	[0190.342] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.342] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x4f3, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1276dd00*=0x4f3, lpOverlapped=0x1276dd0c) returned 1
	[0190.342] GetFileType (hFile=0x344) returned 0x1
	[0190.342] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x4f3, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0190.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0190.343] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0190.343] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881d0 | out: pbBuffer=0x127881d0) returned 1
	[0190.343] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.343] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.343] WriteFile (in: hFile=0x2dc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.343] CloseHandle (hObject=0x2dc) returned 1
	[0190.344] CloseHandle (hObject=0x344) returned 1
	[0190.351] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.383] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.384] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0190.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1
	[0190.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0190.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0190.385] ReadFile (in: hFile=0x2dc, lpBuffer=0x12846000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12846000*, lpNumberOfBytesRead=0x12769d1c*=0x311, lpOverlapped=0x0) returned 1
	[0190.389] GetFileType (hFile=0x2dc) returned 0x1
	[0190.389] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.389] WriteFile (in: hFile=0x2dc, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x311, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x12769d00*=0x311, lpOverlapped=0x12769d0c) returned 1
	[0190.389] GetFileType (hFile=0x2dc) returned 0x1
	[0190.389] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x311, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0190.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0190.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0190.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0190.390] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.390] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0190.391] WriteFile (in: hFile=0x33c, lpBuffer=0x1283e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x1283e000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.391] CloseHandle (hObject=0x33c) returned 1
	[0190.399] CloseHandle (hObject=0x2dc) returned 1
	[0190.405] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.458] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0190.463] SetEvent (hEvent=0x70) returned 1
	[0190.463] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.464] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1
	[0190.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0190.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0190.464] ReadFile (in: hFile=0x2dc, lpBuffer=0x12924000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12924000*, lpNumberOfBytesRead=0x12767d1c*=0x401, lpOverlapped=0x0) returned 1
	[0190.467] GetFileType (hFile=0x2dc) returned 0x1
	[0190.468] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.468] WriteFile (in: hFile=0x2dc, lpBuffer=0x12648000*, nNumberOfBytesToWrite=0x401, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12648000*, lpNumberOfBytesWritten=0x12767d00*=0x401, lpOverlapped=0x12767d0c) returned 1
	[0190.468] GetFileType (hFile=0x2dc) returned 0x1
	[0190.468] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x401, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0190.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0190.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0190.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0190.468] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.469] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.469] WriteFile (in: hFile=0x33c, lpBuffer=0x12770000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12770000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.469] CloseHandle (hObject=0x33c) returned 1
	[0190.470] CloseHandle (hObject=0x2dc) returned 1
	[0190.471] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.505] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0190.511] SetEvent (hEvent=0x70) returned 1
	[0190.511] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.512] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0190.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1
	[0190.512] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0190.512] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0190.512] ReadFile (in: hFile=0x33c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1242bd1c*=0x437, lpOverlapped=0x0) returned 1
	[0190.521] GetFileType (hFile=0x33c) returned 0x1
	[0190.521] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.521] WriteFile (in: hFile=0x33c, lpBuffer=0x12648900*, nNumberOfBytesToWrite=0x437, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12648900*, lpNumberOfBytesWritten=0x1242bd00*=0x437, lpOverlapped=0x1242bd0c) returned 1
	[0190.522] GetFileType (hFile=0x33c) returned 0x1
	[0190.522] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x437, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.522] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0190.522] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0190.522] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0190.523] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0190.523] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0190.523] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0190.523] WriteFile (in: hFile=0x1e4, lpBuffer=0x12770500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12770500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.523] CloseHandle (hObject=0x1e4) returned 1
	[0190.529] CloseHandle (hObject=0x33c) returned 1
	[0190.570] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.687] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0190.694] SetEvent (hEvent=0x320) returned 1
	[0190.694] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.695] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1
	[0190.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0190.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e788 | out: pbBuffer=0x1251e788) returned 1
	[0190.695] ReadFile (in: hFile=0x33c, lpBuffer=0x127b6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127b6000*, lpNumberOfBytesRead=0x1276dd1c*=0x122, lpOverlapped=0x0) returned 1
	[0190.697] GetFileType (hFile=0x33c) returned 0x1
	[0190.697] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.697] WriteFile (in: hFile=0x33c, lpBuffer=0x1261a140*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1261a140*, lpNumberOfBytesWritten=0x1276dd00*=0x122, lpOverlapped=0x1276dd0c) returned 1
	[0190.698] GetFileType (hFile=0x33c) returned 0x1
	[0190.698] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x122, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0190.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0190.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0190.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e8a0 | out: pbBuffer=0x1251e8a0) returned 1
	[0190.698] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.698] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.698] WriteFile (in: hFile=0x2dc, lpBuffer=0x127ee500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.699] CloseHandle (hObject=0x2dc) returned 1
	[0190.699] CloseHandle (hObject=0x33c) returned 1
	[0190.699] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.701] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0190.768] SetEvent (hEvent=0x318) returned 1
	[0190.768] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.769] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9)) returned 1
	[0190.769] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e540 | out: pbBuffer=0x1252e540) returned 1
	[0190.769] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e8c8 | out: pbBuffer=0x1251e8c8) returned 1
	[0190.769] ReadFile (in: hFile=0x344, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x12767d1c*=0x5a9, lpOverlapped=0x0) returned 1
	[0190.792] GetFileType (hFile=0x344) returned 0x1
	[0190.792] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.793] WriteFile (in: hFile=0x344, lpBuffer=0x1245e000*, nNumberOfBytesToWrite=0x5a9, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1245e000*, lpNumberOfBytesWritten=0x12767d00*=0x5a9, lpOverlapped=0x12767d0c) returned 1
	[0190.793] GetFileType (hFile=0x344) returned 0x1
	[0190.793] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x5a9, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.793] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0190.793] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0190.793] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0190.793] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e9f0 | out: pbBuffer=0x1251e9f0) returned 1
	[0190.794] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.794] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.794] WriteFile (in: hFile=0x34c, lpBuffer=0x127eea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x127eea00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.794] CloseHandle (hObject=0x34c) returned 1
	[0190.794] CloseHandle (hObject=0x344) returned 1
	[0190.794] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.796] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0190.842] SetEvent (hEvent=0x320) returned 1
	[0190.842] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.843] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0190.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x125e7ad0 | out: lpFileInformation=0x125e7ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0190.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0190.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0190.843] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x125e7d1c*=0x18, lpOverlapped=0x0) returned 1
	[0190.845] GetFileType (hFile=0x33c) returned 0x1
	[0190.845] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.845] WriteFile (in: hFile=0x33c, lpBuffer=0x1240e300*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x125e7d00, lpOverlapped=0x125e7d0c | out: lpBuffer=0x1240e300*, lpNumberOfBytesWritten=0x125e7d00*=0x18, lpOverlapped=0x125e7d0c) returned 1
	[0190.845] GetFileType (hFile=0x33c) returned 0x1
	[0190.845] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0190.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0190.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0190.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0190.846] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.846] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0190.846] WriteFile (in: hFile=0x2dc, lpBuffer=0x128d4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x128d4000*, lpNumberOfBytesWritten=0x125e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.848] CloseHandle (hObject=0x2dc) returned 1
	[0190.848] CloseHandle (hObject=0x33c) returned 1
	[0190.848] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.850] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0190.873] SetEvent (hEvent=0x320) returned 1
	[0190.873] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0190.880] SetEvent (hEvent=0x320) returned 1
	[0190.880] SetEvent (hEvent=0x80) returned 1
	[0190.881] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.881] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0190.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), fInfoLevelId=0x0, lpFileInformation=0x125e9ad0 | out: lpFileInformation=0x125e9ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0190.882] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0190.882] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0190.882] ReadFile (in: hFile=0x2dc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x125e9d1c*=0x1d4, lpOverlapped=0x0) returned 1
	[0190.884] GetFileType (hFile=0x2dc) returned 0x1
	[0190.884] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.884] WriteFile (in: hFile=0x2dc, lpBuffer=0x1298a000*, nNumberOfBytesToWrite=0x1d4, lpNumberOfBytesWritten=0x125e9d00, lpOverlapped=0x125e9d0c | out: lpBuffer=0x1298a000*, lpNumberOfBytesWritten=0x125e9d00*=0x1d4, lpOverlapped=0x125e9d0c) returned 1
	[0190.884] GetFileType (hFile=0x2dc) returned 0x1
	[0190.884] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1d4, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0190.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0190.885] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0190.885] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0190.885] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.885] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0190.885] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x125e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.885] CloseHandle (hObject=0x344) returned 1
	[0190.886] CloseHandle (hObject=0x2dc) returned 1
	[0190.886] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.888] SwitchToThread () returned 1
	[0190.906] SetEvent (hEvent=0x320) returned 1
	[0190.906] CreateFileW (lpFileName="C:\\Users\\Default\\Application Data" (normalized: "c:\\users\\default\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.906] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0190.906] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\desktop.ini" (normalized: "c:\\users\\default\\contacts\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.907] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0190.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts\\desktop.ini" (normalized: "c:\\users\\default\\contacts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e7ad0 | out: lpFileInformation=0x125e7ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1
	[0190.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0190.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f0 | out: pbBuffer=0x127880f0) returned 1
	[0190.908] ReadFile (in: hFile=0x2dc, lpBuffer=0x127b6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x127b6000*, lpNumberOfBytesRead=0x125e7d1c*=0x19c, lpOverlapped=0x0) returned 1
	[0190.910] GetFileType (hFile=0x2dc) returned 0x1
	[0190.911] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.911] WriteFile (in: hFile=0x2dc, lpBuffer=0x12464ea0*, nNumberOfBytesToWrite=0x19c, lpNumberOfBytesWritten=0x125e7d00, lpOverlapped=0x125e7d0c | out: lpBuffer=0x12464ea0*, lpNumberOfBytesWritten=0x125e7d00*=0x19c, lpOverlapped=0x125e7d0c) returned 1
	[0190.911] GetFileType (hFile=0x2dc) returned 0x1
	[0190.911] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x19c, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0190.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0190.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0190.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a8 | out: pbBuffer=0x127881a8) returned 1
	[0190.912] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\desktop.ini" (normalized: "c:\\users\\default\\contacts\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.912] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0190.912] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x125e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.912] CloseHandle (hObject=0x344) returned 1
	[0190.912] CloseHandle (hObject=0x2dc) returned 1
	[0190.912] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Contacts\\desktop.ini" (normalized: "c:\\users\\default\\contacts\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Contacts\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\contacts\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.020] SetEvent (hEvent=0x320) returned 1
	[0191.020] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.020] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0191.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), fInfoLevelId=0x0, lpFileInformation=0x125e7ad0 | out: lpFileInformation=0x125e7ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.021] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0191.021] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788488 | out: pbBuffer=0x12788488) returned 1
	[0191.021] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0191.026] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0191.026] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faa4, ulCount=0x10, ulNumEntriesRemoved=0x18fa88, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faa4, ulNumEntriesRemoved=0x18fa88) returned 0
	[0191.026] SetEvent (hEvent=0xa0) returned 1
	[0191.026] SetEvent (hEvent=0x320) returned 1
	[0191.026] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x125e7d1c*=0x85, lpOverlapped=0x0) returned 1
	[0191.028] GetFileType (hFile=0x33c) returned 0x1
	[0191.028] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.028] WriteFile (in: hFile=0x33c, lpBuffer=0x1262f560*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x125e7d00, lpOverlapped=0x125e7d0c | out: lpBuffer=0x1262f560*, lpNumberOfBytesWritten=0x125e7d00*=0x85, lpOverlapped=0x125e7d0c) returned 1
	[0191.029] GetFileType (hFile=0x33c) returned 0x1
	[0191.029] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.029] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9081 | out: pbBuffer=0x127e9081) returned 1
	[0191.029] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9181 | out: pbBuffer=0x127e9181) returned 1
	[0191.029] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9281 | out: pbBuffer=0x127e9281) returned 1
	[0191.029] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788540 | out: pbBuffer=0x12788540) returned 1
	[0191.029] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0191.030] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0191.030] WriteFile (in: hFile=0x34c, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x125e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.030] CloseHandle (hObject=0x34c) returned 1
	[0191.030] CloseHandle (hObject=0x33c) returned 1
	[0191.030] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.033] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0191.035] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0191.208] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0191.212] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0191.212] SetEvent (hEvent=0xa0) returned 1
	[0191.212] SetEvent (hEvent=0x80) returned 1
	[0191.212] SetEvent (hEvent=0x320) returned 1
	[0191.212] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0191.267] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0191.966] SetEvent (hEvent=0x2e8) returned 1
	[0191.966] SetEvent (hEvent=0x80) returned 1
	[0191.966] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0192.004] SetEvent (hEvent=0x2e8) returned 1
	[0192.004] SetEvent (hEvent=0x80) returned 1
	[0192.004] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0192.457] SetEvent (hEvent=0x2e8) returned 1
	[0192.458] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.458] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms\\*", lpFindFileData=0x12769a44 | out: lpFindFileData=0x12769a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0192.458] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.458] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms\\*", lpFindFileData=0x125e7a44 | out: lpFindFileData=0x125e7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0192.458] CreateFileW (lpFileName="C:\\Users\\Default\\Start Menu" (normalized: "c:\\users\\default\\start menu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.458] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0192.458] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0192.575] SetEvent (hEvent=0x70) returned 1
	[0192.575] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\desktop.ini" (normalized: "c:\\users\\default\\videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0192.576] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0192.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Videos\\desktop.ini" (normalized: "c:\\users\\default\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e7ad0 | out: lpFileInformation=0x125e7ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0192.576] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0192.576] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103f8 | out: pbBuffer=0x124103f8) returned 1
	[0192.576] ReadFile (in: hFile=0x2dc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x125e7d1c*=0x1f8, lpOverlapped=0x0) returned 1
	[0192.586] GetFileType (hFile=0x2dc) returned 0x1
	[0192.586] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.586] WriteFile (in: hFile=0x2dc, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x125e7d00, lpOverlapped=0x125e7d0c | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x125e7d00*=0x1f8, lpOverlapped=0x125e7d0c) returned 1
	[0192.586] GetFileType (hFile=0x2dc) returned 0x1
	[0192.586] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.586] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400801 | out: pbBuffer=0x12400801) returned 1
	[0192.587] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400901 | out: pbBuffer=0x12400901) returned 1
	[0192.587] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0192.587] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104e0 | out: pbBuffer=0x124104e0) returned 1
	[0192.587] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\desktop.ini" (normalized: "c:\\users\\default\\videos\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0192.587] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0192.587] WriteFile (in: hFile=0x344, lpBuffer=0x12780500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12780500*, lpNumberOfBytesWritten=0x125e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0192.588] CloseHandle (hObject=0x344) returned 1
	[0192.588] CloseHandle (hObject=0x2dc) returned 1
	[0192.588] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Videos\\desktop.ini" (normalized: "c:\\users\\default\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Videos\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\videos\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.680] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0192.716] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0192.816] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0192.816] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x0
	[0192.852] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x18faac, ulCount=0x10, ulNumEntriesRemoved=0x18fa90, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x18faac, ulNumEntriesRemoved=0x18fa90) returned 0
	[0192.852] SetEvent (hEvent=0xa0) returned 1
	[0192.852] SetEvent (hEvent=0x318) returned 1
	[0192.852] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0x1) returned 0x102
	[0192.906] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0192.906] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0192.907] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0192.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485)) returned 1
	[0192.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0192.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0192.907] ReadFile (in: hFile=0x344, lpBuffer=0x12992000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12992000*, lpNumberOfBytesRead=0x12767d1c*=0x485, lpOverlapped=0x0) returned 1
	[0193.021] GetFileType (hFile=0x344) returned 0x1
	[0193.021] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0193.021] WriteFile (in: hFile=0x344, lpBuffer=0x129b2000*, nNumberOfBytesToWrite=0x485, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x129b2000*, lpNumberOfBytesWritten=0x12767d00*=0x485, lpOverlapped=0x12767d0c) returned 1
	[0193.022] GetFileType (hFile=0x344) returned 0x1
	[0193.022] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x485, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0193.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0193.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0193.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0193.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0f0 | out: pbBuffer=0x1251e0f0) returned 1
	[0193.022] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0193.023] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0193.023] WriteFile (in: hFile=0x33c, lpBuffer=0x129b2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x129b2500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0193.023] CloseHandle (hObject=0x33c) returned 1
	[0193.024] CloseHandle (hObject=0x344) returned 1
	[0193.025] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0193.031] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music" (normalized: "c:\\users\\public\\documents\\my music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0193.031] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x12769a44 | out: lpFindFileData=0x12769a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0193.032] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Pictures" (normalized: "c:\\users\\public\\documents\\my pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0193.032] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x125e5a44 | out: lpFindFileData=0x125e5a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0193.032] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0193.033] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0193.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0193.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0193.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e128 | out: pbBuffer=0x1251e128) returned 1
	[0193.033] ReadFile (in: hFile=0x344, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0xae, lpOverlapped=0x0) returned 1
	[0193.036] GetFileType (hFile=0x344) returned 0x1
	[0193.037] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0193.037] WriteFile (in: hFile=0x344, lpBuffer=0x127e2790*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127e2790*, lpNumberOfBytesWritten=0x12429d00*=0xae, lpOverlapped=0x12429d0c) returned 1
	[0193.037] GetFileType (hFile=0x344) returned 0x1
	[0193.037] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0193.037] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0193.037] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0193.037] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0193.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5f0 | out: pbBuffer=0x1251e5f0) returned 1
	[0193.038] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0193.038] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0193.038] WriteFile (in: hFile=0x33c, lpBuffer=0x129b2a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x129b2a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0193.038] CloseHandle (hObject=0x33c) returned 1
	[0193.038] CloseHandle (hObject=0x344) returned 1
	[0193.038] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Downloads\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\downloads\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0193.041] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0193.208] SetEvent (hEvent=0x80) returned 1
	[0193.208] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0193.210] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0193.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1
	[0193.210] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0193.210] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e688 | out: pbBuffer=0x1251e688) returned 1
	[0193.210] ReadFile (in: hFile=0x34c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12769d1c*=0x58, lpOverlapped=0x0) returned 1
	[0193.212] GetFileType (hFile=0x34c) returned 0x1
	[0193.212] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0193.212] WriteFile (in: hFile=0x34c, lpBuffer=0x124d64e0*, nNumberOfBytesToWrite=0x58, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x124d64e0*, lpNumberOfBytesWritten=0x12769d00*=0x58, lpOverlapped=0x12769d0c) returned 1
	[0193.212] GetFileType (hFile=0x34c) returned 0x1
	[0193.212] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x58, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0193.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0193.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0193.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0193.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e750 | out: pbBuffer=0x1251e750) returned 1
	[0193.213] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0193.213] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0193.214] WriteFile (in: hFile=0x2dc, lpBuffer=0x129b2f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x129b2f00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0193.214] CloseHandle (hObject=0x2dc) returned 1
	[0193.214] CloseHandle (hObject=0x34c) returned 1
	[0193.214] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Libraries\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\libraries\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0194.446] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0194.506] SetEvent (hEvent=0x80) returned 1
	[0194.506] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0194.508] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0194.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1)) returned 1
	[0194.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eac0 | out: pbBuffer=0x1240eac0) returned 1
	[0194.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744218 | out: pbBuffer=0x12744218) returned 1
	[0194.508] ReadFile (in: hFile=0x2dc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x125e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0194.564] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0194.711] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0194.810] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0194.814] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0195.246] SetEvent (hEvent=0x2e8) returned 1
	[0195.246] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0195.288] SetEvent (hEvent=0x2e8) returned 1
	[0195.289] SetEvent (hEvent=0x70) returned 1
	[0195.289] SetEvent (hEvent=0x320) returned 1
	[0195.289] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0195.327] SetEvent (hEvent=0x2e8) returned 1
	[0195.327] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0195.355] SetEvent (hEvent=0x320) returned 1
	[0195.355] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0195.356] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0195.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b)) returned 1
	[0195.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3a0 | out: pbBuffer=0x1240e3a0) returned 1
	[0195.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0195.356] ReadFile (in: hFile=0x354, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0196.273] GetFileType (hFile=0x354) returned 0x1
	[0196.273] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.273] WriteFile (in: hFile=0x354, lpBuffer=0x12924000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12924000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0196.274] GetFileType (hFile=0x354) returned 0x1
	[0196.274] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0196.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0196.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0196.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744200 | out: pbBuffer=0x12744200) returned 1
	[0196.274] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0196.275] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0196.275] WriteFile (in: hFile=0x1e4, lpBuffer=0x127e2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0196.370] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0196.594] CloseHandle (hObject=0x1e4) returned 1
	[0196.594] CloseHandle (hObject=0x354) returned 1
	[0196.594] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0196.676] SetEvent (hEvent=0x318) returned 1
	[0196.676] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0196.738] SetEvent (hEvent=0x318) returned 1
	[0196.738] SwitchToThread () returned 1
	[0196.785] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0196.824] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) returned 0x0
	[0199.480] SetEvent (hEvent=0x2e8) returned 1
	[0199.480] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0x2c8, buf=0x1260a000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0x2c8, lpOverlapped=0x124e2088) returned 0
	[0199.481] WaitForSingleObject (hHandle=0x68, dwMilliseconds=0xffffffff) 

Thread:
	id = 2
	os_tid = 0xb28

	[0047.129] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x324fff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x324fff38*=0x64) returned 1
	[0047.129] VirtualQuery (in: lpAddress=0x324fff48, lpBuffer=0x324fff48, dwLength=0x1c | out: lpBuffer=0x324fff48*(BaseAddress=0x324ff000, AllocationBase=0x32400000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0047.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0047.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.451] SetEvent (hEvent=0x78) returned 1
	[0049.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0049.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0050.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0050.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0051.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0051.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0051.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0051.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0051.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0051.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0051.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0051.931] SetEvent (hEvent=0x80) returned 1
	[0051.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0051.931] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0051.932] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xa0
	[0051.932] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0082.722] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0082.730] SetEvent (hEvent=0x80) returned 1
	[0082.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0082.744] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x324ffaec, ulCount=0x10, ulNumEntriesRemoved=0x324ffad0, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x324ffaec, ulNumEntriesRemoved=0x324ffad0) returned 0
	[0082.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0082.764] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.764] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0082.793] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0082.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0082.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0082.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0082.814] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0082.814] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0083.925] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0083.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0083.940] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0083.940] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0085.589] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0085.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0085.597] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0085.597] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0085.708] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0085.708] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x324ffaec, ulCount=0x10, ulNumEntriesRemoved=0x324ffad0, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x324ffaec, ulNumEntriesRemoved=0x324ffad0) returned 0
	[0085.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0086.703] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x324ffaec, ulCount=0x10, ulNumEntriesRemoved=0x324ffad0, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x324ffaec, ulNumEntriesRemoved=0x324ffad0) returned 0
	[0086.703] SetEvent (hEvent=0x80) returned 1
	[0086.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0086.705] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0086.705] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0086.856] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0086.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0086.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0086.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0086.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0086.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0086.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0086.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0086.902] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0086.902] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0106.042] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0106.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.059] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0106.059] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0106.106] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0106.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.108] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0106.108] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0106.139] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0106.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.142] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0106.142] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0106.169] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0106.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x12426c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2ec
	[0106.708] CloseHandle (hObject=0x2ec) returned 1
	[0106.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0106.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.581] SetEvent (hEvent=0x2e4) returned 1
	[0107.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0107.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0108.036] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0108.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0108.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0108.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0108.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0108.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0109.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0109.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0109.235] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0109.235] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0109.380] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0109.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0109.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0109.829] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0109.909] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x324ffaec, ulCount=0x10, ulNumEntriesRemoved=0x324ffad0, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x324ffaec, ulNumEntriesRemoved=0x324ffad0) returned 0
	[0109.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0109.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0110.053] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0110.053] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0110.056] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0110.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0110.071] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0110.071] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0111.679] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0111.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0111.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0111.744] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0111.744] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0112.709] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0112.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0112.754] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0112.754] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0112.835] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0112.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0112.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0113.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0113.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0113.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0113.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0113.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0113.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0113.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0113.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0113.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0113.826] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0113.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0114.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0114.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0114.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0114.449] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0114.449] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0114.501] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0114.501] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0114.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0114.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0114.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0114.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0114.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0114.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0114.981] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0115.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0115.157] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0115.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0115.262] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0115.262] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0115.312] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0115.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0115.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0115.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0115.869] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0115.869] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0115.972] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0115.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0116.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0116.218] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0116.218] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0116.409] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0116.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0116.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0116.582] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0116.582] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0116.802] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0116.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0116.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0117.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0117.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0117.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0117.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0117.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0118.122] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0118.122] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0118.282] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0118.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0118.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0118.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0118.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0118.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0118.835] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0118.836] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0119.652] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0119.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0119.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0119.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0119.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0119.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0119.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0119.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.022] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.059] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0120.059] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0120.109] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0120.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.246] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.425] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.859] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0120.859] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0120.862] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0120.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.957] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0120.958] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0120.961] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0120.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0120.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.062] SetEvent (hEvent=0x2e8) returned 1
	[0121.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.096] SetEvent (hEvent=0x30c) returned 1
	[0121.096] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.121] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0121.121] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0121.138] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0121.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.222] SetEvent (hEvent=0x30c) returned 1
	[0121.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.228] SetEvent (hEvent=0x2e8) returned 1
	[0121.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.304] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.325] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0121.325] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0121.330] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0121.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.451] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.465] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.613] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0121.613] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0121.619] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0121.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.669] SetEvent (hEvent=0x320) returned 1
	[0121.669] SetEvent (hEvent=0x318) returned 1
	[0121.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.697] SetEvent (hEvent=0x318) returned 1
	[0121.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.710] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.712] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0121.712] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0121.713] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0121.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.738] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0121.738] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0121.741] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0121.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.799] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0121.799] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0121.815] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0121.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.835] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.842] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.887] SetEvent (hEvent=0x80) returned 1
	[0121.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.933] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0121.933] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0121.934] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0121.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.959] SetEvent (hEvent=0x70) returned 1
	[0121.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.966] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0121.988] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0121.988] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0122.067] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0122.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.130] SetEvent (hEvent=0x2e8) returned 1
	[0122.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.145] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.155] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.170] SetEvent (hEvent=0x80) returned 1
	[0122.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.190] SetEvent (hEvent=0x80) returned 1
	[0122.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.206] SetEvent (hEvent=0x70) returned 1
	[0122.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.226] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0122.226] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0122.231] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0122.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.313] SetEvent (hEvent=0x2e8) returned 1
	[0122.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.319] SetEvent (hEvent=0x2e8) returned 1
	[0122.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.354] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0122.354] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0122.358] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0122.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.390] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0122.390] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0122.403] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0122.403] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.483] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0122.483] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0122.490] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0122.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.508] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.579] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0122.579] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0122.593] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0122.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.652] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0122.652] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0122.658] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0122.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.718] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.727] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0122.727] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0122.964] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0122.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0122.996] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0122.996] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0123.097] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0123.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.123] SetEvent (hEvent=0x2e8) returned 1
	[0123.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.130] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.131] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.138] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0123.138] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0123.220] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0123.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.279] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0123.279] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0123.298] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0123.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.313] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0123.313] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0123.323] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0123.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.335] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.341] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0123.341] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0123.353] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0123.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.399] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0123.399] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0123.410] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0123.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.528] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0123.528] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0123.535] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0123.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.562] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0123.562] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0123.625] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0123.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.660] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0123.660] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0123.711] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0123.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0123.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.165] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0124.165] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0124.222] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0124.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.251] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.275] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0124.275] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0124.276] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0124.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.306] SetEvent (hEvent=0x318) returned 1
	[0124.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.333] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0124.333] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0124.441] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0124.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.474] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0124.474] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0124.477] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0124.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.535] SetEvent (hEvent=0x80) returned 1
	[0124.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.625] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0124.625] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0124.625] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0124.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.745] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0124.746] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0124.750] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0124.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.910] SetEvent (hEvent=0x2e4) returned 1
	[0124.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.935] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0124.935] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0124.945] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0124.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0124.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.031] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0125.031] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0125.035] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0125.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.282] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.286] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.301] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0125.301] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0125.307] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0125.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.338] SetEvent (hEvent=0x80) returned 1
	[0125.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.345] SetEvent (hEvent=0x80) returned 1
	[0125.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.346] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.360] SetEvent (hEvent=0x80) returned 1
	[0125.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.368] SetEvent (hEvent=0x80) returned 1
	[0125.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.379] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0125.380] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0125.384] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0125.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.418] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.423] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0125.423] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0125.449] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0125.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.475] SetEvent (hEvent=0x318) returned 1
	[0125.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.516] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0125.516] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0125.517] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0125.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.544] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0125.544] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0125.545] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0125.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.606] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.668] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0125.668] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0125.681] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0125.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.685] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0125.685] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0125.686] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0125.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.701] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.702] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0125.702] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0125.782] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0125.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.850] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0125.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.067] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.070] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.088] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.229] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0126.229] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0126.237] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0126.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.295] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.732] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0126.732] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0126.781] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0126.781] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0126.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.016] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.395] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0127.395] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0127.475] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0127.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0127.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.079] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0128.079] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0128.350] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0128.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.525] SetEvent (hEvent=0x318) returned 1
	[0128.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.551] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0128.551] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0128.559] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0128.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.641] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0128.641] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0128.719] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0128.719] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.721] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0128.721] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0128.775] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0128.775] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.809] SetEvent (hEvent=0x68) returned 1
	[0128.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.819] SetEvent (hEvent=0x318) returned 1
	[0128.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.828] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0128.828] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0128.848] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0128.848] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.970] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0128.970] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0128.973] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0128.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0128.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.024] SetEvent (hEvent=0x2e4) returned 1
	[0129.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.039] SetEvent (hEvent=0x80) returned 1
	[0129.040] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.074] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0129.074] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0129.077] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0129.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.207] SetEvent (hEvent=0x2e8) returned 1
	[0129.207] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.220] SetEvent (hEvent=0x80) returned 1
	[0129.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.310] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.312] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0129.312] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0129.318] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0129.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.554] SetEvent (hEvent=0x80) returned 1
	[0129.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.557] SetEvent (hEvent=0x80) returned 1
	[0129.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.563] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0129.563] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0129.568] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0129.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.689] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.690] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0129.690] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0129.697] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0129.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.829] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.919] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.926] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.996] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0129.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.009] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.011] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.021] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.035] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.042] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0130.042] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0130.046] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0130.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.083] SetEvent (hEvent=0x30c) returned 1
	[0130.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.155] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0130.155] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0130.161] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0130.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.241] SetEvent (hEvent=0x318) returned 1
	[0130.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.270] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.276] SetEvent (hEvent=0x30c) returned 1
	[0130.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.295] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0130.295] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0130.297] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0130.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.415] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.419] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.430] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.437] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0130.437] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0130.441] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0130.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.476] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.500] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.506] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.507] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.519] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.525] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.537] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.562] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0130.562] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0130.566] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0130.566] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.642] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.649] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.663] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.674] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.676] SetEvent (hEvent=0x30c) returned 1
	[0130.676] SetEvent (hEvent=0x2e4) returned 1
	[0130.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.684] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.685] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.687] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.700] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.707] SetEvent (hEvent=0x80) returned 1
	[0130.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.801] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0130.801] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0130.806] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0130.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0130.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0131.306] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0131.306] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0131.310] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0131.438] SetEvent (hEvent=0x320) returned 1
	[0131.441] SetEvent (hEvent=0x320) returned 1
	[0131.441] SetEvent (hEvent=0x320) returned 1
	[0131.507] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0131.616] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0131.616] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0131.623] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0131.773] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0131.773] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0131.822] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0132.395] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0132.395] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0132.553] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0133.142] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0133.142] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0133.190] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0133.637] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0133.637] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0133.717] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0134.097] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0134.097] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0134.177] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0134.371] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0134.371] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0134.377] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0134.445] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0134.445] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0134.527] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0134.555] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0134.555] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0134.574] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0134.691] SetEvent (hEvent=0x80) returned 1
	[0134.761] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0134.761] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0134.771] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0134.893] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0134.893] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0134.911] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0135.025] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0135.025] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0135.031] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0135.120] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0135.120] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0135.124] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0135.216] SetEvent (hEvent=0x2e8) returned 1
	[0135.223] SetEvent (hEvent=0x2e8) returned 1
	[0135.226] SetEvent (hEvent=0x2e8) returned 1
	[0135.230] SetEvent (hEvent=0x68) returned 1
	[0135.236] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0135.236] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0135.239] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0135.402] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0135.402] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0135.408] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0135.547] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0135.547] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0135.553] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0135.701] SetEvent (hEvent=0x2f4) returned 1
	[0135.703] SetEvent (hEvent=0x2f4) returned 1
	[0135.705] SetEvent (hEvent=0x2f4) returned 1
	[0135.713] SetEvent (hEvent=0x2f4) returned 1
	[0135.721] SetEvent (hEvent=0x68) returned 1
	[0135.741] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0135.741] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0135.745] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0135.764] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0135.764] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0135.771] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0135.839] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0135.839] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0135.841] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0135.892] SetEvent (hEvent=0x70) returned 1
	[0135.959] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0135.959] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0135.962] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0136.075] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0136.076] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0136.251] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0136.393] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0136.394] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0136.397] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0136.449] SetEvent (hEvent=0x30c) returned 1
	[0136.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.472] SetEvent (hEvent=0x2e4) returned 1
	[0136.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.512] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0136.512] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0136.513] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0136.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.727] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0136.727] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0136.734] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0136.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.860] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0136.874] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0136.904] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0136.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0136.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.006] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0137.006] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0137.013] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0137.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.135] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0137.135] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0137.142] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0137.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.250] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.296] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0137.296] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0137.303] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0137.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.395] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0137.395] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0137.398] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0137.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.472] SetEvent (hEvent=0x2e4) returned 1
	[0137.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.514] SetEvent (hEvent=0x2e4) returned 1
	[0137.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.755] SetEvent (hEvent=0x30c) returned 1
	[0137.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.837] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0137.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.083] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.125] SetEvent (hEvent=0x80) returned 1
	[0138.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.267] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0138.267] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0138.369] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0138.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.720] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.856] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0138.856] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0138.905] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0138.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0138.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.133] SetEvent (hEvent=0x68) returned 1
	[0139.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.228] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.281] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.324] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0139.324] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0139.373] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0139.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.650] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.683] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0139.683] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0139.970] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0139.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0139.981] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0139.982] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0140.777] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0140.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0140.778] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0140.778] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0141.675] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0141.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0141.714] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0141.714] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0141.904] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0141.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0141.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.140] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.173] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0142.173] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0142.253] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0142.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.323] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0142.323] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0142.510] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0142.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.609] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.665] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.675] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0142.675] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0142.683] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0142.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.717] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.721] SetEvent (hEvent=0x2f4) returned 1
	[0142.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.735] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.756] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.763] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0142.763] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0142.778] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0142.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.804] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.807] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.824] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0142.824] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0142.828] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0142.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.929] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.944] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0142.945] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0142.945] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0143.110] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0143.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.133] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0143.133] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0143.137] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0143.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.508] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.658] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.672] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.694] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0143.694] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0143.698] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0143.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.713] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0143.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.191] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0144.191] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0144.272] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0144.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0144.866] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0144.866] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0145.353] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0145.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0145.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0145.421] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0145.421] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0145.502] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0145.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0145.536] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0145.536] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0145.712] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0145.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0145.746] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0145.746] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0145.827] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0145.827] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0145.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0145.901] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0145.901] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0145.993] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0145.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.161] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0146.162] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0146.168] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0146.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.315] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.350] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0146.350] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0146.366] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0146.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.390] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0146.390] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0146.417] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0146.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0146.898] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0146.899] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0146.969] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0146.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.075] SetEvent (hEvent=0x2e8) returned 1
	[0147.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.322] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.357] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0147.357] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0147.362] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0147.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.403] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0147.403] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0147.421] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0147.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.452] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0147.452] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0147.904] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0147.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.922] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0147.922] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0147.936] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0147.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0147.940] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0147.940] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0148.117] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0148.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0148.128] SetEvent (hEvent=0x2f4) returned 1
	[0148.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0148.143] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0148.144] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0148.144] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0149.779] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0149.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0149.855] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0149.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0149.975] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0150.039] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0150.039] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0150.182] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0150.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0150.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0150.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0150.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0150.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0150.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0150.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0150.591] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0150.591] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0150.765] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0150.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0150.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0150.846] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0150.846] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0150.952] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0150.953] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0150.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0151.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0151.078] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0151.078] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0151.158] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0151.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0151.194] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0151.194] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0152.399] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0152.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0152.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0152.863] SetEvent (hEvent=0x2f4) returned 1
	[0152.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0152.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0153.021] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0153.021] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0153.117] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0153.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0153.178] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0153.178] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0153.478] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0153.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0153.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0153.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0153.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0153.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0153.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0153.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0153.935] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0153.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.133] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0154.133] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0154.229] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0154.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.269] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.543] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.622] SetEvent (hEvent=0x2f4) returned 1
	[0154.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.925] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0154.992] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0154.992] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0155.194] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0155.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.488] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.550] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0155.550] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0155.626] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0155.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.688] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.724] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.882] SetEvent (hEvent=0x80) returned 1
	[0155.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.885] SetEvent (hEvent=0x80) returned 1
	[0155.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.905] SetEvent (hEvent=0x30c) returned 1
	[0155.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.924] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.983] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.988] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0155.994] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0155.994] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0156.008] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0156.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.031] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.046] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.053] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.054] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.055] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.069] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.073] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.075] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.076] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.079] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.089] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.196] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.214] SetEvent (hEvent=0x2e8) returned 1
	[0156.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.229] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.234] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.237] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0156.237] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0156.240] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0156.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.284] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.298] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.300] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.304] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.321] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.340] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0156.340] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0156.348] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0156.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.478] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.502] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.509] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.562] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.588] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.605] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.608] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0156.608] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0156.610] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0156.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.694] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.768] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.799] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0156.799] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0156.811] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0156.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.818] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.949] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0156.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.227] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0157.227] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0157.230] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0157.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.286] SetEvent (hEvent=0x320) returned 1
	[0157.286] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.309] SetEvent (hEvent=0x68) returned 1
	[0157.309] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.319] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.324] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.328] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0157.328] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0157.647] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0157.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.748] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.750] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.754] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.774] SetEvent (hEvent=0x2f4) returned 1
	[0157.774] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.780] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.786] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.788] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.802] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0157.802] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0157.808] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0157.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.845] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0157.846] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0157.846] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0157.870] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0157.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.556] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.565] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.611] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0158.672] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0158.672] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0158.682] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0158.682] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.434] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.436] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.505] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.512] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.543] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0159.543] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0159.545] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0159.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.690] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.734] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0159.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0160.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0160.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0160.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0160.146] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0160.180] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0160.180] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0160.669] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0160.669] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0160.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0160.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0160.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0160.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0160.941] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0160.999] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.048] SetEvent (hEvent=0x320) returned 1
	[0161.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.086] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0161.086] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0161.166] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0161.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.531] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.645] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.698] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0161.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.104] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0162.104] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0162.111] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0162.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.195] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.202] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.224] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0162.224] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0162.230] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0162.230] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.302] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.407] SetEvent (hEvent=0x2e4) returned 1
	[0162.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.495] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.535] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.541] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.542] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.555] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.563] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.578] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0162.578] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0162.585] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0162.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.641] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.675] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0162.675] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0162.680] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0162.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.721] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.728] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.796] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.805] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.820] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.950] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.962] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.991] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0162.994] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.008] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.098] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.121] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.141] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0163.141] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0163.144] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0163.144] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.184] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.194] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.204] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.227] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.233] SetEvent (hEvent=0x30c) returned 1
	[0163.233] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.235] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.248] SetEvent (hEvent=0x30c) returned 1
	[0163.248] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.253] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.258] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.268] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.278] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.291] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.296] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.307] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.342] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.343] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.358] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.359] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0163.359] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0163.362] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0163.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.395] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.404] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.412] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.420] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.421] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.424] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.439] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.445] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.447] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.477] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0163.477] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0163.482] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0163.482] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.518] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.521] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.532] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.545] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.558] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.560] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.567] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.569] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.572] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.576] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.577] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.581] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.584] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.608] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.612] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.637] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.642] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0163.642] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0163.644] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0163.644] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.660] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0163.660] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0163.860] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0163.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0163.880] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0163.880] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0164.028] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0164.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0164.716] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0164.742] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0164.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0164.990] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.044] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.313] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.417] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0165.417] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0165.592] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0165.592] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.778] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0165.850] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0165.850] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0166.400] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0166.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.441] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0166.442] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0166.528] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0166.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.832] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0166.832] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0166.851] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0166.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.865] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0166.865] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0166.867] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0166.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.906] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.918] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.930] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.946] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.947] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.952] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.968] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.969] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0166.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.006] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.017] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0167.017] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0167.024] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.025] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.080] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.085] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.101] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.106] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.107] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.125] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.126] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.131] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0167.131] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0167.135] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.198] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0167.198] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0167.292] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.308] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.322] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0167.322] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0167.345] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.540] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.549] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.553] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0167.553] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0167.557] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.573] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.604] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.609] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0167.609] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0167.614] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.614] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.648] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.651] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.660] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.671] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0167.671] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0167.695] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.695] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.705] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.723] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.726] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.740] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.743] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.761] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.769] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.779] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.801] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.815] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0167.815] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0167.819] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.819] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.834] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0167.834] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0167.840] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.840] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.854] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.886] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.891] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.901] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.910] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.914] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.915] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.920] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.921] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.935] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0167.935] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0167.940] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0167.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.970] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0167.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.020] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.020] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0168.024] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.040] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.040] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0168.050] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.072] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.074] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.074] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0168.077] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.108] SetEvent (hEvent=0x2e8) returned 1
	[0168.108] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.119] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.134] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.134] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0168.139] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.158] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.176] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.180] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.197] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.203] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.239] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.241] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.256] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.260] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.260] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0168.266] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.266] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.293] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.294] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.303] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.317] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.320] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.334] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.334] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0168.338] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.338] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.400] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.402] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.403] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.403] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0168.413] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.422] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.441] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.462] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.462] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0168.469] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.482] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.482] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0168.490] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.495] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.495] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0168.499] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.527] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.533] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.534] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.646] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.737] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.838] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.849] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0168.849] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0168.858] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0168.858] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.940] SetEvent (hEvent=0x68) returned 1
	[0168.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.942] SetEvent (hEvent=0x68) returned 1
	[0168.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0168.972] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.004] SetEvent (hEvent=0x2e8) returned 1
	[0169.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.127] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.154] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0169.154] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0169.171] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0169.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.193] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.240] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.323] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.438] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.451] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0169.451] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0169.463] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0169.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.485] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0169.485] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0169.523] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0169.523] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.552] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.559] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.773] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.776] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.783] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.836] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.939] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0169.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.073] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0170.073] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0170.081] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0170.081] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.103] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.128] SetEvent (hEvent=0x30c) returned 1
	[0170.128] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.139] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.147] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.151] SetEvent (hEvent=0x80) returned 1
	[0170.151] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.153] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.154] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.160] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.171] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0170.171] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0170.182] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0170.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.189] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.208] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.214] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.219] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.223] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.224] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0170.224] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0170.384] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0170.384] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.401] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0170.401] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0170.410] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0170.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.427] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.450] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.536] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.574] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.575] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.610] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.627] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.630] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.634] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.637] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0170.637] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0170.964] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0170.964] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0170.967] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0170.967] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0170.984] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0170.984] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.000] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0171.000] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0171.077] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0171.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.094] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0171.094] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0171.123] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0171.123] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.134] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.152] SetEvent (hEvent=0x70) returned 1
	[0171.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.162] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.164] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.168] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.169] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.175] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0171.175] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0171.218] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0171.218] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.239] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0171.239] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0171.257] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0171.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.275] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.306] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.320] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0171.320] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0171.333] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0171.333] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.339] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.354] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0171.354] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0171.517] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0171.517] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.539] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.561] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0171.561] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0171.583] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0171.583] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.645] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0171.645] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0171.654] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0171.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.676] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0171.676] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0171.681] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0171.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.703] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.830] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.908] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.932] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.942] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.961] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.967] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.982] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0171.987] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.002] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.023] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.051] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.064] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.066] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.073] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.073] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0172.078] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.078] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.117] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.118] SetEvent (hEvent=0x80) returned 1
	[0172.118] SetEvent (hEvent=0x2f4) returned 1
	[0172.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.161] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.166] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.174] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.176] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.176] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0172.192] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.192] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.198] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.212] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.212] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0172.216] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.252] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.277] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.277] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0172.280] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.336] SetEvent (hEvent=0x80) returned 1
	[0172.336] SetEvent (hEvent=0x2f4) returned 1
	[0172.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.352] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.357] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.380] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.380] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0172.389] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.401] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.432] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.446] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.496] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.496] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0172.504] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.530] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.551] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.551] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0172.557] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.557] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.568] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.585] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.586] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.587] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.597] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.598] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.599] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.600] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.602] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.607] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.633] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.636] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.636] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0172.639] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.673] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.677] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.699] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.725] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.928] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.929] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0172.934] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0172.978] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0172.978] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0172.979] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0172.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.004] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.082] SetEvent (hEvent=0x70) returned 1
	[0173.082] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.091] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.093] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.095] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.104] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.105] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.109] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.111] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.114] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.115] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.120] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.124] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.139] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0173.139] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0173.149] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0173.149] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.163] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.173] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.178] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.181] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.201] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.217] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.245] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.259] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.265] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.435] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.462] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.469] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.474] SetEvent (hEvent=0x68) returned 1
	[0173.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.487] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.489] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.491] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.492] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.579] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.581] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0173.581] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0173.589] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0173.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.603] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.616] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.617] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.635] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.638] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.640] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.647] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.652] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.655] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.657] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.661] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.662] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.666] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.668] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.673] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0173.673] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0173.679] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0173.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.692] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.707] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.727] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.729] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.738] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.753] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.757] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.758] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.763] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.766] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.782] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.785] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.790] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.847] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.853] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.857] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.871] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.875] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.876] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0173.876] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0173.887] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0173.887] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.943] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0173.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.037] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.038] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.039] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0174.039] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0174.048] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0174.048] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.058] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.200] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.205] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.210] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.216] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.220] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.225] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.236] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.237] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.261] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.271] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.273] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.277] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0174.277] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0174.279] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0174.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.314] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0174.314] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0174.318] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0174.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.347] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.348] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.353] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.359] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.381] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.383] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.385] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.408] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.411] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.413] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.546] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.561] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.564] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.578] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.613] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.622] SetEvent (hEvent=0x30c) returned 1
	[0174.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.629] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.639] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.641] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0174.641] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0174.653] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0174.653] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.659] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.678] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.696] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.708] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.714] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.718] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0174.718] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0174.722] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0174.722] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.736] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0174.736] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0174.739] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0174.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.767] SetEvent (hEvent=0x2f4) returned 1
	[0174.767] SetEvent (hEvent=0x30c) returned 1
	[0174.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.787] SetEvent (hEvent=0x30c) returned 1
	[0174.787] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.791] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.792] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.793] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.798] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.799] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.800] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.802] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.816] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.817] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.821] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.823] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0174.823] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0174.825] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0174.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.861] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.863] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.865] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.866] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.867] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.868] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.874] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.879] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.882] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.884] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.885] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.890] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.893] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.896] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.898] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.911] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.912] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0174.912] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0174.915] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0174.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.933] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.945] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.951] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.955] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.956] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.957] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.958] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.959] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.965] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.971] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.978] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.980] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0174.980] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0174.985] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0174.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0174.998] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.015] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.018] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.020] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.027] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.028] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.030] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.049] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.052] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.099] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0175.732] SetEvent (hEvent=0x2e8) returned 1
	[0175.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.116] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.182] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.232] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.341] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.345] SetEvent (hEvent=0x68) returned 1
	[0176.345] SetEvent (hEvent=0x30c) returned 1
	[0176.345] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.351] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.368] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.375] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.379] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0176.379] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0176.667] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0176.667] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.681] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.812] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.813] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.815] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.825] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0176.825] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0176.828] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0176.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.849] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.864] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.869] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.870] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.872] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.876] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.877] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.878] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.880] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.888] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.894] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.895] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.897] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.903] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.907] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.909] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.912] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.916] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.917] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.923] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.927] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.931] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.932] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0176.932] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0176.938] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0176.938] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.979] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0176.993] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.000] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.005] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.032] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.050] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.061] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.063] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.084] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.092] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.094] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0177.094] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0177.097] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0177.097] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.112] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.136] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.141] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.142] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.146] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0177.146] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0177.152] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0177.152] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.167] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.185] SetEvent (hEvent=0x30c) returned 1
	[0177.185] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.186] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.188] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.190] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.206] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.224] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.244] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.249] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.379] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.386] SetEvent (hEvent=0x318) returned 1
	[0177.386] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.396] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.409] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.448] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.478] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0177.479] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0177.544] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0177.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0177.558] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0177.558] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0178.068] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0178.068] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0178.087] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0178.099] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0178.099] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0178.118] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0178.118] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0178.132] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0178.148] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0178.149] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0178.149] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0178.274] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0178.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0178.280] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0178.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0178.298] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0178.298] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0178.301] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0178.301] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0178.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0178.334] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0178.343] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0178.343] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0179.755] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0179.755] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0179.765] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0179.809] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0179.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0179.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0180.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0180.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0180.544] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0180.588] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0180.588] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0180.670] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0180.670] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0180.752] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0180.808] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0180.892] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0180.936] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0181.199] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0181.255] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0181.299] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0181.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0181.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0181.416] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0181.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0181.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0181.540] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0181.541] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0181.621] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0181.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0181.654] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0181.698] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0181.698] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0182.032] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0182.033] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.077] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0182.077] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0182.463] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0182.463] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.551] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.594] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.632] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.675] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.711] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.839] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.902] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.942] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0182.942] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0182.960] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0182.960] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.963] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.985] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0182.992] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.001] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.003] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.005] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0183.005] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0183.012] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0183.012] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.026] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.039] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.045] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.071] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.086] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.090] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.098] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0183.098] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0183.102] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0183.102] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.122] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.138] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.156] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.165] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.191] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.238] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.247] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.331] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.346] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0183.346] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0183.350] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0183.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.504] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.548] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.628] SetEvent (hEvent=0x2f4) returned 1
	[0183.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.651] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0183.651] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0183.656] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0183.656] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.676] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.686] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.697] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.733] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.759] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.784] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0183.785] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0183.785] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0184.709] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0184.709] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0184.760] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0184.760] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0184.841] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0184.841] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0184.917] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0184.917] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0185.062] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0185.062] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.135] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.177] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.226] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.325] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.428] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.493] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.623] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.683] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.744] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.806] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.862] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.905] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.940] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0185.997] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.060] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.133] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.171] SetEvent (hEvent=0x2f4) returned 1
	[0186.171] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.209] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.243] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.272] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.274] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.276] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.277] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.279] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.283] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.286] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.287] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.289] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.290] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.292] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.297] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.307] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0186.307] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0186.312] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0186.312] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.361] SetEvent (hEvent=0x2e8) returned 1
	[0186.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.364] SetEvent (hEvent=0x2f4) returned 1
	[0186.364] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.366] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.369] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.370] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.371] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.377] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.387] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.389] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.390] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.392] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.394] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.395] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0186.395] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0186.397] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0186.397] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.417] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.429] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.431] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.437] SetEvent (hEvent=0x80) returned 1
	[0186.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.440] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.442] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.443] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.444] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.449] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.452] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.453] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.455] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.456] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.457] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.460] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.464] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.466] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.467] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.474] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.475] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.479] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.484] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.486] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.490] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.496] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.497] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.498] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.499] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.510] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.511] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.514] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.515] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.524] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.528] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.534] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0186.535] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0186.538] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0186.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.553] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.581] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0186.581] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0186.590] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0186.590] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.737] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0186.737] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0186.741] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0186.741] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.760] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.777] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.794] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.803] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.814] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.881] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.883] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.904] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.934] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.953] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0186.953] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0186.976] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0186.976] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0186.989] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.013] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.100] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.231] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.242] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.260] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.284] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.328] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.433] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.516] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.550] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.589] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.664] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0187.900] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.056] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.113] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.159] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.211] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.257] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.314] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.378] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.423] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.485] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.702] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.739] SetEvent (hEvent=0x68) returned 1
	[0188.739] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.777] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0188.777] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0188.828] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0188.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0188.882] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0188.882] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0189.468] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0189.468] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0189.522] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0189.570] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0189.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0189.664] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0189.664] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0189.745] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0189.745] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0189.810] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0189.859] SetEvent (hEvent=0x320) returned 1
	[0189.859] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0189.928] SetEvent (hEvent=0x30c) returned 1
	[0189.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.129] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.254] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.264] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0190.264] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0190.311] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0190.311] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.330] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.332] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.336] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.340] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.344] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.350] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.355] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.356] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.360] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.362] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.363] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.367] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.372] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.374] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.376] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.380] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.382] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.388] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.398] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.399] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.405] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.407] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.410] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.414] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.426] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.434] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0190.434] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0190.437] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0190.437] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.454] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.470] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.471] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.472] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.473] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.477] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.481] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.483] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.484] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0190.484] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0190.494] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0190.494] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.503] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.526] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.529] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.547] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.582] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.590] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0190.590] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0190.593] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0190.593] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.636] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.687] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0190.687] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0190.693] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0190.693] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.715] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.730] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.797] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.814] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0190.814] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0190.822] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0190.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.851] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.873] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.889] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.913] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.922] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.928] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.937] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.973] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.977] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.980] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0190.995] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.014] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.017] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.019] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.022] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0191.022] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0191.034] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0191.034] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.210] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0191.210] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0191.213] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0191.213] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.262] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.267] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.327] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.364] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0191.364] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0191.554] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0191.554] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.722] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0191.722] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0191.762] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0191.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.856] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0191.948] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0192.042] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0192.094] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0192.337] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0192.393] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0192.458] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0192.538] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0192.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0192.635] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0192.635] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0192.680] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0192.680] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0192.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0192.817] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0192.817] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0192.899] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0192.899] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0192.954] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0193.041] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0193.077] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0193.137] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0193.175] SetEvent (hEvent=0x2e8) returned 1
	[0193.175] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0193.215] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0193.316] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.024] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.074] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.110] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.179] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.221] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.285] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.373] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.461] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.513] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.556] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0194.556] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0194.671] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0194.671] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.712] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.732] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.751] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.762] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.764] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.767] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.770] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.771] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.772] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.773] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0194.773] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0194.795] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0194.795] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.811] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.822] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.823] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.824] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.825] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.828] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.829] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.832] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.833] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.834] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.835] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0194.835] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0194.844] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0194.844] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0194.860] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.170] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.245] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0195.245] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0195.288] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0195.288] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.318] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.329] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.354] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.361] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.391] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.394] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0195.394] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0195.570] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0195.571] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.591] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.618] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.619] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.620] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.621] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.622] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.624] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.625] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.626] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.628] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0195.629] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0195.629] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0195.974] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0195.974] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0196.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0196.106] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0196.106] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0196.264] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0196.264] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0196.326] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0196.365] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0196.405] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0196.405] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0196.458] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0196.459] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0196.595] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0196.643] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0196.679] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0196.749] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0196.789] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0196.824] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0196.825] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0199.480] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0199.480] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0199.515] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0199.515] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0199.596] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0199.596] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0199.629] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0199.629] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0206.222] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0206.222] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0206.230] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0206.230] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0209.601] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0209.601] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0209.615] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0209.631] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) returned 0x102
	[0209.632] timeEndPeriod (uPeriod=0x1) returned 0x0
	[0209.632] WaitForSingleObject (hHandle=0xa0, dwMilliseconds=0xea60) returned 0x0
	[0210.007] timeBeginPeriod (uPeriod=0x1) returned 0x0
	[0210.007] NtWaitForSingleObject (Object=0xffffffff, Alertable=0, Time=0x324ffee0) 

Thread:
	id = 3
	os_tid = 0xb2c

	[0047.467] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x325fff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x325fff38*=0x6c) returned 1
	[0047.468] VirtualQuery (in: lpAddress=0x325fff48, lpBuffer=0x325fff48, dwLength=0x1c | out: lpBuffer=0x325fff48*(BaseAddress=0x325ff000, AllocationBase=0x32500000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0047.468] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x12432000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x70
	[0047.469] CloseHandle (hObject=0x70) returned 1
	[0047.470] SetEvent (hEvent=0x68) returned 1
	[0047.470] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x70
	[0047.470] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0047.518] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0049.788] SetEvent (hEvent=0x80) returned 1
	[0049.788] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0082.793] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffadc, ulCount=0x10, ulNumEntriesRemoved=0x325ffac0, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffadc, ulNumEntriesRemoved=0x325ffac0) returned 0
	[0082.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x124ea000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118
	[0082.798] CloseHandle (hObject=0x118) returned 1
	[0082.798] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffabc, ulCount=0x10, ulNumEntriesRemoved=0x325ffaa0, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffabc, ulNumEntriesRemoved=0x325ffaa0) returned 0
	[0082.798] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffabc, ulCount=0x10, ulNumEntriesRemoved=0x325ffaa0, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x325ffabc, ulNumEntriesRemoved=0x325ffaa0) returned 1
	[0085.691] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x325ffa9c, fWait=0, lpdwFlags=0x325ffaac | out: lpcbTransfer=0x325ffa9c, lpdwFlags=0x325ffaac) returned 1
	[0085.691] SetEvent (hEvent=0xa0) returned 1
	[0085.691] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x1715, buf=0x124fe194*)), lpNumberOfBytesRecvd=0x124e2034*=0x13d9, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0
	[0085.694] LoadLibraryW (lpLibFileName="crypt32.dll") returned 0x77550000
	[0086.850] SetEvent (hEvent=0xa0) returned 1
	[0086.850] GetProcAddress (hModule=0x77550000, lpProcName="CertCreateCertificateContext") returned 0x77560b37
	[0086.850] CertCreateCertificateContext (dwCertEncodingType=0x10001, pbCertEncoded=0x1250c00a, cbCertEncoded=0x6c2) returned 0xab40f0
	[0086.867] GetProcAddress (hModule=0x77550000, lpProcName="CertOpenStore") returned 0x7755df23
	[0086.867] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x0, hCryptProv=0x0, dwFlags=0x4, pvPara=0x0) returned 0xab9d00
	[0086.867] GetProcAddress (hModule=0x77550000, lpProcName="CertAddCertificateContextToStore") returned 0x7757efb5
	[0086.870] CertAddCRLContextToStore (in: hCertStore=0xab9d00, pCrlContext=0xab40f0, dwAddDisposition=0x4, ppStoreContext=0x12459a08 | out: ppStoreContext=0x12459a08) returned 1
	[0086.880] CertCreateCertificateContext (dwCertEncodingType=0x10001, pbCertEncoded=0x1250c6cf, cbCertEncoded=0x4d4) returned 0xab4190
	[0086.883] CertAddCRLContextToStore (in: hCertStore=0xab9d00, pCrlContext=0xab4190, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0086.884] GetProcAddress (hModule=0x77550000, lpProcName="CertFreeCertificateContext") returned 0x7755f5b5
	[0086.884] CertFreeCRLContext (pCrlContext=0xab4190) returned 1
	[0086.884] CertCreateCertificateContext (dwCertEncodingType=0x10001, pbCertEncoded=0x1250cba6, cbCertEncoded=0x481) returned 0xab4190
	[0086.884] CertAddCRLContextToStore (in: hCertStore=0xab9d00, pCrlContext=0xab4190, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0086.884] CertFreeCRLContext (pCrlContext=0xab4190) returned 1
	[0086.884] CertCreateCertificateContext (dwCertEncodingType=0x10001, pbCertEncoded=0x1250d02a, cbCertEncoded=0x404) returned 0xab4190
	[0086.884] CertAddCRLContextToStore (in: hCertStore=0xab9d00, pCrlContext=0xab4190, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1
	[0086.885] CertFreeCRLContext (pCrlContext=0xab4190) returned 1
	[0086.885] GetProcAddress (hModule=0x77550000, lpProcName="CertCloseStore") returned 0x7755dd10
	[0086.885] CertCloseStore (hCertStore=0xab9d00, dwFlags=0x0) returned 1
	[0086.885] CertFreeCRLContext (pCrlContext=0xab40f0) returned 1
	[0086.885] GetProcAddress (hModule=0x77550000, lpProcName="CertGetCertificateChain") returned 0x77566ccf
	[0086.885] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0xab4140, pTime=0x12459a54, hAdditionalStore=0xab9d00, pChainPara=0x12459ab4, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x12459a60 | out: ppChainContext=0x12459a60) returned 1
	[0106.038] SetEvent (hEvent=0xa0) returned 1
	[0106.039] GetProcAddress (hModule=0x77550000, lpProcName="CertVerifyCertificateChainPolicy") returned 0x7756cae2
	[0106.039] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x33651728, pPolicyPara=0x124599c0, pPolicyStatus=0x12459a08 | out: pPolicyStatus=0x12459a08) returned 1
	[0106.048] GetProcAddress (hModule=0x77550000, lpProcName="CertFreeCertificateChain") returned 0x7756e22b
	[0106.048] CertFreeCertificateChain (pChainContext=0x33651728) 
	[0106.048] CertFreeCRLContext (pCrlContext=0xab4140) returned 1
	[0106.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240c640 | out: pbBuffer=0x1240c640) returned 1
	[0106.054] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0x5d, buf=0x124d61e0*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0x5d, lpOverlapped=0x124e2088) returned 0
	[0106.056] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x13d9, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0106.057] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0106.106] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0106.139] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffad4, ulCount=0x10, ulNumEntriesRemoved=0x325ffab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffad4, ulNumEntriesRemoved=0x325ffab8) returned 0
	[0106.139] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffad4, ulCount=0x10, ulNumEntriesRemoved=0x325ffab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x325ffad4, ulNumEntriesRemoved=0x325ffab8) returned 1
	[0106.166] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x325ffab4, fWait=0, lpdwFlags=0x325ffac4 | out: lpcbTransfer=0x325ffab4, lpdwFlags=0x325ffac4) returned 1
	[0106.166] SetEvent (hEvent=0x68) returned 1
	[0106.166] SetEvent (hEvent=0xa0) returned 1
	[0106.166] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x1b1, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0106.166] GetEnvironmentVariableW (in: lpName="WINDIR", lpBuffer=0x1248ac30, nSize=0x64 | out: lpBuffer="C:\\Windows") returned 0xa
	[0106.167] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileAttributesExW") returned 0x76d44574
	[0106.167] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Temp\\satan\\" (normalized: "c:\\windows\\temp\\satan"), fInfoLevelId=0x0, lpFileInformation=0x12465b88 | out: lpFileInformation=0x12465b88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.167] GetProcAddress (hModule=0x76d30000, lpProcName="CreateFileW") returned 0x76d43f5c
	[0106.168] CreateFileW (lpFileName="C:\\Windows\\Temp\\satan\\" (normalized: "c:\\windows\\temp\\satan"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.168] GetProcAddress (hModule=0x76d30000, lpProcName="CreateDirectoryW") returned 0x76d44259
	[0106.168] CreateDirectoryW (lpPathName="C:\\Windows\\Temp\\satan\\" (normalized: "c:\\windows\\temp\\satan"), lpSecurityAttributes=0x0) returned 1
	[0106.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.185] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.186] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.187] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.192] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.193] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.195] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.197] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.198] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.199] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.201] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.202] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.204] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.205] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.208] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.210] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.212] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.215] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.221] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.222] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.224] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.229] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.233] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.234] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.235] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.239] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.240] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.241] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.242] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.244] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.245] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.246] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.247] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.249] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.251] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.256] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.257] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.258] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.259] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.263] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.264] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.266] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.270] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.273] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.276] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.277] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.280] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.281] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.284] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.294] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x1240ca80 | out: pbBuffer=0x1240ca80) returned 1
	[0106.341] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.343] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.344] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.352] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.354] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.360] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.366] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.368] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.370] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.372] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.372] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x40, pbBuffer=0x125e4440 | out: pbBuffer=0x125e4440) returned 1
	[0106.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251f498 | out: pbBuffer=0x1251f498) returned 1
	[0106.413] CreateFileW (lpFileName="C:\\Windows\\Temp\\satan\\satan0" (normalized: "c:\\windows\\temp\\satan\\satan0"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4
	[0106.415] GetConsoleMode (in: hConsoleHandle=0x2c4, lpMode=0x12465d98 | out: lpMode=0x12465d98) returned 0
	[0106.416] GetProcAddress (hModule=0x76d30000, lpProcName="WriteFile") returned 0x76d41282
	[0106.416] WriteFile (in: hFile=0x2c4, lpBuffer=0x124f8480*, nNumberOfBytesToWrite=0xb8, lpNumberOfBytesWritten=0x12465d98, lpOverlapped=0x0 | out: lpBuffer=0x124f8480*, lpNumberOfBytesWritten=0x12465d98*=0xb8, lpOverlapped=0x0) returned 1
	[0106.418] CloseHandle (hObject=0x2c4) returned 1
	[0106.425] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f880 | out: pbBuffer=0x1240f880) returned 1
	[0106.426] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x18, pbBuffer=0x1240f8c0 | out: pbBuffer=0x1240f8c0) returned 1
	[0106.426] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124be501 | out: pbBuffer=0x124be501) returned 1
	[0106.427] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251f538 | out: pbBuffer=0x1251f538) returned 1
	[0106.428] CreateFileW (lpFileName="C:\\Windows\\Temp\\satan\\satan1" (normalized: "c:\\windows\\temp\\satan\\satan1"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4
	[0106.429] GetConsoleMode (in: hConsoleHandle=0x2c4, lpMode=0x12465d98 | out: lpMode=0x12465d98) returned 0
	[0106.429] WriteFile (in: hFile=0x2c4, lpBuffer=0x12636000*, nNumberOfBytesToWrite=0x4b1, lpNumberOfBytesWritten=0x12465d98, lpOverlapped=0x0 | out: lpBuffer=0x12636000*, lpNumberOfBytesWritten=0x12465d98*=0x4b1, lpOverlapped=0x0) returned 1
	[0106.432] CloseHandle (hObject=0x2c4) returned 1
	[0106.433] CreateFileW (lpFileName="C:\\Windows\\Temp\\satan\\satan0" (normalized: "c:\\windows\\temp\\satan\\satan0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4
	[0106.433] GetConsoleMode (in: hConsoleHandle=0x2c4, lpMode=0x12465d98 | out: lpMode=0x12465d98) returned 0
	[0106.433] GetProcAddress (hModule=0x76d30000, lpProcName="ReadFile") returned 0x76d43ed3
	[0106.433] ReadFile (in: hFile=0x2c4, lpBuffer=0x12634200, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x12465d38, lpOverlapped=0x0 | out: lpBuffer=0x12634200*, lpNumberOfBytesRead=0x12465d38*=0xb8, lpOverlapped=0x0) returned 1
	[0106.434] ReadFile (in: hFile=0x2c4, lpBuffer=0x126380b8, nNumberOfBytesToRead=0x548, lpNumberOfBytesRead=0x12465d38, lpOverlapped=0x0 | out: lpBuffer=0x126380b8*, lpNumberOfBytesRead=0x12465d38*=0x0, lpOverlapped=0x0) returned 1
	[0106.434] CloseHandle (hObject=0x2c4) returned 1
	[0106.434] CreateFileW (lpFileName="C:\\Windows\\Temp\\satan\\satan1" (normalized: "c:\\windows\\temp\\satan\\satan1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2c4
	[0106.434] GetConsoleMode (in: hConsoleHandle=0x2c4, lpMode=0x12465d98 | out: lpMode=0x12465d98) returned 0
	[0106.434] ReadFile (in: hFile=0x2c4, lpBuffer=0x12634400, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x12465d38, lpOverlapped=0x0 | out: lpBuffer=0x12634400*, lpNumberOfBytesRead=0x12465d38*=0x200, lpOverlapped=0x0) returned 1
	[0106.434] ReadFile (in: hFile=0x2c4, lpBuffer=0x12638800, nNumberOfBytesToRead=0x400, lpNumberOfBytesRead=0x12465d38, lpOverlapped=0x0 | out: lpBuffer=0x12638800*, lpNumberOfBytesRead=0x12465d38*=0x2b1, lpOverlapped=0x0) returned 1
	[0106.434] ReadFile (in: hFile=0x2c4, lpBuffer=0x1263a4b1, nNumberOfBytesToRead=0x94f, lpNumberOfBytesRead=0x12465d38, lpOverlapped=0x0 | out: lpBuffer=0x1263a4b1*, lpNumberOfBytesRead=0x12465d38*=0x0, lpOverlapped=0x0) returned 1
	[0106.435] CloseHandle (hObject=0x2c4) returned 1
	[0106.436] SetEvent (hEvent=0x11c) returned 1
	[0106.436] GetFileAttributesExW (in: lpFileName="share.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\share.txt"), fInfoLevelId=0x0, lpFileInformation=0x12465b88 | out: lpFileInformation=0x12465b88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.436] CreateFileW (lpFileName="share.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\share.txt"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.445] CreateFileW (lpFileName="A:\\" (normalized: "a:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.446] GetProcAddress (hModule=0x76d30000, lpProcName="FindFirstFileW") returned 0x76d44435
	[0106.446] FindFirstFileW (in: lpFileName="A:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.453] CreateFileW (lpFileName="B:\\" (normalized: "b:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.456] FindFirstFileW (in: lpFileName="B:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.457] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.457] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x336a6580
	[0106.464] CreateFileW (lpFileName="D:\\" (normalized: "d:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.464] FindFirstFileW (in: lpFileName="D:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.470] CreateFileW (lpFileName="E:\\" (normalized: "e:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.471] FindFirstFileW (in: lpFileName="E:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.479] CreateFileW (lpFileName="F:\\" (normalized: "f:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.479] FindFirstFileW (in: lpFileName="F:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.495] CreateFileW (lpFileName="G:\\" (normalized: "g:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.501] FindFirstFileW (in: lpFileName="G:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.511] CreateFileW (lpFileName="H:\\" (normalized: "h:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.511] FindFirstFileW (in: lpFileName="H:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.526] CreateFileW (lpFileName="I:\\" (normalized: "i:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.526] FindFirstFileW (in: lpFileName="I:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.532] CreateFileW (lpFileName="J:\\" (normalized: "j:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.540] FindFirstFileW (in: lpFileName="J:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.546] CreateFileW (lpFileName="K:\\" (normalized: "k:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.546] FindFirstFileW (in: lpFileName="K:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.562] CreateFileW (lpFileName="L:\\" (normalized: "l:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.562] FindFirstFileW (in: lpFileName="L:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.569] CreateFileW (lpFileName="M:\\" (normalized: "m:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.569] FindFirstFileW (in: lpFileName="M:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.580] CreateFileW (lpFileName="N:\\" (normalized: "n:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.581] FindFirstFileW (in: lpFileName="N:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.599] CreateFileW (lpFileName="O:\\" (normalized: "o:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.600] FindFirstFileW (in: lpFileName="O:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.622] CreateFileW (lpFileName="P:\\" (normalized: "p:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.624] FindFirstFileW (in: lpFileName="P:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.632] CreateFileW (lpFileName="Q:\\" (normalized: "q:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.632] FindFirstFileW (in: lpFileName="Q:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.639] CreateFileW (lpFileName="R:\\" (normalized: "r:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.640] FindFirstFileW (in: lpFileName="R:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.646] CreateFileW (lpFileName="S:\\" (normalized: "s:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.647] FindFirstFileW (in: lpFileName="S:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.653] CreateFileW (lpFileName="T:\\" (normalized: "t:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.654] FindFirstFileW (in: lpFileName="T:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.662] CreateFileW (lpFileName="U:\\" (normalized: "u:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.663] FindFirstFileW (in: lpFileName="U:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.669] CreateFileW (lpFileName="V:\\" (normalized: "v:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.669] FindFirstFileW (in: lpFileName="V:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.674] CreateFileW (lpFileName="W:\\" (normalized: "w:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.674] FindFirstFileW (in: lpFileName="W:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.679] CreateFileW (lpFileName="X:\\" (normalized: "x:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.679] FindFirstFileW (in: lpFileName="X:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.685] CreateFileW (lpFileName="Y:\\" (normalized: "y:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.685] FindFirstFileW (in: lpFileName="Y:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.690] CreateFileW (lpFileName="Z:\\" (normalized: "z:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.691] FindFirstFileW (in: lpFileName="Z:\\*", lpFindFileData=0x12465aa4 | out: lpFindFileData=0x12465aa4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.691] GetFileAttributesExW (in: lpFileName="C\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x12465b88 | out: lpFileInformation=0x12465b88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.691] CreateFileW (lpFileName="C\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.691] SetEvent (hEvent=0x2e4) returned 1
	[0106.692] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x124dfce8 | out: lpFileInformation=0x124dfce8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x3c0142d0, ftCreationTime.dwHighDateTime=0x1ca042c, ftLastAccessTime.dwLowDateTime=0xe0adbcc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe0adbcc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0106.692] CreateFileW (lpFileName="C:\\" (normalized: "c:"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.692] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x124f5bc0 | out: lpFindFileData=0x124f5bc0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x336a6500
	[0106.693] GetProcAddress (hModule=0x76d30000, lpProcName="FindNextFileW") returned 0x76d454ee
	[0106.693] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0106.693] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0106.693] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0106.693] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1
	[0106.693] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0106.693] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0106.693] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1
	[0106.693] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0106.693] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0106.693] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe1b752c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe1b752c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0106.694] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0106.694] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0106.694] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0106.694] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1
	[0106.694] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0106.694] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0106.694] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5c04 | out: lpFindFileData=0x124f5c04*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.694] GetProcAddress (hModule=0x76d30000, lpProcName="FindClose") returned 0x76d44442
	[0106.694] FindClose (in: hFindFile=0x336a6500 | out: hFindFile=0x336a6500) returned 1
	[0106.694] GetFileAttributesExW (in: lpFileName="C:\\\\# M0rphine Help #.hta" (normalized: "c:\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f5888 | out: lpFileInformation=0x124f5888*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.695] CreateFileW (lpFileName="C:\\\\# M0rphine Help #.hta" (normalized: "c:\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.695] CreateFileW (lpFileName="C:\\\\# M0rphine Help #.hta" (normalized: "c:\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f0
	[0106.710] GetConsoleMode (in: hConsoleHandle=0x2f0, lpMode=0x124f5a98 | out: lpMode=0x124f5a98) returned 0
	[0106.710] WriteFile (in: hFile=0x2f0, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f5a98, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f5a98*=0x1180, lpOverlapped=0x0) returned 1
	[0106.712] CloseHandle (hObject=0x2f0) returned 1
	[0106.713] GetFileAttributesExW (in: lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), fInfoLevelId=0x0, lpFileInformation=0x124f5c84 | out: lpFileInformation=0x124f5c84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.713] CreateFileW (lpFileName="C:\\$Recycle.Bin" (normalized: "c:\\$recycle.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.713] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x124f5b5c | out: lpFindFileData=0x124f5b5c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6500
	[0106.714] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.714] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x2dfdd420, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb63e4b00, ftLastAccessTime.dwHighDateTime=0x1d337f4, ftLastWriteTime.dwLowDateTime=0xb63e4b00, ftLastWriteTime.dwHighDateTime=0x1d337f4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0106.714] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.714] FindClose (in: hFindFile=0x336a6500 | out: hFindFile=0x336a6500) returned 1
	[0106.714] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0x124f5c84 | out: lpFileInformation=0x124f5c84*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0106.722] SetEvent (hEvent=0x2f4) returned 1
	[0106.722] GetFileAttributesExW (in: lpFileName="C:\\Boot" (normalized: "c:\\boot"), fInfoLevelId=0x0, lpFileInformation=0x124f5c84 | out: lpFileInformation=0x124f5c84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0106.722] CreateFileW (lpFileName="C:\\Boot" (normalized: "c:\\boot"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.722] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x124f5b5c | out: lpFindFileData=0x124f5b5c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6500
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x90cd45e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x90cd45e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x9098e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1
	[0106.723] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1
	[0106.724] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1
	[0106.724] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1
	[0106.724] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1
	[0106.724] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1
	[0106.724] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1
	[0106.724] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1
	[0106.724] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1
	[0106.724] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1
	[0106.724] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1
	[0106.724] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1
	[0106.726] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1
	[0106.726] FindNextFileW (in: hFindFile=0x336a6500, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.726] FindClose (in: hFindFile=0x336a6500 | out: hFindFile=0x336a6500) returned 1
	[0106.726] GetFileAttributesExW (in: lpFileName="C:\\Boot\\# M0rphine Help #.hta" (normalized: "c:\\boot\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f5824 | out: lpFileInformation=0x124f5824*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.726] CreateFileW (lpFileName="C:\\Boot\\# M0rphine Help #.hta" (normalized: "c:\\boot\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.727] CreateFileW (lpFileName="C:\\Boot\\# M0rphine Help #.hta" (normalized: "c:\\boot\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8
	[0106.727] GetConsoleMode (in: hConsoleHandle=0x2f8, lpMode=0x124f5a34 | out: lpMode=0x124f5a34) returned 0
	[0106.727] WriteFile (in: hFile=0x2f8, lpBuffer=0x1265e000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f5a34, lpOverlapped=0x0 | out: lpBuffer=0x1265e000*, lpNumberOfBytesWritten=0x124f5a34*=0x1180, lpOverlapped=0x0) returned 1
	[0106.730] CloseHandle (hObject=0x2f8) returned 1
	[0106.730] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x90cd45e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x90cd45e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x6000)) returned 1
	[0106.730] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x9098e7a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5400)) returned 1
	[0106.731] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.731] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.731] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8
	[0106.732] GetConsoleMode (in: hConsoleHandle=0x2f8, lpMode=0x12650d0c | out: lpMode=0x12650d0c) returned 0
	[0106.732] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0106.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1244e2e8 | out: pbBuffer=0x1244e2e8) returned 1
	[0106.733] VirtualAlloc (lpAddress=0x0, dwSize=0xafc7c, flAllocationType=0x3000, flProtect=0x4) returned 0x33b10000
	[0106.734] ReadFile (in: hFile=0x2f8, lpBuffer=0x12664000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12664000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0106.735] CloseHandle (hObject=0x2f8) returned 1
	[0106.735] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2f8
	[0106.735] GetConsoleMode (in: hConsoleHandle=0x2f8, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0106.735] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.735] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c560 | out: pbBuffer=0x1244c560) returned 1
	[0106.735] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1244e2f8 | out: pbBuffer=0x1244e2f8) returned 1
	[0106.736] ReadFile (in: hFile=0x2f8, lpBuffer=0x126a4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126a4000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0106.777] CloseHandle (hObject=0x2f8) returned 1
	[0106.777] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0106.811] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.819] CreateFileW (lpFileName="C:\\Boot\\Fonts" (normalized: "c:\\boot\\fonts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.819] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.820] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.820] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1
	[0106.820] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1
	[0106.820] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1
	[0106.820] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1
	[0106.820] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1
	[0106.820] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.820] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.821] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\# M0rphine Help #.hta" (normalized: "c:\\boot\\fonts\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.821] CreateFileW (lpFileName="C:\\Boot\\Fonts\\# M0rphine Help #.hta" (normalized: "c:\\boot\\fonts\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.821] CreateFileW (lpFileName="C:\\Boot\\Fonts\\# M0rphine Help #.hta" (normalized: "c:\\boot\\fonts\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0106.838] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.838] WriteFile (in: hFile=0x2fc, lpBuffer=0x1265f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x1265f300*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.843] CloseHandle (hObject=0x2fc) returned 1
	[0106.843] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00)) returned 1
	[0106.844] SetEvent (hEvent=0x2e8) returned 1
	[0106.844] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4)) returned 1
	[0106.846] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4)) returned 1
	[0106.846] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20)) returned 1
	[0106.847] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c)) returned 1
	[0106.848] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.848] CreateFileW (lpFileName="C:\\Boot\\cs-CZ" (normalized: "c:\\boot\\cs-cz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.849] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.849] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.849] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.849] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.849] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.849] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\# M0rphine Help #.hta" (normalized: "c:\\boot\\cs-cz\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.850] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\# M0rphine Help #.hta" (normalized: "c:\\boot\\cs-cz\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.850] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\# M0rphine Help #.hta" (normalized: "c:\\boot\\cs-cz\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0106.850] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.850] WriteFile (in: hFile=0x2fc, lpBuffer=0x12660600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x12660600*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.853] CloseHandle (hObject=0x2fc) returned 1
	[0106.853] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50)) returned 1
	[0106.853] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.853] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf\\*", lpFindFileData=0x124f7a44 | out: lpFindFileData=0x124f7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.854] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.854] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui\\*", lpFindFileData=0x124f7a44 | out: lpFindFileData=0x124f7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.854] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.854] CreateFileW (lpFileName="C:\\Boot\\da-DK" (normalized: "c:\\boot\\da-dk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.854] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.855] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.855] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.855] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.855] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.855] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\# M0rphine Help #.hta" (normalized: "c:\\boot\\da-dk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.855] CreateFileW (lpFileName="C:\\Boot\\da-DK\\# M0rphine Help #.hta" (normalized: "c:\\boot\\da-dk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.856] CreateFileW (lpFileName="C:\\Boot\\da-DK\\# M0rphine Help #.hta" (normalized: "c:\\boot\\da-dk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0106.856] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.856] WriteFile (in: hFile=0x2fc, lpBuffer=0x12661900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x12661900*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.858] CloseHandle (hObject=0x2fc) returned 1
	[0106.858] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1
	[0106.868] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.869] CreateFileW (lpFileName="C:\\Boot\\de-DE" (normalized: "c:\\boot\\de-de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.869] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.869] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.869] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.869] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.869] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.870] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\# M0rphine Help #.hta" (normalized: "c:\\boot\\de-de\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.870] CreateFileW (lpFileName="C:\\Boot\\de-DE\\# M0rphine Help #.hta" (normalized: "c:\\boot\\de-de\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.870] CreateFileW (lpFileName="C:\\Boot\\de-DE\\# M0rphine Help #.hta" (normalized: "c:\\boot\\de-de\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0106.870] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.870] WriteFile (in: hFile=0x2fc, lpBuffer=0x12662c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x12662c00*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.873] CloseHandle (hObject=0x2fc) returned 1
	[0106.873] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640)) returned 1
	[0106.873] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.873] CreateFileW (lpFileName="C:\\Boot\\el-GR" (normalized: "c:\\boot\\el-gr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.874] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.874] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.874] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.874] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.874] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.874] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\el-gr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.874] CreateFileW (lpFileName="C:\\Boot\\el-GR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\el-gr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.874] CreateFileW (lpFileName="C:\\Boot\\el-GR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\el-gr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0106.875] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.875] WriteFile (in: hFile=0x2fc, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.877] CloseHandle (hObject=0x2fc) returned 1
	[0106.877] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250)) returned 1
	[0106.889] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.890] CreateFileW (lpFileName="C:\\Boot\\en-US" (normalized: "c:\\boot\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.890] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.890] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.890] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.890] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1
	[0106.890] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.890] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.891] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\boot\\en-us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.891] CreateFileW (lpFileName="C:\\Boot\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\boot\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.891] CreateFileW (lpFileName="C:\\Boot\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\boot\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320
	[0106.898] GetConsoleMode (in: hConsoleHandle=0x320, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.898] WriteFile (in: hFile=0x320, lpBuffer=0x1278b300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x1278b300*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.900] CloseHandle (hObject=0x320) returned 1
	[0106.900] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40)) returned 1
	[0106.901] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50)) returned 1
	[0106.901] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.913] CreateFileW (lpFileName="C:\\Boot\\es-ES" (normalized: "c:\\boot\\es-es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.913] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.913] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.913] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.913] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.913] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.913] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\# M0rphine Help #.hta" (normalized: "c:\\boot\\es-es\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.914] CreateFileW (lpFileName="C:\\Boot\\es-ES\\# M0rphine Help #.hta" (normalized: "c:\\boot\\es-es\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.914] CreateFileW (lpFileName="C:\\Boot\\es-ES\\# M0rphine Help #.hta" (normalized: "c:\\boot\\es-es\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320
	[0106.915] GetConsoleMode (in: hConsoleHandle=0x320, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.915] WriteFile (in: hFile=0x320, lpBuffer=0x1278c600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x1278c600*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.917] CloseHandle (hObject=0x320) returned 1
	[0106.917] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0106.917] SetEvent (hEvent=0x11c) returned 1
	[0106.918] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.918] CreateFileW (lpFileName="C:\\Boot\\fi-FI" (normalized: "c:\\boot\\fi-fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.918] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.918] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.918] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.919] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.919] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.919] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\# M0rphine Help #.hta" (normalized: "c:\\boot\\fi-fi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.919] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\# M0rphine Help #.hta" (normalized: "c:\\boot\\fi-fi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.919] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\# M0rphine Help #.hta" (normalized: "c:\\boot\\fi-fi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320
	[0106.920] GetConsoleMode (in: hConsoleHandle=0x320, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.920] WriteFile (in: hFile=0x320, lpBuffer=0x1278d900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x1278d900*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.921] CloseHandle (hObject=0x320) returned 1
	[0106.921] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40)) returned 1
	[0106.922] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.926] CreateFileW (lpFileName="C:\\Boot\\fr-FR" (normalized: "c:\\boot\\fr-fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.926] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.926] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.926] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.926] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.926] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.927] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\fr-fr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.927] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\fr-fr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.927] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\fr-fr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320
	[0106.927] GetConsoleMode (in: hConsoleHandle=0x320, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.928] WriteFile (in: hFile=0x320, lpBuffer=0x1278ec00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x1278ec00*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.930] CloseHandle (hObject=0x320) returned 1
	[0106.931] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40)) returned 1
	[0106.931] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.931] CreateFileW (lpFileName="C:\\Boot\\hu-HU" (normalized: "c:\\boot\\hu-hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.931] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.931] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.932] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.932] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.932] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.932] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\# M0rphine Help #.hta" (normalized: "c:\\boot\\hu-hu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.932] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\# M0rphine Help #.hta" (normalized: "c:\\boot\\hu-hu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.932] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\# M0rphine Help #.hta" (normalized: "c:\\boot\\hu-hu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320
	[0106.933] GetConsoleMode (in: hConsoleHandle=0x320, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.933] WriteFile (in: hFile=0x320, lpBuffer=0x127a4000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127a4000*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.934] CloseHandle (hObject=0x320) returned 1
	[0106.934] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240)) returned 1
	[0106.935] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.947] CreateFileW (lpFileName="C:\\Boot\\it-IT" (normalized: "c:\\boot\\it-it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.947] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.948] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.948] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.948] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.948] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.948] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\# M0rphine Help #.hta" (normalized: "c:\\boot\\it-it\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.948] CreateFileW (lpFileName="C:\\Boot\\it-IT\\# M0rphine Help #.hta" (normalized: "c:\\boot\\it-it\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.949] CreateFileW (lpFileName="C:\\Boot\\it-IT\\# M0rphine Help #.hta" (normalized: "c:\\boot\\it-it\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320
	[0106.949] GetConsoleMode (in: hConsoleHandle=0x320, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.949] WriteFile (in: hFile=0x320, lpBuffer=0x127a5300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127a5300*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.951] CloseHandle (hObject=0x320) returned 1
	[0106.952] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0106.952] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.952] CreateFileW (lpFileName="C:\\Boot\\ja-JP" (normalized: "c:\\boot\\ja-jp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.952] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.953] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.953] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.953] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.953] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.953] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\# M0rphine Help #.hta" (normalized: "c:\\boot\\ja-jp\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.953] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\# M0rphine Help #.hta" (normalized: "c:\\boot\\ja-jp\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.954] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\# M0rphine Help #.hta" (normalized: "c:\\boot\\ja-jp\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x320
	[0106.954] GetConsoleMode (in: hConsoleHandle=0x320, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0106.954] WriteFile (in: hFile=0x320, lpBuffer=0x127a6600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127a6600*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0106.956] CloseHandle (hObject=0x320) returned 1
	[0106.957] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40)) returned 1
	[0106.957] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0106.963] CreateFileW (lpFileName="C:\\Boot\\ko-KR" (normalized: "c:\\boot\\ko-kr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.963] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0106.963] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0106.963] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0106.963] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0106.963] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0106.964] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\ko-kr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0106.964] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\ko-kr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0106.964] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\ko-kr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334
	[0107.510] GetConsoleMode (in: hConsoleHandle=0x334, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.510] WriteFile (in: hFile=0x334, lpBuffer=0x127a7900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127a7900*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.511] CloseHandle (hObject=0x334) returned 1
	[0107.512] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650)) returned 1
	[0107.512] SetEvent (hEvent=0x2f4) returned 1
	[0107.512] GetFileAttributesExW (in: lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980)) returned 1
	[0107.513] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.513] CreateFileW (lpFileName="C:\\Boot\\nb-NO" (normalized: "c:\\boot\\nb-no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.513] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.513] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.513] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0107.513] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.513] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.513] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\# M0rphine Help #.hta" (normalized: "c:\\boot\\nb-no\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.514] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\# M0rphine Help #.hta" (normalized: "c:\\boot\\nb-no\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.514] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\# M0rphine Help #.hta" (normalized: "c:\\boot\\nb-no\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334
	[0107.514] GetConsoleMode (in: hConsoleHandle=0x334, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.514] WriteFile (in: hFile=0x334, lpBuffer=0x127a8c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127a8c00*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.516] CloseHandle (hObject=0x334) returned 1
	[0107.516] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850)) returned 1
	[0107.519] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.519] CreateFileW (lpFileName="C:\\Boot\\nl-NL" (normalized: "c:\\boot\\nl-nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.519] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.520] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.520] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0107.520] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.520] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.520] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\# M0rphine Help #.hta" (normalized: "c:\\boot\\nl-nl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.520] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\# M0rphine Help #.hta" (normalized: "c:\\boot\\nl-nl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.520] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\# M0rphine Help #.hta" (normalized: "c:\\boot\\nl-nl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330
	[0107.521] GetConsoleMode (in: hConsoleHandle=0x330, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.521] WriteFile (in: hFile=0x330, lpBuffer=0x127b2000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127b2000*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.522] CloseHandle (hObject=0x330) returned 1
	[0107.522] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0107.522] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.544] CreateFileW (lpFileName="C:\\Boot\\pl-PL" (normalized: "c:\\boot\\pl-pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.545] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.545] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.545] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0107.545] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.545] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.545] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\# M0rphine Help #.hta" (normalized: "c:\\boot\\pl-pl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.545] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\# M0rphine Help #.hta" (normalized: "c:\\boot\\pl-pl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.545] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\# M0rphine Help #.hta" (normalized: "c:\\boot\\pl-pl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330
	[0107.546] GetConsoleMode (in: hConsoleHandle=0x330, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.546] WriteFile (in: hFile=0x330, lpBuffer=0x127b3300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127b3300*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.547] CloseHandle (hObject=0x330) returned 1
	[0107.547] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250)) returned 1
	[0107.555] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.555] CreateFileW (lpFileName="C:\\Boot\\pt-BR" (normalized: "c:\\boot\\pt-br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.555] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.555] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.555] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0107.555] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.556] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.556] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\pt-br\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.556] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\pt-br\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.556] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\pt-br\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330
	[0107.556] GetConsoleMode (in: hConsoleHandle=0x330, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.556] WriteFile (in: hFile=0x330, lpBuffer=0x127b4600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127b4600*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.558] CloseHandle (hObject=0x330) returned 1
	[0107.559] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040)) returned 1
	[0107.559] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.560] CreateFileW (lpFileName="C:\\Boot\\pt-PT" (normalized: "c:\\boot\\pt-pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.560] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.560] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.560] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0107.560] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.560] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.561] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\# M0rphine Help #.hta" (normalized: "c:\\boot\\pt-pt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.561] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\# M0rphine Help #.hta" (normalized: "c:\\boot\\pt-pt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.561] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\# M0rphine Help #.hta" (normalized: "c:\\boot\\pt-pt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330
	[0107.561] GetConsoleMode (in: hConsoleHandle=0x330, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.561] WriteFile (in: hFile=0x330, lpBuffer=0x127b5900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127b5900*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.563] CloseHandle (hObject=0x330) returned 1
	[0107.563] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40)) returned 1
	[0107.565] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.566] CreateFileW (lpFileName="C:\\Boot\\ru-RU" (normalized: "c:\\boot\\ru-ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.566] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.566] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.566] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0107.566] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.566] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.566] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\# M0rphine Help #.hta" (normalized: "c:\\boot\\ru-ru\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.566] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\# M0rphine Help #.hta" (normalized: "c:\\boot\\ru-ru\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.566] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\# M0rphine Help #.hta" (normalized: "c:\\boot\\ru-ru\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330
	[0107.567] GetConsoleMode (in: hConsoleHandle=0x330, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.567] WriteFile (in: hFile=0x330, lpBuffer=0x127b6c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127b6c00*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.568] CloseHandle (hObject=0x330) returned 1
	[0107.568] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050)) returned 1
	[0107.568] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.568] CreateFileW (lpFileName="C:\\Boot\\sv-SE" (normalized: "c:\\boot\\sv-se"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.568] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.569] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.569] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0107.569] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.569] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.569] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\# M0rphine Help #.hta" (normalized: "c:\\boot\\sv-se\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.569] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\# M0rphine Help #.hta" (normalized: "c:\\boot\\sv-se\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.569] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\# M0rphine Help #.hta" (normalized: "c:\\boot\\sv-se\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330
	[0107.570] GetConsoleMode (in: hConsoleHandle=0x330, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.570] WriteFile (in: hFile=0x330, lpBuffer=0x127ba000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127ba000*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.571] CloseHandle (hObject=0x330) returned 1
	[0107.571] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640)) returned 1
	[0107.575] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.575] CreateFileW (lpFileName="C:\\Boot\\tr-TR" (normalized: "c:\\boot\\tr-tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.575] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.575] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.575] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0107.575] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.576] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.576] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\tr-tr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.576] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\tr-tr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.576] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\# M0rphine Help #.hta" (normalized: "c:\\boot\\tr-tr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310
	[0107.576] GetConsoleMode (in: hConsoleHandle=0x310, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.576] WriteFile (in: hFile=0x310, lpBuffer=0x127bb300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127bb300*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.582] CloseHandle (hObject=0x310) returned 1
	[0107.582] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440)) returned 1
	[0107.582] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.583] CreateFileW (lpFileName="C:\\Boot\\zh-CN" (normalized: "c:\\boot\\zh-cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.583] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.583] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.583] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0107.583] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.583] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.583] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\# M0rphine Help #.hta" (normalized: "c:\\boot\\zh-cn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.583] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\# M0rphine Help #.hta" (normalized: "c:\\boot\\zh-cn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.583] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\# M0rphine Help #.hta" (normalized: "c:\\boot\\zh-cn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310
	[0107.584] GetConsoleMode (in: hConsoleHandle=0x310, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.584] WriteFile (in: hFile=0x310, lpBuffer=0x127bc600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127bc600*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.586] CloseHandle (hObject=0x310) returned 1
	[0107.586] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440)) returned 1
	[0107.591] SetEvent (hEvent=0x2e4) returned 1
	[0107.591] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.591] CreateFileW (lpFileName="C:\\Boot\\zh-HK" (normalized: "c:\\boot\\zh-hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.591] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.591] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.591] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0107.592] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.592] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.592] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\# M0rphine Help #.hta" (normalized: "c:\\boot\\zh-hk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.592] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\# M0rphine Help #.hta" (normalized: "c:\\boot\\zh-hk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.592] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\# M0rphine Help #.hta" (normalized: "c:\\boot\\zh-hk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310
	[0107.593] GetConsoleMode (in: hConsoleHandle=0x310, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.593] WriteFile (in: hFile=0x310, lpBuffer=0x127bd900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127bd900*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.595] CloseHandle (hObject=0x310) returned 1
	[0107.595] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1
	[0107.595] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.595] CreateFileW (lpFileName="C:\\Boot\\zh-TW" (normalized: "c:\\boot\\zh-tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.596] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.596] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.596] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1
	[0107.596] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.596] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.596] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\# M0rphine Help #.hta" (normalized: "c:\\boot\\zh-tw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.596] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\# M0rphine Help #.hta" (normalized: "c:\\boot\\zh-tw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.597] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\# M0rphine Help #.hta" (normalized: "c:\\boot\\zh-tw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310
	[0107.597] GetConsoleMode (in: hConsoleHandle=0x310, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.597] WriteFile (in: hFile=0x310, lpBuffer=0x127bec00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127bec00*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.599] CloseHandle (hObject=0x310) returned 1
	[0107.599] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1
	[0107.600] GetFileAttributesExW (in: lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5c84 | out: lpFileInformation=0x124f5c84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.612] CreateFileW (lpFileName="C:\\Config.Msi" (normalized: "c:\\config.msi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.612] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x124f5b5c | out: lpFindFileData=0x124f5b5c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.612] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.612] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.612] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.613] GetFileAttributesExW (in: lpFileName="C:\\Config.Msi\\# M0rphine Help #.hta" (normalized: "c:\\config.msi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f5824 | out: lpFileInformation=0x124f5824*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.613] CreateFileW (lpFileName="C:\\Config.Msi\\# M0rphine Help #.hta" (normalized: "c:\\config.msi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.613] CreateFileW (lpFileName="C:\\Config.Msi\\# M0rphine Help #.hta" (normalized: "c:\\config.msi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x308
	[0107.614] GetConsoleMode (in: hConsoleHandle=0x308, lpMode=0x124f5a34 | out: lpMode=0x124f5a34) returned 0
	[0107.614] WriteFile (in: hFile=0x308, lpBuffer=0x127d2000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f5a34, lpOverlapped=0x0 | out: lpBuffer=0x127d2000*, lpNumberOfBytesWritten=0x124f5a34*=0x1180, lpOverlapped=0x0) returned 1
	[0107.615] CloseHandle (hObject=0x308) returned 1
	[0107.616] GetFileAttributesExW (in: lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), fInfoLevelId=0x0, lpFileInformation=0x124f5c84 | out: lpFileInformation=0x124f5c84*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.616] CreateFileW (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x308
	[0107.617] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileInformationByHandle") returned 0x76d453ae
	[0107.617] GetFileInformationByHandle (in: hFile=0x308, lpFileInformation=0x124f5c14 | out: lpFileInformation=0x124f5c14) returned 1
	[0107.617] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileInformationByHandleEx") returned 0x76d5c78f
	[0107.617] GetFileInformationByHandleEx (in: hFile=0x308, FileInformationClass=0x9, lpFileInformation=0x124f5c0c, dwBufferSize=0x8 | out: lpFileInformation=0x124f5c0c) returned 1
	[0107.618] CloseHandle (hObject=0x308) returned 1
	[0107.618] GetFileAttributesExW (in: lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), fInfoLevelId=0x0, lpFileInformation=0x124f5c84 | out: lpFileInformation=0x124f5c84*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.624] CreateFileW (lpFileName="C:\\MSOCache" (normalized: "c:\\msocache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.624] FindFirstFileW (in: lpFileName="C:\\MSOCache\\*", lpFindFileData=0x124f5b5c | out: lpFindFileData=0x124f5b5c*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.625] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.625] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0107.625] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ba0 | out: lpFindFileData=0x124f5ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.625] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.625] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f5824 | out: lpFileInformation=0x124f5824*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.625] CreateFileW (lpFileName="C:\\MSOCache\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.626] CreateFileW (lpFileName="C:\\MSOCache\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x310
	[0107.626] GetConsoleMode (in: hConsoleHandle=0x310, lpMode=0x124f5a34 | out: lpMode=0x124f5a34) returned 0
	[0107.627] WriteFile (in: hFile=0x310, lpBuffer=0x127d3300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f5a34, lpOverlapped=0x0 | out: lpBuffer=0x127d3300*, lpNumberOfBytesWritten=0x124f5a34*=0x1180, lpOverlapped=0x0) returned 1
	[0107.628] CloseHandle (hObject=0x310) returned 1
	[0107.628] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), fInfoLevelId=0x0, lpFileInformation=0x124f5c20 | out: lpFileInformation=0x124f5c20*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.636] CreateFileW (lpFileName="C:\\MSOCache\\All Users" (normalized: "c:\\msocache\\all users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.636] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\*", lpFindFileData=0x124f5af8 | out: lpFindFileData=0x124f5af8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.642] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xa5cd3a40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5cd3a40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.644] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0016-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~3")) returned 1
	[0107.644] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0018-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~2")) returned 1
	[0107.644] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc3e6570, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc8a9170, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0019-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9877A~1")) returned 1
	[0107.644] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001A-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9765F~1")) returned 1
	[0107.644] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-001B-0409-1000-0000000FF1CE}-C", cAlternateFileName="{94E50~1")) returned 1
	[0107.644] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-002C-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92787~1")) returned 1
	[0107.644] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0043-0409-1000-0000000FF1CE}-C", cAlternateFileName="{95310~1")) returned 1
	[0107.644] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0044-0409-1000-0000000FF1CE}-C", cAlternateFileName="{91454~1")) returned 1
	[0107.644] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x435769e0, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x43bdc500, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0054-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9EA85~1")) returned 1
	[0107.644] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00A1-0409-1000-0000000FF1CE}-C", cAlternateFileName="{92572~1")) returned 1
	[0107.644] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00B4-0409-1000-0000000FF1CE}-C", cAlternateFileName="{912E0~1")) returned 1
	[0107.645] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-00BA-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~4")) returned 1
	[0107.645] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0115-0409-1000-0000000FF1CE}-C", cAlternateFileName="{90140~1")) returned 1
	[0107.645] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfa13c510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc112b50, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc112b50, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{90140000-0117-0409-1000-0000000FF1CE}-C", cAlternateFileName="{9AFC7~1")) returned 1
	[0107.645] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0011-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~1")) returned 1
	[0107.645] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-003B-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~3")) returned 1
	[0107.645] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91140000-0057-0000-1000-0000000FF1CE}-C", cAlternateFileName="{91140~2")) returned 1
	[0107.645] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5b3c | out: lpFindFileData=0x124f5b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.645] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.646] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f57c0 | out: lpFileInformation=0x124f57c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.648] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.648] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0107.663] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f59d0 | out: lpMode=0x124f59d0) returned 0
	[0107.663] WriteFile (in: hFile=0x2fc, lpBuffer=0x127d4600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f59d0, lpOverlapped=0x0 | out: lpBuffer=0x127d4600*, lpNumberOfBytesWritten=0x124f59d0*=0x1180, lpOverlapped=0x0) returned 1
	[0107.664] CloseHandle (hObject=0x2fc) returned 1
	[0107.665] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.670] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.670] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f5a94 | out: lpFindFileData=0x124f5a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.670] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xecdfa490, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee38cbf0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.670] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLR.cab", cAlternateFileName="")) returned 1
	[0107.670] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.msi", cAlternateFileName="")) returned 1
	[0107.670] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelMUI.xml", cAlternateFileName="")) returned 1
	[0107.670] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0107.670] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.670] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.671] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f575c | out: lpFileInformation=0x124f575c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.671] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.671] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0107.675] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f596c | out: lpMode=0x124f596c) returned 0
	[0107.675] WriteFile (in: hFile=0x2fc, lpBuffer=0x127d5900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f596c, lpOverlapped=0x0 | out: lpBuffer=0x127d5900*, lpNumberOfBytesWritten=0x124f596c*=0x1180, lpOverlapped=0x0) returned 1
	[0107.677] CloseHandle (hObject=0x2fc) returned 1
	[0107.677] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb)) returned 1
	[0107.685] SetEvent (hEvent=0x2e4) returned 1
	[0107.685] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00)) returned 1
	[0107.686] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1
	[0107.686] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1
	[0107.715] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0107.830] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.830] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f5a94 | out: lpFindFileData=0x124f5a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a65c0
	[0107.839] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe8729610, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xecdfa490, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0107.839] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.msi", cAlternateFileName="POWERP~1.MSI")) returned 1
	[0107.839] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPointMUI.xml", cAlternateFileName="POWERP~1.XML")) returned 1
	[0107.839] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290, dwReserved0=0x0, dwReserved1=0x0, cFileName="PptLR.cab", cAlternateFileName="")) returned 1
	[0107.839] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0107.839] FindNextFileW (in: hFindFile=0x336a65c0, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0107.839] FindClose (in: hFindFile=0x336a65c0 | out: hFindFile=0x336a65c0) returned 1
	[0107.841] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f575c | out: lpFileInformation=0x124f575c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0107.843] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0107.843] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x31c
	[0107.844] GetConsoleMode (in: hConsoleHandle=0x31c, lpMode=0x124f596c | out: lpMode=0x124f596c) returned 0
	[0107.844] WriteFile (in: hFile=0x31c, lpBuffer=0x127d6c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f596c, lpOverlapped=0x0 | out: lpBuffer=0x127d6c00*, lpNumberOfBytesWritten=0x124f596c*=0x1180, lpOverlapped=0x0) returned 1
	[0107.846] CloseHandle (hObject=0x31c) returned 1
	[0107.846] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1
	[0107.847] SetEvent (hEvent=0x2e4) returned 1
	[0107.847] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0108.735] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0109.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x12426e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x330
	[0109.137] CloseHandle (hObject=0x330) returned 1
	[0109.137] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330
	[0109.137] GetConsoleMode (in: hConsoleHandle=0x330, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0109.137] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0109.137] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127901e0 | out: pbBuffer=0x127901e0) returned 1
	[0109.137] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0109.137] ReadFile (in: hFile=0x330, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x126e5d1c*=0x5aa, lpOverlapped=0x0) returned 1
	[0109.291] GetFileType (hFile=0x330) returned 0x1
	[0109.291] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0109.291] WriteFile (in: hFile=0x330, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x126e5d00*=0x5aa, lpOverlapped=0x126e5d0c) returned 1
	[0109.291] GetFileType (hFile=0x330) returned 0x1
	[0109.291] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x5aa, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0109.291] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0109.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0109.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0109.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0109.292] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0109.293] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0109.293] WriteFile (in: hFile=0x2cc, lpBuffer=0x12868a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12868a00*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0109.293] CloseHandle (hObject=0x2cc) returned 1
	[0109.297] CloseHandle (hObject=0x330) returned 1
	[0109.297] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0109.298] SetEvent (hEvent=0x30c) returned 1
	[0109.298] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330
	[0109.298] GetConsoleMode (in: hConsoleHandle=0x330, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0109.298] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1
	[0109.298] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12790620 | out: pbBuffer=0x12790620) returned 1
	[0109.298] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0109.299] ReadFile (in: hFile=0x330, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x126e5d1c*=0x75e, lpOverlapped=0x0) returned 1
	[0109.416] GetFileType (hFile=0x330) returned 0x1
	[0109.417] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0109.417] WriteFile (in: hFile=0x330, lpBuffer=0x1261c000*, nNumberOfBytesToWrite=0x75e, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x1261c000*, lpNumberOfBytesWritten=0x126e5d00*=0x75e, lpOverlapped=0x126e5d0c) returned 1
	[0109.417] GetFileType (hFile=0x330) returned 0x1
	[0109.417] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x75e, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0109.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0109.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0109.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0109.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0109.418] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0109.420] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0109.420] WriteFile (in: hFile=0x338, lpBuffer=0x12868f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12868f00*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0109.420] CloseHandle (hObject=0x338) returned 1
	[0109.429] CloseHandle (hObject=0x330) returned 1
	[0109.430] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0109.431] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0112.790] SetEvent (hEvent=0x2e4) returned 1
	[0112.790] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0112.836] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0112.836] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0112.836] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc40b730, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x265c00)) returned 1
	[0112.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e380 | out: pbBuffer=0x1252e380) returned 1
	[0112.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e788 | out: pbBuffer=0x1251e788) returned 1
	[0112.836] VirtualAlloc (lpAddress=0x12934000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x12934000
	[0112.837] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x3f0000
	[0112.838] VirtualAlloc (lpAddress=0x12954000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x12954000
	[0112.839] ReadFile (in: hFile=0x2fc, lpBuffer=0x12934000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12934000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0112.877] VirtualAlloc (lpAddress=0x12974000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x12974000
	[0112.880] GetFileType (hFile=0x2fc) returned 0x1
	[0112.880] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0112.881] WriteFile (in: hFile=0x2fc, lpBuffer=0x12974000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12974000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0112.881] GetFileType (hFile=0x2fc) returned 0x1
	[0112.881] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0112.882] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec101 | out: pbBuffer=0x124ec101) returned 1
	[0112.882] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0112.883] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec301 | out: pbBuffer=0x124ec301) returned 1
	[0112.883] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441f0 | out: pbBuffer=0x127441f0) returned 1
	[0112.883] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0112.883] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0112.883] WriteFile (in: hFile=0x32c, lpBuffer=0x12774000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12774000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0113.012] CloseHandle (hObject=0x32c) returned 1
	[0113.391] CloseHandle (hObject=0x2fc) returned 1
	[0113.392] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0113.393] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0113.481] SetEvent (hEvent=0x11c) returned 1
	[0113.481] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0113.482] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0113.482] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc)) returned 1
	[0113.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0113.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0113.483] ReadFile (in: hFile=0x2cc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0113.678] GetFileType (hFile=0x2cc) returned 0x1
	[0113.678] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.678] WriteFile (in: hFile=0x2cc, lpBuffer=0x128d4000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x128d4000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0113.679] GetFileType (hFile=0x2cc) returned 0x1
	[0113.679] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.679] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0113.679] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0113.679] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0113.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e500 | out: pbBuffer=0x1251e500) returned 1
	[0113.680] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0113.680] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0113.680] WriteFile (in: hFile=0x338, lpBuffer=0x12774a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12774a00*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0113.835] CloseHandle (hObject=0x338) returned 1
	[0115.156] CloseHandle (hObject=0x2cc) returned 1
	[0115.156] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0115.157] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0115.635] SetEvent (hEvent=0x30c) returned 1
	[0115.636] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0115.636] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0115.636] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00)) returned 1
	[0115.636] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0115.636] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0115.636] ReadFile (in: hFile=0x2cc, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0115.969] GetFileType (hFile=0x2cc) returned 0x1
	[0115.969] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0115.969] WriteFile (in: hFile=0x2cc, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0115.970] GetFileType (hFile=0x2cc) returned 0x1
	[0115.970] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0115.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0115.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0115.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0115.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0115.971] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0115.971] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0115.971] WriteFile (in: hFile=0x2fc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0116.116] CloseHandle (hObject=0x2fc) returned 1
	[0116.211] CloseHandle (hObject=0x2cc) returned 1
	[0116.211] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0116.212] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5af4 | out: lpFileInformation=0x124f5af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1
	[0116.213] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0116.213] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0116.213] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\*", lpFindFileData=0x124f5a30 | out: lpFindFileData=0x124f5a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0116.213] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0116.213] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0116.213] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0116.214] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0116.214] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0116.214] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0116.214] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f56f8 | out: lpFileInformation=0x124f56f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0116.214] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0116.214] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0116.214] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5908 | out: lpMode=0x124f5908) returned 0
	[0116.214] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f5908, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f5908*=0x1180, lpOverlapped=0x0) returned 1
	[0116.216] CloseHandle (hObject=0x2cc) returned 1
	[0116.217] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5af4 | out: lpFileInformation=0x124f5af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54)) returned 1
	[0116.217] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0116.217] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0116.217] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1
	[0116.217] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6a0 | out: pbBuffer=0x1244c6a0) returned 1
	[0116.217] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788300 | out: pbBuffer=0x12788300) returned 1
	[0116.218] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0116.299] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0116.299] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0116.299] SetEvent (hEvent=0xa0) returned 1
	[0116.299] SetEvent (hEvent=0x2f4) returned 1
	[0116.299] ReadFile (in: hFile=0x2cc, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x126e9d1c*=0x5b1, lpOverlapped=0x0) returned 1
	[0116.515] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0116.662] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0116.835] SetEvent (hEvent=0x2f4) returned 1
	[0116.835] SetEvent (hEvent=0x30c) returned 1
	[0116.836] GetFileType (hFile=0x32c) returned 0x1
	[0116.836] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0116.836] WriteFile (in: hFile=0x32c, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0116.837] GetFileType (hFile=0x32c) returned 0x1
	[0116.837] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0116.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0116.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0116.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0116.838] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410410 | out: pbBuffer=0x12410410) returned 1
	[0116.838] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0116.838] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0116.838] WriteFile (in: hFile=0x328, lpBuffer=0x12606000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12606000*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0117.005] CloseHandle (hObject=0x328) returned 1
	[0117.145] CloseHandle (hObject=0x32c) returned 1
	[0117.146] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0117.147] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5af4 | out: lpFileInformation=0x124f5af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400)) returned 1
	[0117.228] SetEvent (hEvent=0x30c) returned 1
	[0117.228] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5af4 | out: lpFileInformation=0x124f5af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2)) returned 1
	[0117.229] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0117.229] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0117.229] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2e3b660, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd8400)) returned 1
	[0117.229] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0117.229] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410438 | out: pbBuffer=0x12410438) returned 1
	[0117.229] ReadFile (in: hFile=0x328, lpBuffer=0x1270c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x1270c000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0117.426] GetFileType (hFile=0x328) returned 0x1
	[0117.426] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0117.427] WriteFile (in: hFile=0x328, lpBuffer=0x12902000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x12902000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0117.427] GetFileType (hFile=0x328) returned 0x1
	[0117.427] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0117.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0117.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0117.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0117.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410510 | out: pbBuffer=0x12410510) returned 1
	[0117.428] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0117.429] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0117.429] WriteFile (in: hFile=0x340, lpBuffer=0x12606a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12606a00*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0118.158] SetEvent (hEvent=0xa0) returned 1
	[0118.158] CloseHandle (hObject=0x340) returned 1
	[0118.445] CloseHandle (hObject=0x328) returned 1
	[0118.644] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.281] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0120.281] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0120.282] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1
	[0120.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0120.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0120.282] ReadFile (in: hFile=0x328, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x126ebd1c*=0x567, lpOverlapped=0x0) returned 1
	[0120.412] GetFileType (hFile=0x328) returned 0x1
	[0120.412] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.412] WriteFile (in: hFile=0x328, lpBuffer=0x12458000*, nNumberOfBytesToWrite=0x567, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x12458000*, lpNumberOfBytesWritten=0x126ebd00*=0x567, lpOverlapped=0x126ebd0c) returned 1
	[0120.413] GetFileType (hFile=0x328) returned 0x1
	[0120.413] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x567, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0120.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0120.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0120.414] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0120.414] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0120.414] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0120.414] WriteFile (in: hFile=0x32c, lpBuffer=0x1262c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262c000*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.414] CloseHandle (hObject=0x32c) returned 1
	[0120.417] CloseHandle (hObject=0x328) returned 1
	[0120.417] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.418] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0120.418] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0120.418] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00)) returned 1
	[0120.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0120.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0120.419] ReadFile (in: hFile=0x328, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0120.485] GetFileType (hFile=0x328) returned 0x1
	[0120.485] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.485] WriteFile (in: hFile=0x328, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0120.486] GetFileType (hFile=0x328) returned 0x1
	[0120.486] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.486] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0120.486] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0120.486] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0120.487] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0120.487] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0120.487] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0120.487] WriteFile (in: hFile=0x340, lpBuffer=0x1262ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262ca00*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.550] CloseHandle (hObject=0x340) returned 1
	[0120.698] CloseHandle (hObject=0x328) returned 1
	[0120.698] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.699] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0120.849] SetEvent (hEvent=0x308) returned 1
	[0120.849] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0120.850] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0120.850] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f356eb0, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f356eb0, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x43bdc500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1861)) returned 1
	[0120.850] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c460 | out: pbBuffer=0x1244c460) returned 1
	[0120.850] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0120.850] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0120.860] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0120.860] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0120.860] SetEvent (hEvent=0xa0) returned 1
	[0120.860] SetEvent (hEvent=0x308) returned 1
	[0120.860] SetEvent (hEvent=0x2e4) returned 1
	[0120.861] ReadFile (in: hFile=0x328, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x12429d1c*=0x1861, lpOverlapped=0x0) returned 1
	[0120.864] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0120.865] SetEvent (hEvent=0x308) returned 1
	[0120.865] GetFileType (hFile=0x328) returned 0x1
	[0120.865] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.865] WriteFile (in: hFile=0x328, lpBuffer=0x124ff980*, nNumberOfBytesToWrite=0x1861, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124ff980*, lpNumberOfBytesWritten=0x12429d00*=0x1861, lpOverlapped=0x12429d0c) returned 1
	[0120.865] GetFileType (hFile=0x328) returned 0x1
	[0120.865] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x1861, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0120.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0120.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0120.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0120.866] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0120.867] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0120.867] WriteFile (in: hFile=0x340, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.867] CloseHandle (hObject=0x340) returned 1
	[0120.867] CloseHandle (hObject=0x328) returned 1
	[0120.867] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.868] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0120.869] SetEvent (hEvent=0x308) returned 1
	[0120.869] SetEvent (hEvent=0x2f4) returned 1
	[0120.870] GetFileType (hFile=0x304) returned 0x1
	[0120.870] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.870] WriteFile (in: hFile=0x304, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0120.871] GetFileType (hFile=0x304) returned 0x1
	[0120.871] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0120.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0120.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0120.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0120.871] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0120.872] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0120.872] WriteFile (in: hFile=0x328, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.873] CloseHandle (hObject=0x328) returned 1
	[0120.873] CloseHandle (hObject=0x304) returned 1
	[0120.875] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.876] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0120.876] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0120.876] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7fb9f9e0, ftCreationTime.dwHighDateTime=0x1cbe575, ftLastAccessTime.dwLowDateTime=0x7fb9f9e0, ftLastAccessTime.dwHighDateTime=0x1cbe575, ftLastWriteTime.dwLowDateTime=0x437179c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x30780dd)) returned 1
	[0120.876] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0120.876] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0120.876] ReadFile (in: hFile=0x304, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0120.888] GetFileType (hFile=0x304) returned 0x1
	[0120.888] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.888] WriteFile (in: hFile=0x304, lpBuffer=0x126ec000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x126ec000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0120.889] GetFileType (hFile=0x304) returned 0x1
	[0120.889] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0120.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0120.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0120.890] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441a0 | out: pbBuffer=0x127441a0) returned 1
	[0120.890] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0120.890] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0120.890] WriteFile (in: hFile=0x328, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.896] CloseHandle (hObject=0x328) returned 1
	[0120.896] CloseHandle (hObject=0x304) returned 1
	[0120.896] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiolr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.897] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0120.901] SetEvent (hEvent=0x68) returned 1
	[0120.901] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0120.901] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0120.901] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1
	[0120.901] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732460 | out: pbBuffer=0x12732460) returned 1
	[0120.901] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441b8 | out: pbBuffer=0x127441b8) returned 1
	[0120.901] ReadFile (in: hFile=0x304, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0120.910] GetFileType (hFile=0x304) returned 0x1
	[0120.910] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.910] WriteFile (in: hFile=0x304, lpBuffer=0x1270c000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1270c000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0120.911] GetFileType (hFile=0x304) returned 0x1
	[0120.911] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0120.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0120.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0120.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744270 | out: pbBuffer=0x12744270) returned 1
	[0120.912] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0120.912] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0120.912] WriteFile (in: hFile=0x32c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.925] CloseHandle (hObject=0x32c) returned 1
	[0120.925] CloseHandle (hObject=0x304) returned 1
	[0120.925] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.944] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0120.949] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0120.957] SetEvent (hEvent=0x68) returned 1
	[0120.957] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0120.957] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0120.957] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400)) returned 1
	[0120.957] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732680 | out: pbBuffer=0x12732680) returned 1
	[0120.957] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744288 | out: pbBuffer=0x12744288) returned 1
	[0120.957] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0120.959] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0120.959] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0120.959] SetEvent (hEvent=0xa0) returned 1
	[0120.959] SetEvent (hEvent=0x68) returned 1
	[0120.960] ReadFile (in: hFile=0x304, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0120.965] GetFileType (hFile=0x304) returned 0x1
	[0120.965] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.965] WriteFile (in: hFile=0x304, lpBuffer=0x12858000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12858000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0120.966] GetFileType (hFile=0x304) returned 0x1
	[0120.966] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.966] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0120.966] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0120.967] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0120.967] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0120.967] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0120.967] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0120.967] WriteFile (in: hFile=0x328, lpBuffer=0x1276ea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x1276ea00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.970] CloseHandle (hObject=0x328) returned 1
	[0120.970] CloseHandle (hObject=0x304) returned 1
	[0120.970] SwitchToThread () returned 1
	[0120.971] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.982] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0120.982] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0120.982] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1
	[0120.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0120.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744010 | out: pbBuffer=0x12744010) returned 1
	[0120.982] ReadFile (in: hFile=0x328, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x126e5d1c*=0x750, lpOverlapped=0x0) returned 1
	[0121.024] GetFileType (hFile=0x328) returned 0x1
	[0121.024] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.024] WriteFile (in: hFile=0x328, lpBuffer=0x12534000*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12534000*, lpNumberOfBytesWritten=0x126e5d00*=0x750, lpOverlapped=0x126e5d0c) returned 1
	[0121.024] GetFileType (hFile=0x328) returned 0x1
	[0121.024] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x750, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.025] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0121.025] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0121.025] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0121.025] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d8 | out: pbBuffer=0x127440d8) returned 1
	[0121.025] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.025] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.025] WriteFile (in: hFile=0x340, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.025] CloseHandle (hObject=0x340) returned 1
	[0121.026] CloseHandle (hObject=0x328) returned 1
	[0121.026] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.027] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.038] SetEvent (hEvent=0x30c) returned 1
	[0121.038] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.038] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0121.038] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400)) returned 1
	[0121.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0121.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f0 | out: pbBuffer=0x127440f0) returned 1
	[0121.038] ReadFile (in: hFile=0x340, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.063] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.093] GetFileType (hFile=0x340) returned 0x1
	[0121.093] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.093] WriteFile (in: hFile=0x340, lpBuffer=0x1257a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x1257a000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0121.094] GetFileType (hFile=0x340) returned 0x1
	[0121.094] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.094] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0121.094] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0121.094] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0121.094] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0121.095] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0121.095] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0121.095] WriteFile (in: hFile=0x304, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.107] CloseHandle (hObject=0x304) returned 1
	[0121.108] CloseHandle (hObject=0x340) returned 1
	[0121.108] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.109] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.121] SetEvent (hEvent=0x30c) returned 1
	[0121.121] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.138] SetEvent (hEvent=0x68) returned 1
	[0121.138] SetEvent (hEvent=0x2f4) returned 1
	[0121.138] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.142] SetEvent (hEvent=0x2e8) returned 1
	[0121.142] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.215] SetEvent (hEvent=0x68) returned 1
	[0121.215] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.215] SetEvent (hEvent=0x68) returned 1
	[0121.215] SetEvent (hEvent=0x320) returned 1
	[0121.216] GetFileType (hFile=0x32c) returned 0x1
	[0121.216] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.216] WriteFile (in: hFile=0x32c, lpBuffer=0x127d3000*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x127d3000*, lpNumberOfBytesWritten=0x126e7d00*=0xe00, lpOverlapped=0x126e7d0c) returned 1
	[0121.216] GetFileType (hFile=0x32c) returned 0x1
	[0121.216] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xe00, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0121.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0121.217] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0121.217] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410470 | out: pbBuffer=0x12410470) returned 1
	[0121.217] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.217] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.217] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.217] CloseHandle (hObject=0x2cc) returned 1
	[0121.217] CloseHandle (hObject=0x32c) returned 1
	[0121.218] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.237] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.242] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.254] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.269] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.282] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.293] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.304] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.326] SetEvent (hEvent=0x320) returned 1
	[0121.326] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.330] SetEvent (hEvent=0x2e8) returned 1
	[0121.330] SetEvent (hEvent=0x68) returned 1
	[0121.330] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.619] SetEvent (hEvent=0x318) returned 1
	[0121.619] SetEvent (hEvent=0x320) returned 1
	[0121.619] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.903] SetEvent (hEvent=0x318) returned 1
	[0121.903] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.906] SetEvent (hEvent=0x318) returned 1
	[0121.906] SwitchToThread () returned 1
	[0121.906] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.918] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.959] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0121.965] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0122.068] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.068] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0122.068] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0122.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0122.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0122.069] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0122.069] SetEvent (hEvent=0x2e8) returned 1
	[0122.069] ReadFile (in: hFile=0x33c, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.097] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0122.107] GetFileType (hFile=0x33c) returned 0x1
	[0122.107] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.107] WriteFile (in: hFile=0x33c, lpBuffer=0x12918000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12918000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0122.108] GetFileType (hFile=0x33c) returned 0x1
	[0122.108] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.108] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0122.108] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0122.108] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0122.108] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0122.109] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0122.109] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0122.109] WriteFile (in: hFile=0x2cc, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.130] CloseHandle (hObject=0x2cc) returned 1
	[0122.137] CloseHandle (hObject=0x33c) returned 1
	[0122.145] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\setup.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.165] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061)) returned 1
	[0122.166] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7)) returned 1
	[0122.194] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0122.206] SetEvent (hEvent=0x80) returned 1
	[0122.206] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800)) returned 1
	[0122.219] SetEvent (hEvent=0x320) returned 1
	[0122.219] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213)) returned 1
	[0122.219] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0122.220] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0122.220] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.220] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.220] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0122.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732500 | out: pbBuffer=0x12732500) returned 1
	[0122.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e738 | out: pbBuffer=0x1251e738) returned 1
	[0122.220] ReadFile (in: hFile=0x2fc, lpBuffer=0x12958000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12958000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.226] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0122.235] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0122.247] SetEvent (hEvent=0x320) returned 1
	[0122.247] SetEvent (hEvent=0x80) returned 1
	[0122.247] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0122.247] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.247] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213)) returned 1
	[0122.247] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0122.247] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0122.247] ReadFile (in: hFile=0x32c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x126e7d1c*=0x2213, lpOverlapped=0x0) returned 1
	[0122.268] GetFileType (hFile=0x32c) returned 0x1
	[0122.268] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.268] WriteFile (in: hFile=0x32c, lpBuffer=0x1297e000*, nNumberOfBytesToWrite=0x2213, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x1297e000*, lpNumberOfBytesWritten=0x126e7d00*=0x2213, lpOverlapped=0x126e7d0c) returned 1
	[0122.268] GetFileType (hFile=0x32c) returned 0x1
	[0122.268] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x2213, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0122.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0122.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0122.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0122.269] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0122.269] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.269] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.270] CloseHandle (hObject=0x2cc) returned 1
	[0122.270] CloseHandle (hObject=0x32c) returned 1
	[0122.270] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.271] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), fInfoLevelId=0x0, lpFileInformation=0x124f7c84 | out: lpFileInformation=0x124f7c84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.272] CreateFileW (lpFileName="C:\\PerfLogs" (normalized: "c:\\perflogs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.272] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x124f7b5c | out: lpFindFileData=0x124f7b5c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.272] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.272] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Admin", cAlternateFileName="")) returned 1
	[0122.272] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.272] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.272] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs\\# M0rphine Help #.hta" (normalized: "c:\\perflogs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7824 | out: lpFileInformation=0x124f7824*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.273] CreateFileW (lpFileName="C:\\PerfLogs\\# M0rphine Help #.hta" (normalized: "c:\\perflogs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.273] CreateFileW (lpFileName="C:\\PerfLogs\\# M0rphine Help #.hta" (normalized: "c:\\perflogs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0122.273] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7a34 | out: lpMode=0x124f7a34) returned 0
	[0122.273] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7a34, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7a34*=0x1180, lpOverlapped=0x0) returned 1
	[0122.275] CloseHandle (hObject=0x32c) returned 1
	[0122.276] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.276] CreateFileW (lpFileName="C:\\PerfLogs\\Admin" (normalized: "c:\\perflogs\\admin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.276] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\Admin\\*", lpFindFileData=0x124f7af8 | out: lpFindFileData=0x124f7af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.276] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xbbba4afc, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.277] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.277] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.277] GetFileAttributesExW (in: lpFileName="C:\\PerfLogs\\Admin\\# M0rphine Help #.hta" (normalized: "c:\\perflogs\\admin\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f77c0 | out: lpFileInformation=0x124f77c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.277] CreateFileW (lpFileName="C:\\PerfLogs\\Admin\\# M0rphine Help #.hta" (normalized: "c:\\perflogs\\admin\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.277] CreateFileW (lpFileName="C:\\PerfLogs\\Admin\\# M0rphine Help #.hta" (normalized: "c:\\perflogs\\admin\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0122.302] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f79d0 | out: lpMode=0x124f79d0) returned 0
	[0122.302] WriteFile (in: hFile=0x328, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f79d0, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f79d0*=0x1180, lpOverlapped=0x0) returned 1
	[0122.304] CloseHandle (hObject=0x328) returned 1
	[0122.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files" (normalized: "c:\\program files"), fInfoLevelId=0x0, lpFileInformation=0x124f7c84 | out: lpFileInformation=0x124f7c84*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe1b752c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe1b752c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0122.305] CreateFileW (lpFileName="C:\\Program Files" (normalized: "c:\\program files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.305] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x124f7b5c | out: lpFindFileData=0x124f7b5c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe1b752c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe1b752c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.305] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe1b752c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe1b752c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.305] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd7545b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xda65f8a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda65f8a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0122.305] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28ae853d, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28ae853d, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0122.305] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdbac1500, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbac1500, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVD Maker", cAlternateFileName="DVDMAK~1")) returned 1
	[0122.305] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdb9dccc0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb9dccc0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0122.305] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1d4a90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdba75240, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba75240, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee2ce510, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdac52fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdac52fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e54b70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdba02e20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba02e20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft SQL Server Compact Edition", cAlternateFileName="MICROS~3")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50e7acd0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdba4f0e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba4f0e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Sync Framework", cAlternateFileName="MICROS~4")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594863b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdb990a00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb990a00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Synchronization Services", cAlternateFileName="MID7C0~1")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdb944740, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb944740, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdb91e5e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb91e5e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x4232b3dd, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0xda76a240, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda76a240, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdb8d2320, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb8d2320, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e177d26, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xdc7fef60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc7fef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Journal", cAlternateFileName="WI0FCF~1")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd885082, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdb886060, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb886060, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdba4f0e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba4f0e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdb886060, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb886060, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdba9b3a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba9b3a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdb990a00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb990a00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdc7d8e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdc7d8e00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0122.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.306] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), fInfoLevelId=0x0, lpFileInformation=0x124f7c84 | out: lpFileInformation=0x124f7c84*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0122.307] CreateFileW (lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.307] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x124f7b5c | out: lpFindFileData=0x124f7b5c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cf40b40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xdac52fa0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdac52fa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdba02e20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba02e20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28ae853d, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c82ea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xdba9b3a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba9b3a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8f7490, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdba28f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba28f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x734f7d60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xdb839da0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb839da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa1ae930, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb990a00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb990a00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Analysis Services", cAlternateFileName="MICROS~2")) returned 1
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0a44f0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xdb8f8480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb8f8480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10f11a30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xdb96a8a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb96a8a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Visual Studio 8", cAlternateFileName="MICROS~3")) returned 1
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1f1bbe30, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0xdb8f8480, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb8f8480, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0122.307] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaeef6000, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xdb2dec20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb2dec20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0122.308] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xaf770e60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xdba75240, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba75240, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~2")) returned 1
	[0122.308] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdb9b6b60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb9b6b60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0122.308] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0122.308] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8907f814, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0xdba28f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba28f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0122.308] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdba9b3a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba9b3a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~3")) returned 1
	[0122.308] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd91d5ea, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdba4f0e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdba4f0e0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~1")) returned 1
	[0122.308] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1ea40f84, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea40f84, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0122.309] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdb2dec20, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb2dec20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
	[0122.309] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80105472, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdb9b6b60, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdb9b6b60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WINDOW~4")) returned 1
	[0122.309] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0xdbac1500, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xdbac1500, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0122.309] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8012b5d2, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1eab37af, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1eab37af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0122.309] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.309] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.309] GetFileAttributesExW (in: lpFileName="C:\\ProgramData" (normalized: "c:\\programdata"), fInfoLevelId=0x0, lpFileInformation=0x124f7c84 | out: lpFileInformation=0x124f7c84*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0122.309] CreateFileW (lpFileName="C:\\ProgramData" (normalized: "c:\\programdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.309] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x124f7b5c | out: lpFindFileData=0x124f7b5c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.309] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.309] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0122.309] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0122.310] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.310] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.310] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7824 | out: lpFileInformation=0x124f7824*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.310] CreateFileW (lpFileName="C:\\ProgramData\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.310] CreateFileW (lpFileName="C:\\ProgramData\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.315] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7a34 | out: lpMode=0x124f7a34) returned 0
	[0122.315] WriteFile (in: hFile=0x338, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7a34, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7a34*=0x1180, lpOverlapped=0x0) returned 1
	[0122.316] CloseHandle (hObject=0x338) returned 1
	[0122.317] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe" (normalized: "c:\\programdata\\adobe"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.317] CreateFileW (lpFileName="C:\\ProgramData\\Adobe" (normalized: "c:\\programdata\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.317] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x124f7af8 | out: lpFindFileData=0x124f7af8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.317] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.317] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0122.317] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1
	[0122.317] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.318] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.318] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f77c0 | out: lpFileInformation=0x124f77c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.318] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.318] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.320] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f79d0 | out: lpMode=0x124f79d0) returned 0
	[0122.320] WriteFile (in: hFile=0x338, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f79d0, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f79d0*=0x1180, lpOverlapped=0x0) returned 1
	[0122.321] CloseHandle (hObject=0x338) returned 1
	[0122.321] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM" (normalized: "c:\\programdata\\adobe\\arm"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.322] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM" (normalized: "c:\\programdata\\adobe\\arm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.322] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe4efbbe0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe4efbbe0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_10.0.0", cAlternateFileName="READER~1.0")) returned 1
	[0122.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.322] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.322] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\arm\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.323] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\arm\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.323] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\arm\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.323] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0122.323] WriteFile (in: hFile=0x338, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0122.324] CloseHandle (hObject=0x338) returned 1
	[0122.325] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.325] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.325] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.328] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4efbbe0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xf2028d90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xf2028d90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.328] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrSecUpd10111.msp", cAlternateFileName="ADBERD~2.MSP")) returned 1
	[0122.328] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10110_MUI.msp", cAlternateFileName="ADBERD~1.MSP")) returned 1
	[0122.328] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdbeRdrUpd10116_MUI.msp", cAlternateFileName="ADBERD~3.MSP")) returned 1
	[0122.328] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.328] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.329] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.330] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.330] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.331] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0122.331] WriteFile (in: hFile=0x338, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0122.332] CloseHandle (hObject=0x338) returned 1
	[0122.332] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800)) returned 1
	[0122.334] SetEvent (hEvent=0x2e8) returned 1
	[0122.334] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000)) returned 1
	[0122.334] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.334] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.334] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e186d00, ftCreationTime.dwHighDateTime=0x1cfb543, ftLastAccessTime.dwLowDateTime=0x7e186d00, ftLastAccessTime.dwHighDateTime=0x1cfb543, ftLastWriteTime.dwLowDateTime=0x7e186d00, ftLastWriteTime.dwHighDateTime=0x1cfb543, nFileSizeHigh=0x0, nFileSizeLow=0x3d800)) returned 1
	[0122.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4e0 | out: pbBuffer=0x1240f4e0) returned 1
	[0122.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744510 | out: pbBuffer=0x12744510) returned 1
	[0122.335] ReadFile (in: hFile=0x338, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.342] GetFileType (hFile=0x338) returned 0x1
	[0122.342] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.342] WriteFile (in: hFile=0x338, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0122.343] GetFileType (hFile=0x338) returned 0x1
	[0122.343] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.343] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0122.343] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0122.343] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0122.344] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445c8 | out: pbBuffer=0x127445c8) returned 1
	[0122.344] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.344] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.344] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.344] CloseHandle (hObject=0x2fc) returned 1
	[0122.352] CloseHandle (hObject=0x338) returned 1
	[0122.352] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), lpNewFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.353] SetEvent (hEvent=0x2e8) returned 1
	[0122.353] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.353] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.353] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4450880, ftCreationTime.dwHighDateTime=0x1cf6c45, ftLastAccessTime.dwLowDateTime=0xb4450880, ftLastAccessTime.dwHighDateTime=0x1cf6c45, ftLastWriteTime.dwLowDateTime=0xb4450880, ftLastWriteTime.dwHighDateTime=0x1cf6c45, nFileSizeHigh=0x0, nFileSizeLow=0x10e3000)) returned 1
	[0122.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f700 | out: pbBuffer=0x1240f700) returned 1
	[0122.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127445e0 | out: pbBuffer=0x127445e0) returned 1
	[0122.353] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0122.355] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0122.355] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0122.355] SetEvent (hEvent=0xa0) returned 1
	[0122.355] SetEvent (hEvent=0x2e8) returned 1
	[0122.355] ReadFile (in: hFile=0x338, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.362] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0122.364] SetEvent (hEvent=0x2e8) returned 1
	[0122.364] SetEvent (hEvent=0x318) returned 1
	[0122.365] GetFileType (hFile=0x338) returned 0x1
	[0122.365] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.365] WriteFile (in: hFile=0x338, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0122.366] GetFileType (hFile=0x338) returned 0x1
	[0122.366] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.366] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0122.366] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0122.366] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0122.366] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0122.366] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.367] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.367] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.368] CloseHandle (hObject=0x2fc) returned 1
	[0122.368] CloseHandle (hObject=0x338) returned 1
	[0122.368] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), lpNewFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.369] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.369] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.369] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000)) returned 1
	[0122.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0122.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0122.369] ReadFile (in: hFile=0x338, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.382] GetFileType (hFile=0x338) returned 0x1
	[0122.382] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.383] WriteFile (in: hFile=0x338, lpBuffer=0x12818000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12818000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0122.383] GetFileType (hFile=0x338) returned 0x1
	[0122.383] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0122.384] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0122.384] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0122.384] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441a0 | out: pbBuffer=0x127441a0) returned 1
	[0122.384] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.384] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.384] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.385] CloseHandle (hObject=0x33c) returned 1
	[0122.385] CloseHandle (hObject=0x338) returned 1
	[0122.386] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), lpNewFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.387] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0122.419] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0122.434] SetEvent (hEvent=0x320) returned 1
	[0122.435] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.435] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0122.435] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22)) returned 1
	[0122.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0122.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0122.435] ReadFile (in: hFile=0x338, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f1d1c*=0x2f22, lpOverlapped=0x0) returned 1
	[0122.443] GetFileType (hFile=0x338) returned 0x1
	[0122.443] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.443] WriteFile (in: hFile=0x338, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x2f22, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x124f1d00*=0x2f22, lpOverlapped=0x124f1d0c) returned 1
	[0122.444] GetFileType (hFile=0x338) returned 0x1
	[0122.444] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x2f22, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0122.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0122.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0122.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0122.444] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0122.444] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0122.445] WriteFile (in: hFile=0x340, lpBuffer=0x12456000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12456000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.445] CloseHandle (hObject=0x340) returned 1
	[0122.445] CloseHandle (hObject=0x338) returned 1
	[0122.445] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), lpNewFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.446] SetEvent (hEvent=0x320) returned 1
	[0122.446] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.446] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0122.446] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec)) returned 1
	[0122.446] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0122.446] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103f8 | out: pbBuffer=0x124103f8) returned 1
	[0122.447] ReadFile (in: hFile=0x338, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.478] GetFileType (hFile=0x338) returned 0x1
	[0122.478] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.478] WriteFile (in: hFile=0x338, lpBuffer=0x126b4000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x126b4000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0122.478] GetFileType (hFile=0x338) returned 0x1
	[0122.478] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.479] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0122.479] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0122.479] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0122.479] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104e0 | out: pbBuffer=0x124104e0) returned 1
	[0122.479] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0122.479] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0122.479] WriteFile (in: hFile=0x340, lpBuffer=0x12456500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12456500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.491] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0122.493] CloseHandle (hObject=0x340) returned 1
	[0122.493] CloseHandle (hObject=0x338) returned 1
	[0122.493] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0122.506] SetEvent (hEvent=0x80) returned 1
	[0122.506] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), lpNewFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.507] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0123.114] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0123.114] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.114] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c)) returned 1
	[0123.114] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0123.114] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744010 | out: pbBuffer=0x12744010) returned 1
	[0123.114] ReadFile (in: hFile=0x2cc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x126e7d1c*=0x3a7c, lpOverlapped=0x0) returned 1
	[0123.246] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0123.249] GetFileType (hFile=0x2cc) returned 0x1
	[0123.250] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.250] WriteFile (in: hFile=0x2cc, lpBuffer=0x125f6000*, nNumberOfBytesToWrite=0x3a7c, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x125f6000*, lpNumberOfBytesWritten=0x126e7d00*=0x3a7c, lpOverlapped=0x126e7d0c) returned 1
	[0123.250] GetFileType (hFile=0x2cc) returned 0x1
	[0123.250] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x3a7c, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0123.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0123.251] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed081 | out: pbBuffer=0x124ed081) returned 1
	[0123.251] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251f2a8 | out: pbBuffer=0x1251f2a8) returned 1
	[0123.251] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.251] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.251] WriteFile (in: hFile=0x338, lpBuffer=0x12456f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12456f00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.251] CloseHandle (hObject=0x338) returned 1
	[0123.251] CloseHandle (hObject=0x2cc) returned 1
	[0123.251] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), lpNewFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.252] SetEvent (hEvent=0x318) returned 1
	[0123.252] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0123.540] SetEvent (hEvent=0x318) returned 1
	[0123.540] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0123.540] SetEvent (hEvent=0x318) returned 1
	[0123.540] SetEvent (hEvent=0x2e8) returned 1
	[0123.540] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0123.541] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0123.541] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60)) returned 1
	[0123.541] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0123.541] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0123.541] ReadFile (in: hFile=0x2cc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x126e5d1c*=0xbf60, lpOverlapped=0x0) returned 1
	[0123.701] SetEvent (hEvent=0xa0) returned 1
	[0123.702] GetFileType (hFile=0x2cc) returned 0x1
	[0123.702] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.702] WriteFile (in: hFile=0x2cc, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0xbf60, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x126e5d00*=0xbf60, lpOverlapped=0x126e5d0c) returned 1
	[0123.703] GetFileType (hFile=0x2cc) returned 0x1
	[0123.703] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xbf60, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.703] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0123.703] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0123.703] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0123.703] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0123.703] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0123.704] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0123.704] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.704] CloseHandle (hObject=0x2fc) returned 1
	[0123.704] CloseHandle (hObject=0x2cc) returned 1
	[0123.705] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.705] SetEvent (hEvent=0x2e8) returned 1
	[0123.705] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0123.706] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0123.706] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60)) returned 1
	[0123.706] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732560 | out: pbBuffer=0x12732560) returned 1
	[0123.706] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0123.706] ReadFile (in: hFile=0x2cc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0123.939] GetFileType (hFile=0x2cc) returned 0x1
	[0123.939] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.939] WriteFile (in: hFile=0x2cc, lpBuffer=0x128b8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x128b8000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0123.939] GetFileType (hFile=0x2cc) returned 0x1
	[0123.939] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0123.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0123.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0123.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788380 | out: pbBuffer=0x12788380) returned 1
	[0123.940] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0123.940] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0123.940] WriteFile (in: hFile=0x340, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.012] CloseHandle (hObject=0x340) returned 1
	[0124.135] CloseHandle (hObject=0x2cc) returned 1
	[0124.222] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.251] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0124.253] SetEvent (hEvent=0x68) returned 1
	[0124.253] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.253] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0124.253] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360)) returned 1
	[0124.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127332e0 | out: pbBuffer=0x127332e0) returned 1
	[0124.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127885e8 | out: pbBuffer=0x127885e8) returned 1
	[0124.253] ReadFile (in: hFile=0x340, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x126e7d1c*=0xb360, lpOverlapped=0x0) returned 1
	[0124.256] GetFileType (hFile=0x340) returned 0x1
	[0124.257] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.257] WriteFile (in: hFile=0x340, lpBuffer=0x12986000*, nNumberOfBytesToWrite=0xb360, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12986000*, lpNumberOfBytesWritten=0x126e7d00*=0xb360, lpOverlapped=0x126e7d0c) returned 1
	[0124.257] GetFileType (hFile=0x340) returned 0x1
	[0124.257] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xb360, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.257] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9681 | out: pbBuffer=0x127e9681) returned 1
	[0124.257] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9781 | out: pbBuffer=0x127e9781) returned 1
	[0124.258] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9881 | out: pbBuffer=0x127e9881) returned 1
	[0124.258] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127886a0 | out: pbBuffer=0x127886a0) returned 1
	[0124.258] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.258] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0124.258] WriteFile (in: hFile=0x33c, lpBuffer=0x12786f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12786f00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.258] CloseHandle (hObject=0x33c) returned 1
	[0124.259] CloseHandle (hObject=0x340) returned 1
	[0124.260] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.287] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0124.288] SetEvent (hEvent=0x318) returned 1
	[0124.289] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0124.289] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.289] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560)) returned 1
	[0124.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0124.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0124.289] ReadFile (in: hFile=0x2cc, lpBuffer=0x126ec000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ec000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.297] GetFileType (hFile=0x2cc) returned 0x1
	[0124.297] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.297] WriteFile (in: hFile=0x2cc, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0124.298] GetFileType (hFile=0x2cc) returned 0x1
	[0124.298] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.298] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0124.298] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0124.298] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0124.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0124.299] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.299] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.299] WriteFile (in: hFile=0x33c, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.299] CloseHandle (hObject=0x33c) returned 1
	[0124.300] CloseHandle (hObject=0x2cc) returned 1
	[0124.301] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.312] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0124.313] SetEvent (hEvent=0x318) returned 1
	[0124.314] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0124.314] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.314] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60)) returned 1
	[0124.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e640 | out: pbBuffer=0x1240e640) returned 1
	[0124.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441e8 | out: pbBuffer=0x127441e8) returned 1
	[0124.314] ReadFile (in: hFile=0x2cc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0xcd60, lpOverlapped=0x0) returned 1
	[0124.443] GetFileType (hFile=0x2cc) returned 0x1
	[0124.443] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.443] WriteFile (in: hFile=0x2cc, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0xcd60, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x124f5d00*=0xcd60, lpOverlapped=0x124f5d0c) returned 1
	[0124.443] GetFileType (hFile=0x2cc) returned 0x1
	[0124.443] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xcd60, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0124.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0124.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0124.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744420 | out: pbBuffer=0x12744420) returned 1
	[0124.444] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0124.444] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.444] WriteFile (in: hFile=0x328, lpBuffer=0x1245af00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245af00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.445] CloseHandle (hObject=0x328) returned 1
	[0124.445] CloseHandle (hObject=0x2cc) returned 1
	[0124.445] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.446] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160)) returned 1
	[0124.446] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60)) returned 1
	[0124.470] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0124.474] SetEvent (hEvent=0x2e8) returned 1
	[0124.474] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0124.477] SetEvent (hEvent=0x30c) returned 1
	[0124.478] SetEvent (hEvent=0x68) returned 1
	[0124.478] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0124.479] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0124.479] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0124.479] SetEvent (hEvent=0x2e4) returned 1
	[0124.480] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0124.512] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360)) returned 1
	[0124.523] SetEvent (hEvent=0x318) returned 1
	[0124.523] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160)) returned 1
	[0124.532] SetEvent (hEvent=0x2e4) returned 1
	[0124.532] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960)) returned 1
	[0124.543] SetEvent (hEvent=0x2e8) returned 1
	[0124.543] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560)) returned 1
	[0124.552] SetEvent (hEvent=0x318) returned 1
	[0124.552] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60)) returned 1
	[0124.586] SetEvent (hEvent=0x2e4) returned 1
	[0124.586] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60)) returned 1
	[0124.600] SetEvent (hEvent=0x2e8) returned 1
	[0124.600] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360)) returned 1
	[0124.625] SetEvent (hEvent=0xa0) returned 1
	[0124.625] SetEvent (hEvent=0x318) returned 1
	[0124.625] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960)) returned 1
	[0124.638] SetEvent (hEvent=0x2e4) returned 1
	[0124.638] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60)) returned 1
	[0124.665] SetEvent (hEvent=0x2e8) returned 1
	[0124.665] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0124.666] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0124.666] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0124.671] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
	[0124.677] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa2a9c700, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa2a9c700, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x110b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
	[0124.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0124.678] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0124.680] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0124.681] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0124.681] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.682] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0124.682] WriteFile (in: hFile=0x340, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0124.683] CloseHandle (hObject=0x340) returned 1
	[0124.684] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760)) returned 1
	[0124.686] SetEvent (hEvent=0x318) returned 1
	[0124.686] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960)) returned 1
	[0124.686] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960)) returned 1
	[0124.686] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.687] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.687] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xb960)) returned 1
	[0124.687] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e8e0 | out: pbBuffer=0x1240e8e0) returned 1
	[0124.687] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e050 | out: pbBuffer=0x1251e050) returned 1
	[0124.687] ReadFile (in: hFile=0x32c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f3d1c*=0xb960, lpOverlapped=0x0) returned 1
	[0124.694] GetFileType (hFile=0x32c) returned 0x1
	[0124.694] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.694] WriteFile (in: hFile=0x32c, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0xb960, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f3d00*=0xb960, lpOverlapped=0x124f3d0c) returned 1
	[0124.695] GetFileType (hFile=0x32c) returned 0x1
	[0124.695] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xb960, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0124.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0124.696] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0124.696] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0124.696] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.696] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.696] WriteFile (in: hFile=0x338, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.696] CloseHandle (hObject=0x338) returned 1
	[0124.697] CloseHandle (hObject=0x32c) returned 1
	[0124.697] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.698] SetEvent (hEvent=0x30c) returned 1
	[0124.698] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.698] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.698] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74912800, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x74912800, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x39960)) returned 1
	[0124.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240edc0 | out: pbBuffer=0x1240edc0) returned 1
	[0124.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e130 | out: pbBuffer=0x1251e130) returned 1
	[0124.698] ReadFile (in: hFile=0x32c, lpBuffer=0x126ec000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ec000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.725] GetFileType (hFile=0x32c) returned 0x1
	[0124.725] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.726] WriteFile (in: hFile=0x32c, lpBuffer=0x126b4000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x126b4000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0124.726] GetFileType (hFile=0x32c) returned 0x1
	[0124.727] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0124.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0124.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0124.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e7b8 | out: pbBuffer=0x1251e7b8) returned 1
	[0124.727] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0124.728] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.728] WriteFile (in: hFile=0x2cc, lpBuffer=0x12628500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.728] CloseHandle (hObject=0x2cc) returned 1
	[0124.728] CloseHandle (hObject=0x32c) returned 1
	[0124.728] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.730] SetEvent (hEvent=0x68) returned 1
	[0124.730] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.730] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.730] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160)) returned 1
	[0124.730] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f420 | out: pbBuffer=0x1240f420) returned 1
	[0124.730] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e7f0 | out: pbBuffer=0x1251e7f0) returned 1
	[0124.730] ReadFile (in: hFile=0x32c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f3d1c*=0xc160, lpOverlapped=0x0) returned 1
	[0124.740] GetFileType (hFile=0x32c) returned 0x1
	[0124.740] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.741] WriteFile (in: hFile=0x32c, lpBuffer=0x12878000*, nNumberOfBytesToWrite=0xc160, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12878000*, lpNumberOfBytesWritten=0x124f3d00*=0xc160, lpOverlapped=0x124f3d0c) returned 1
	[0124.741] GetFileType (hFile=0x32c) returned 0x1
	[0124.741] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xc160, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0124.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0124.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0124.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e8d8 | out: pbBuffer=0x1251e8d8) returned 1
	[0124.742] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.742] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.742] WriteFile (in: hFile=0x2fc, lpBuffer=0x12628a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.742] CloseHandle (hObject=0x2fc) returned 1
	[0124.743] CloseHandle (hObject=0x32c) returned 1
	[0124.743] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.744] SetEvent (hEvent=0x68) returned 1
	[0124.744] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.744] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.744] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560)) returned 1
	[0124.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f640 | out: pbBuffer=0x1240f640) returned 1
	[0124.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e900 | out: pbBuffer=0x1251e900) returned 1
	[0124.744] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0124.746] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0124.746] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0124.746] SetEvent (hEvent=0xa0) returned 1
	[0124.746] SetEvent (hEvent=0x68) returned 1
	[0124.746] ReadFile (in: hFile=0x32c, lpBuffer=0x12886000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12886000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.753] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0124.756] SetEvent (hEvent=0x2e4) returned 1
	[0124.756] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0124.782] SetEvent (hEvent=0x2e8) returned 1
	[0124.782] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.783] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.783] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60)) returned 1
	[0124.783] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e8e0 | out: pbBuffer=0x1240e8e0) returned 1
	[0124.783] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0124.783] ReadFile (in: hFile=0x2fc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x126e5d1c*=0x7b60, lpOverlapped=0x0) returned 1
	[0124.810] GetFileType (hFile=0x2fc) returned 0x1
	[0124.810] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.810] WriteFile (in: hFile=0x2fc, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x7b60, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x126e5d00*=0x7b60, lpOverlapped=0x126e5d0c) returned 1
	[0124.810] GetFileType (hFile=0x2fc) returned 0x1
	[0124.810] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x7b60, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.810] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0124.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0124.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0124.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0124.811] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0124.811] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.811] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.811] CloseHandle (hObject=0x2cc) returned 1
	[0124.812] CloseHandle (hObject=0x2fc) returned 1
	[0124.812] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.813] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1
	[0124.813] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160)) returned 1
	[0124.813] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.813] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.813] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x315ed100, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x315ed100, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2d60)) returned 1
	[0124.813] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240edc0 | out: pbBuffer=0x1240edc0) returned 1
	[0124.813] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0124.814] ReadFile (in: hFile=0x2fc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x126e5d1c*=0x2d60, lpOverlapped=0x0) returned 1
	[0124.863] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0124.948] SetEvent (hEvent=0x30c) returned 1
	[0124.950] GetFileType (hFile=0x2fc) returned 0x1
	[0124.950] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12650ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.950] WriteFile (in: hFile=0x2fc, lpBuffer=0x1284a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12650d00, lpOverlapped=0x12650d0c | out: lpBuffer=0x1284a000*, lpNumberOfBytesWritten=0x12650d00*=0x20000, lpOverlapped=0x12650d0c) returned 1
	[0124.951] GetFileType (hFile=0x2fc) returned 0x1
	[0124.951] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12650ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.951] SetEvent (hEvent=0x2e4) returned 1
	[0124.951] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.385] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.388] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.535] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.541] SetEvent (hEvent=0x68) returned 1
	[0125.541] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.544] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.550] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.574] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.591] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.598] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.605] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.612] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.619] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.635] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.653] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.836] SetEvent (hEvent=0x30c) returned 1
	[0125.837] SetEvent (hEvent=0x2e8) returned 1
	[0125.837] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0125.847] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.847] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0125.850] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.850] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0125.850] SetEvent (hEvent=0x30c) returned 1
	[0125.850] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0125.857] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.857] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.890] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.931] SetEvent (hEvent=0x2e8) returned 1
	[0125.931] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.932] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.932] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0125.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0125.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0125.932] ReadFile (in: hFile=0x338, lpBuffer=0x126d6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d6000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0125.952] GetFileType (hFile=0x338) returned 0x1
	[0125.952] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.952] WriteFile (in: hFile=0x338, lpBuffer=0x128fc000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x128fc000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0125.953] GetFileType (hFile=0x338) returned 0x1
	[0125.953] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0125.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0125.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0125.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0125.954] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.954] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.954] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.955] CloseHandle (hObject=0x340) returned 1
	[0125.955] CloseHandle (hObject=0x338) returned 1
	[0125.955] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.956] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0125.967] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0126.006] SetEvent (hEvent=0x2e8) returned 1
	[0126.006] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.006] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0126.006] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1
	[0126.006] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0126.006] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0126.007] ReadFile (in: hFile=0x2fc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.021] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0126.021] SetEvent (hEvent=0x2e8) returned 1
	[0126.022] GetFileType (hFile=0x2fc) returned 0x1
	[0126.023] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.023] WriteFile (in: hFile=0x2fc, lpBuffer=0x12818000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12818000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0126.023] GetFileType (hFile=0x2fc) returned 0x1
	[0126.023] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.024] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0126.024] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0126.024] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0126.025] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441b0 | out: pbBuffer=0x127441b0) returned 1
	[0126.025] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.025] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0126.025] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.025] CloseHandle (hObject=0x340) returned 1
	[0126.026] CloseHandle (hObject=0x2fc) returned 1
	[0126.026] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.027] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0126.030] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0126.030] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0126.030] SetEvent (hEvent=0x2e8) returned 1
	[0126.030] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0126.034] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0126.048] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0126.074] SetEvent (hEvent=0x318) returned 1
	[0126.074] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.075] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0126.075] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000)) returned 1
	[0126.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0126.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0126.075] ReadFile (in: hFile=0x338, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.103] GetFileType (hFile=0x338) returned 0x1
	[0126.103] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.104] WriteFile (in: hFile=0x338, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0126.104] GetFileType (hFile=0x338) returned 0x1
	[0126.104] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.105] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec101 | out: pbBuffer=0x124ec101) returned 1
	[0126.105] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0126.105] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec301 | out: pbBuffer=0x124ec301) returned 1
	[0126.105] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744228 | out: pbBuffer=0x12744228) returned 1
	[0126.105] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.105] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0126.105] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.106] CloseHandle (hObject=0x340) returned 1
	[0126.106] CloseHandle (hObject=0x338) returned 1
	[0126.106] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.107] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0126.177] SetEvent (hEvent=0x318) returned 1
	[0126.177] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.177] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0126.177] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0126.177] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732120 | out: pbBuffer=0x12732120) returned 1
	[0126.178] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0126.178] ReadFile (in: hFile=0x2fc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.202] GetFileType (hFile=0x2fc) returned 0x1
	[0126.202] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.202] WriteFile (in: hFile=0x2fc, lpBuffer=0x12818000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12818000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0126.202] GetFileType (hFile=0x2fc) returned 0x1
	[0126.203] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.203] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0126.203] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400601 | out: pbBuffer=0x12400601) returned 1
	[0126.203] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400801 | out: pbBuffer=0x12400801) returned 1
	[0126.203] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788190 | out: pbBuffer=0x12788190) returned 1
	[0126.203] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.204] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0126.204] WriteFile (in: hFile=0x340, lpBuffer=0x12456000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12456000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.204] CloseHandle (hObject=0x340) returned 1
	[0126.204] CloseHandle (hObject=0x2fc) returned 1
	[0126.204] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.205] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0126.220] SetEvent (hEvent=0x318) returned 1
	[0126.221] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.221] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0126.221] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000)) returned 1
	[0126.221] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732360 | out: pbBuffer=0x12732360) returned 1
	[0126.221] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881a8 | out: pbBuffer=0x127881a8) returned 1
	[0126.221] ReadFile (in: hFile=0x338, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.232] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0126.241] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0126.241] SetEvent (hEvent=0x30c) returned 1
	[0126.241] SetEvent (hEvent=0x318) returned 1
	[0126.242] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.242] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.242] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.242] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0126.242] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.242] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.242] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.242] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.243] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.243] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0126.243] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0126.245] CloseHandle (hObject=0x2cc) returned 1
	[0126.245] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.245] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.246] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.246] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.246] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0126.246] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.246] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.246] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.247] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.247] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.247] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0126.247] WriteFile (in: hFile=0x2cc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0126.249] CloseHandle (hObject=0x2cc) returned 1
	[0126.249] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.249] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.249] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.249] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a20bca0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a257f60, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a257f60, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.250] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9b1b00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7c9b1b00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7c9b1b00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0126.250] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0126.250] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.250] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.250] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.250] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.250] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.257] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0126.257] WriteFile (in: hFile=0x338, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0126.259] CloseHandle (hObject=0x338) returned 1
	[0126.259] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9b1b00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7c9b1b00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7c9b1b00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x554520)) returned 1
	[0126.260] SetEvent (hEvent=0x318) returned 1
	[0126.261] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0126.261] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.269] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.269] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.269] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.269] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0126.270] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.270] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.270] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.270] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.270] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.270] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0126.270] WriteFile (in: hFile=0x2fc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0126.272] CloseHandle (hObject=0x2fc) returned 1
	[0126.272] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.273] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.273] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.273] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.273] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0126.273] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.273] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.273] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.273] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.273] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.274] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0126.274] WriteFile (in: hFile=0x2fc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0126.287] CloseHandle (hObject=0x2fc) returned 1
	[0126.287] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.288] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.288] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69ee00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7b69ee00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7b69ee00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0126.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0126.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.288] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.288] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.288] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.289] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.299] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0126.299] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0126.301] CloseHandle (hObject=0x340) returned 1
	[0126.301] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69ee00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7b69ee00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7b69ee00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a)) returned 1
	[0126.301] SetEvent (hEvent=0x2e8) returned 1
	[0126.301] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0126.302] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.312] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.313] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.313] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.313] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0126.313] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.313] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.313] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.313] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.313] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.314] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0126.314] WriteFile (in: hFile=0x340, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0126.324] CloseHandle (hObject=0x340) returned 1
	[0126.324] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.340] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.340] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0126.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.341] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.341] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.341] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.341] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.341] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0126.341] WriteFile (in: hFile=0x2cc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0126.343] CloseHandle (hObject=0x2cc) returned 1
	[0126.344] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.380] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.380] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.380] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedc37f80, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedc37f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.380] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aae6600, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x8aae6600, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x8aae6600, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0126.380] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0126.381] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.381] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.381] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.381] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.381] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.416] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0126.416] WriteFile (in: hFile=0x338, lpBuffer=0x1276c000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x1276c000*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0126.417] CloseHandle (hObject=0x338) returned 1
	[0126.418] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aae6600, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x8aae6600, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x8aae6600, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418)) returned 1
	[0126.418] SetEvent (hEvent=0x318) returned 1
	[0126.418] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1
	[0126.456] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.457] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.457] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.457] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.457] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0126.457] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.457] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.457] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.457] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.457] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.458] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0126.458] WriteFile (in: hFile=0x340, lpBuffer=0x1276d300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1276d300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0126.505] CloseHandle (hObject=0x340) returned 1
	[0126.505] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.564] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.564] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.565] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.565] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0126.565] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.565] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.565] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.565] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.565] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.566] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0126.566] WriteFile (in: hFile=0x338, lpBuffer=0x1276e600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x1276e600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0126.568] CloseHandle (hObject=0x338) returned 1
	[0126.568] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.608] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.609] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.609] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.609] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884c0c00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x884c0c00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x884c0c00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0126.609] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0126.609] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.609] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.610] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.610] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.610] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.647] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0126.647] WriteFile (in: hFile=0x338, lpBuffer=0x1276f900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x1276f900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0126.648] CloseHandle (hObject=0x338) returned 1
	[0126.648] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884c0c00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x884c0c00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x884c0c00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1)) returned 1
	[0126.649] SetEvent (hEvent=0x318) returned 1
	[0126.649] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1
	[0126.649] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.689] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.690] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.690] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.690] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0126.690] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.690] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.690] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.690] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.690] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.691] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0126.691] WriteFile (in: hFile=0x2fc, lpBuffer=0x12770c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12770c00*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0126.693] CloseHandle (hObject=0x2fc) returned 1
	[0126.693] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.693] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.694] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0126.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.694] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.694] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.695] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.695] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.695] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0126.695] WriteFile (in: hFile=0x2fc, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0126.698] CloseHandle (hObject=0x2fc) returned 1
	[0126.698] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0126.736] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0126.736] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0126.736] SetEvent (hEvent=0xa0) returned 1
	[0126.736] SetEvent (hEvent=0x30c) returned 1
	[0126.736] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.737] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.737] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.737] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabbdf20, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x969a2800, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x969a2800, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x969a2800, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0126.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0126.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.738] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.738] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.738] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.738] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.783] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0126.783] WriteFile (in: hFile=0x2fc, lpBuffer=0x1245d300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x1245d300*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0126.785] CloseHandle (hObject=0x2fc) returned 1
	[0126.785] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x969a2800, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x969a2800, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x969a2800, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25)) returned 1
	[0126.785] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1
	[0126.870] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.910] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.910] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.910] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.911] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0126.911] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.911] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.911] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.911] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.911] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.912] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0126.912] WriteFile (in: hFile=0x340, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0126.913] CloseHandle (hObject=0x340) returned 1
	[0126.913] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.962] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.963] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0126.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.963] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.963] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.963] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.963] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.964] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0126.964] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245e600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x1245e600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0126.966] CloseHandle (hObject=0x2cc) returned 1
	[0126.966] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.966] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.966] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.966] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa9368710, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa938e870, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa938e870, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.967] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7f300, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xdae7f300, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xdae7f300, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0126.967] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0126.967] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.967] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.967] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.967] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.967] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0127.018] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0127.018] WriteFile (in: hFile=0x338, lpBuffer=0x1245f900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x1245f900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0127.019] CloseHandle (hObject=0x338) returned 1
	[0127.019] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7f300, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xdae7f300, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xdae7f300, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5)) returned 1
	[0127.059] SetEvent (hEvent=0x30c) returned 1
	[0127.059] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0127.097] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0127.097] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0127.097] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0127.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0127.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0127.097] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0127.098] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.098] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0127.098] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0127.098] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0127.098] WriteFile (in: hFile=0x2cc, lpBuffer=0x12460c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12460c00*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0127.100] CloseHandle (hObject=0x2cc) returned 1
	[0127.100] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0127.101] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0127.101] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0127.101] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.101] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0127.101] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0127.101] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0127.101] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.101] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0127.101] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0127.102] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0127.102] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0127.145] CloseHandle (hObject=0x2cc) returned 1
	[0127.145] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0127.185] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0127.186] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0127.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcc07b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcc07b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0127.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0127.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0127.186] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0127.186] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.186] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0127.186] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0127.314] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0127.314] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0127.315] CloseHandle (hObject=0x340) returned 1
	[0127.315] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520)) returned 1
	[0127.316] SetEvent (hEvent=0x30c) returned 1
	[0127.316] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0127.316] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0127.353] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0127.353] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0127.354] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.354] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfe3882c0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0127.354] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
	[0127.354] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0127.354] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0127.354] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.354] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0127.354] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0127.395] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0127.548] SetEvent (hEvent=0x2e4) returned 1
	[0127.548] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0127.548] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0127.581] SetEvent (hEvent=0x2e4) returned 1
	[0127.581] SetEvent (hEvent=0x2e8) returned 1
	[0127.582] GetFileType (hFile=0x340) returned 0x1
	[0127.582] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.582] WriteFile (in: hFile=0x340, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0127.583] GetFileType (hFile=0x340) returned 0x1
	[0127.583] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.583] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0127.584] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0127.584] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0127.584] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0127.584] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0127.584] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0127.584] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0127.622] CloseHandle (hObject=0x2fc) returned 1
	[0127.622] CloseHandle (hObject=0x340) returned 1
	[0127.622] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0127.623] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0127.663] SetEvent (hEvent=0x2e8) returned 1
	[0127.663] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0127.664] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0127.664] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfe3882c0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e)) returned 1
	[0127.664] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0127.664] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0127.664] ReadFile (in: hFile=0x340, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f1d1c*=0x28e, lpOverlapped=0x0) returned 1
	[0127.665] GetFileType (hFile=0x340) returned 0x1
	[0127.665] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.665] WriteFile (in: hFile=0x340, lpBuffer=0x127222c0*, nNumberOfBytesToWrite=0x28e, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127222c0*, lpNumberOfBytesWritten=0x124f1d00*=0x28e, lpOverlapped=0x124f1d0c) returned 1
	[0127.666] GetFileType (hFile=0x340) returned 0x1
	[0127.666] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x28e, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0127.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0127.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0127.667] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0127.667] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0127.667] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0127.667] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0127.667] CloseHandle (hObject=0x2fc) returned 1
	[0127.667] CloseHandle (hObject=0x340) returned 1
	[0127.667] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0127.668] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0127.669] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0127.669] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398)) returned 1
	[0127.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0127.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0127.669] ReadFile (in: hFile=0x340, lpBuffer=0x127ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0127.782] GetFileType (hFile=0x340) returned 0x1
	[0127.782] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.782] WriteFile (in: hFile=0x340, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0127.783] GetFileType (hFile=0x340) returned 0x1
	[0127.783] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.783] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0127.783] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0127.783] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0127.784] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0127.784] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0127.784] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0127.784] WriteFile (in: hFile=0x2fc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0127.893] CloseHandle (hObject=0x2fc) returned 1
	[0127.893] CloseHandle (hObject=0x340) returned 1
	[0127.893] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0127.894] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0127.894] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0127.894] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38)) returned 1
	[0127.894] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127326a0 | out: pbBuffer=0x127326a0) returned 1
	[0127.894] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0127.894] ReadFile (in: hFile=0x340, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0127.937] GetFileType (hFile=0x340) returned 0x1
	[0127.937] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.937] WriteFile (in: hFile=0x340, lpBuffer=0x12694000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12694000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0127.938] GetFileType (hFile=0x340) returned 0x1
	[0127.938] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.938] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0127.938] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0127.938] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0127.938] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0127.938] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0127.939] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0127.939] WriteFile (in: hFile=0x338, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0127.984] CloseHandle (hObject=0x338) returned 1
	[0127.985] CloseHandle (hObject=0x340) returned 1
	[0127.985] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0127.986] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0128.350] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0128.474] SetEvent (hEvent=0x30c) returned 1
	[0128.475] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0128.475] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0128.475] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30)) returned 1
	[0128.475] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732900 | out: pbBuffer=0x12732900) returned 1
	[0128.475] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788388 | out: pbBuffer=0x12788388) returned 1
	[0128.476] ReadFile (in: hFile=0x338, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0128.527] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0128.560] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0128.582] CreateFileW (lpFileName="C:\\ProgramData\\Templates" (normalized: "c:\\programdata\\templates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.582] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*", lpFindFileData=0x12629a44 | out: lpFindFileData=0x12629a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0128.582] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0128.593] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0128.607] SetEvent (hEvent=0x68) returned 1
	[0128.607] GetFileAttributesExW (in: lpFileName="C:\\System Volume Information" (normalized: "c:\\system volume information"), fInfoLevelId=0x0, lpFileInformation=0x124f7c84 | out: lpFileInformation=0x124f7c84*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0128.607] CreateFileW (lpFileName="C:\\System Volume Information" (normalized: "c:\\system volume information"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.607] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*", lpFindFileData=0x124f7b5c | out: lpFindFileData=0x124f7b5c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0128.608] GetFileAttributesExW (in: lpFileName="C:\\Users" (normalized: "c:\\users"), fInfoLevelId=0x0, lpFileInformation=0x124f7c84 | out: lpFileInformation=0x124f7c84*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0128.608] CreateFileW (lpFileName="C:\\Users" (normalized: "c:\\users"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.608] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x124f7b5c | out: lpFindFileData=0x124f7b5c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1
	[0128.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0128.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
	[0128.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1
	[0128.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0128.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1
	[0128.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.609] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\# M0rphine Help #.hta" (normalized: "c:\\users\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7824 | out: lpFileInformation=0x124f7824*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.609] CreateFileW (lpFileName="C:\\Users\\# M0rphine Help #.hta" (normalized: "c:\\users\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.609] CreateFileW (lpFileName="C:\\Users\\# M0rphine Help #.hta" (normalized: "c:\\users\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.609] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7a34 | out: lpMode=0x124f7a34) returned 0
	[0128.609] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7a34, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7a34*=0x1180, lpOverlapped=0x0) returned 1
	[0128.611] CloseHandle (hObject=0x2cc) returned 1
	[0128.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0128.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x124f7af8 | out: lpFindFileData=0x124f7af8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.611] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.611] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd235ac0, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xd235ac0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9c1b9c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9c1b9c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9cda0a0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9cda0a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3afd80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3afd80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f389c20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda1c2e00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda1c2e00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0128.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0128.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0128.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0128.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0128.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0128.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0128.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0128.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9ea3120, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ea3120, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0128.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.613] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f77c0 | out: lpFileInformation=0x124f77c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.614] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f79d0 | out: lpMode=0x124f79d0) returned 0
	[0128.614] WriteFile (in: hFile=0x2cc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f79d0, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f79d0*=0x1180, lpOverlapped=0x0) returned 1
	[0128.615] CloseHandle (hObject=0x2cc) returned 1
	[0128.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.616] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.616] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.616] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
	[0128.616] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
	[0128.616] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda4706c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda4706c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
	[0128.616] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.616] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.617] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0128.617] WriteFile (in: hFile=0x2cc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0128.618] CloseHandle (hObject=0x2cc) returned 1
	[0128.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0128.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.618] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65e16800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6adbe1a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6adbe1a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918, dwReserved0=0x0, dwReserved1=0x0, cFileName="GDIPFONTCACHEV1.DAT", cAlternateFileName="GDIPFO~1.DAT")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8de8eaa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x126da7, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~2")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x15488f40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x15488f40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1
	[0128.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.619] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.620] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0128.620] WriteFile (in: hFile=0x2cc, lpBuffer=0x127de000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x127de000*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0128.622] CloseHandle (hObject=0x2cc) returned 1
	[0128.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0128.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1
	[0128.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.623] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.623] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0128.623] WriteFile (in: hFile=0x2cc, lpBuffer=0x127df300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x127df300*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0128.626] CloseHandle (hObject=0x2cc) returned 1
	[0128.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.626] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.626] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.626] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0128.626] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.627] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.627] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0128.627] WriteFile (in: hFile=0x2cc, lpBuffer=0x127e0600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x127e0600*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0128.628] CloseHandle (hObject=0x2cc) returned 1
	[0128.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.629] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee135b70, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xee135b70, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt10.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1
	[0128.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt10.lst", cAlternateFileName="ADOBES~1.LST")) returned 1
	[0128.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0128.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1
	[0128.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1
	[0128.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.761] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.764] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0128.764] WriteFile (in: hFile=0x2cc, lpBuffer=0x127e1900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x127e1900*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0128.765] CloseHandle (hObject=0x2cc) returned 1
	[0128.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c)) returned 1
	[0128.766] SetEvent (hEvent=0x318) returned 1
	[0128.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb)) returned 1
	[0128.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.780] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.781] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xecb5bdd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.781] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt10.lst", cAlternateFileName="ACROFN~1.LST")) returned 1
	[0128.781] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.781] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.782] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0128.782] WriteFile (in: hFile=0x340, lpBuffer=0x127e2c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x127e2c00*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0128.783] CloseHandle (hObject=0x340) returned 1
	[0128.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4)) returned 1
	[0128.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.784] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0128.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xd9c071a0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x21cdb)) returned 1
	[0128.784] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c840 | out: pbBuffer=0x1244c840) returned 1
	[0128.784] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744660 | out: pbBuffer=0x12744660) returned 1
	[0128.784] ReadFile (in: hFile=0x340, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0128.804] GetFileType (hFile=0x340) returned 0x1
	[0128.804] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.804] WriteFile (in: hFile=0x340, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0128.805] GetFileType (hFile=0x340) returned 0x1
	[0128.805] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0128.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0128.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0128.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744718 | out: pbBuffer=0x12744718) returned 1
	[0128.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0128.806] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0128.806] WriteFile (in: hFile=0x33c, lpBuffer=0x12714a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12714a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.813] CloseHandle (hObject=0x33c) returned 1
	[0128.813] CloseHandle (hObject=0x340) returned 1
	[0128.814] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeSysFnt10.lst.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobesysfnt10.lst.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.827] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0128.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5)) returned 1
	[0128.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732440 | out: pbBuffer=0x12732440) returned 1
	[0128.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0128.827] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0128.846] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0128.846] SetEvent (hEvent=0xa0) returned 1
	[0128.846] SetEvent (hEvent=0x30c) returned 1
	[0128.846] SetEvent (hEvent=0x2e4) returned 1
	[0128.847] ReadFile (in: hFile=0x340, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x1242bd1c*=0x12ea5, lpOverlapped=0x0) returned 1
	[0128.850] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0128.852] SetEvent (hEvent=0x30c) returned 1
	[0128.852] GetFileType (hFile=0x340) returned 0x1
	[0128.852] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.852] WriteFile (in: hFile=0x340, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x12ea5, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x1242bd00*=0x12ea5, lpOverlapped=0x1242bd0c) returned 1
	[0128.852] GetFileType (hFile=0x340) returned 0x1
	[0128.852] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x12ea5, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.853] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0128.853] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0128.853] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0128.853] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e980 | out: pbBuffer=0x1251e980) returned 1
	[0128.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0128.853] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0128.854] WriteFile (in: hFile=0x32c, lpBuffer=0x12632f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12632f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.854] CloseHandle (hObject=0x32c) returned 1
	[0128.854] CloseHandle (hObject=0x340) returned 1
	[0128.854] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.855] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0128.855] SetEvent (hEvent=0x30c) returned 1
	[0128.855] SetEvent (hEvent=0x2e8) returned 1
	[0128.856] GetFileType (hFile=0x33c) returned 0x1
	[0128.856] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.856] WriteFile (in: hFile=0x33c, lpBuffer=0x1250d500*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1250d500*, lpNumberOfBytesWritten=0x124f3d00*=0x1400, lpOverlapped=0x124f3d0c) returned 1
	[0128.856] GetFileType (hFile=0x33c) returned 0x1
	[0128.856] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1400, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.856] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0128.857] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0128.857] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0128.857] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0128.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.857] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.857] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.857] CloseHandle (hObject=0x340) returned 1
	[0128.857] CloseHandle (hObject=0x33c) returned 1
	[0128.857] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.858] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.858] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.859] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1
	[0128.859] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1
	[0128.859] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.859] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0128.860] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0128.860] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0128.861] CloseHandle (hObject=0x33c) returned 1
	[0128.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74)) returned 1
	[0128.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x102a0)) returned 1
	[0128.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0128.863] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x124f7a84 | out: lpFileInformation=0x124f7a84) returned 1
	[0128.863] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x124f7a7c, dwBufferSize=0x8 | out: lpFileInformation=0x124f7a7c) returned 1
	[0128.863] CloseHandle (hObject=0x33c) returned 1
	[0128.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.864] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.864] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.864] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.0", cAlternateFileName="")) returned 1
	[0128.864] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.864] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0128.865] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0128.865] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0128.866] CloseHandle (hObject=0x33c) returned 1
	[0128.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.867] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.867] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.867] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65fb9720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65fb9720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65fb9720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
	[0128.867] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DQQ19BCJ.JAX", cAlternateFileName="")) returned 1
	[0128.867] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.867] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0128.868] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0128.868] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0128.869] CloseHandle (hObject=0x33c) returned 1
	[0128.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.870] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.870] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65f935c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65f935c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.870] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YVORLGOR.PNT", cAlternateFileName="")) returned 1
	[0128.870] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.870] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0128.871] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0128.871] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0128.872] CloseHandle (hObject=0x33c) returned 1
	[0128.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.879] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.891] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.891] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715", cAlternateFileName="CLICEX~1.000")) returned 1
	[0128.891] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec", cAlternateFileName="GOOGAP~1.000")) returned 1
	[0128.891] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x65f935c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 1
	[0128.891] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.891] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0128.894] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0128.894] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0128.895] CloseHandle (hObject=0x32c) returned 1
	[0128.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.903] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.904] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.904] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1
	[0128.904] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.904] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0128.921] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0128.921] WriteFile (in: hFile=0x338, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0128.923] CloseHandle (hObject=0x338) returned 1
	[0128.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58)) returned 1
	[0128.923] SetEvent (hEvent=0x30c) returned 1
	[0128.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.928] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.946] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a3a0420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a3a0420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.946] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe", cAlternateFileName="CLICKO~1.EXE")) returned 1
	[0128.946] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.cdf-ms", cAlternateFileName="")) returned 1
	[0128.946] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap.exe.manifest", cAlternateFileName="")) returned 1
	[0128.946] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.cdf-ms", cAlternateFileName="CLICKO~1.CDF")) returned 1
	[0128.946] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x0, dwReserved1=0x0, cFileName="clickonce_bootstrap_unsigned.manifest", cAlternateFileName="CLICKO~1.MAN")) returned 1
	[0128.946] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="")) returned 1
	[0128.946] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.946] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0128.951] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0128.951] WriteFile (in: hFile=0x338, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0128.952] CloseHandle (hObject=0x338) returned 1
	[0128.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3bb970e0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x1141ce)) returned 1
	[0128.953] SetEvent (hEvent=0x30c) returned 1
	[0128.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50)) returned 1
	[0128.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0)) returned 1
	[0128.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0128.954] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0128.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), fInfoLevelId=0x0, lpFileInformation=0x12629ad0 | out: lpFileInformation=0x12629ad0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a307ea0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c50)) returned 1
	[0128.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322a0 | out: pbBuffer=0x127322a0) returned 1
	[0128.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788318 | out: pbBuffer=0x12788318) returned 1
	[0128.954] ReadFile (in: hFile=0x338, lpBuffer=0x12596000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12629d1c, lpOverlapped=0x0 | out: lpBuffer=0x12596000*, lpNumberOfBytesRead=0x12629d1c*=0x3c50, lpOverlapped=0x0) returned 1
	[0128.959] GetFileType (hFile=0x338) returned 0x1
	[0128.959] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.959] WriteFile (in: hFile=0x338, lpBuffer=0x125f6000*, nNumberOfBytesToWrite=0x3c50, lpNumberOfBytesWritten=0x12629d00, lpOverlapped=0x12629d0c | out: lpBuffer=0x125f6000*, lpNumberOfBytesWritten=0x12629d00*=0x3c50, lpOverlapped=0x12629d0c) returned 1
	[0128.959] GetFileType (hFile=0x338) returned 0x1
	[0128.959] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x3c50, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.959] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400901 | out: pbBuffer=0x12400901) returned 1
	[0128.959] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0128.959] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0128.960] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127883e0 | out: pbBuffer=0x127883e0) returned 1
	[0128.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0128.960] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0128.960] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12629d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12629d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.960] CloseHandle (hObject=0x33c) returned 1
	[0128.960] CloseHandle (hObject=0x338) returned 1
	[0128.960] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0128.961] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0128.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x12629ad0 | out: lpFileInformation=0x12629ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42d0)) returned 1
	[0128.961] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732500 | out: pbBuffer=0x12732500) returned 1
	[0128.961] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127883f8 | out: pbBuffer=0x127883f8) returned 1
	[0128.962] ReadFile (in: hFile=0x338, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12629d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12629d1c*=0x42d0, lpOverlapped=0x0) returned 1
	[0128.970] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0128.986] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0128.991] SetEvent (hEvent=0x318) returned 1
	[0128.991] SetEvent (hEvent=0x2e8) returned 1
	[0128.992] GetFileType (hFile=0x338) returned 0x1
	[0128.992] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.992] WriteFile (in: hFile=0x338, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0x42d0, lpNumberOfBytesWritten=0x12629d00, lpOverlapped=0x12629d0c | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x12629d00*=0x42d0, lpOverlapped=0x12629d0c) returned 1
	[0128.992] GetFileType (hFile=0x338) returned 0x1
	[0128.992] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x42d0, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0128.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0128.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0128.993] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0128.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.993] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0128.993] WriteFile (in: hFile=0x2cc, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12629d0c, lpOverlapped=0x0 | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x12629d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.993] CloseHandle (hObject=0x2cc) returned 1
	[0128.993] CloseHandle (hObject=0x338) returned 1
	[0128.993] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.cdf-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0128.995] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1
	[0128.995] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0128.995] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0128.995] ReadFile (in: hFile=0x338, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f3d1c*=0xee0, lpOverlapped=0x0) returned 1
	[0129.008] GetFileType (hFile=0x338) returned 0x1
	[0129.008] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.008] WriteFile (in: hFile=0x338, lpBuffer=0x12636000*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12636000*, lpNumberOfBytesWritten=0x124f3d00*=0xee0, lpOverlapped=0x124f3d0c) returned 1
	[0129.009] GetFileType (hFile=0x338) returned 0x1
	[0129.009] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xee0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0129.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0129.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0129.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744350 | out: pbBuffer=0x12744350) returned 1
	[0129.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.010] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.010] WriteFile (in: hFile=0x32c, lpBuffer=0x12632500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12632500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.010] CloseHandle (hObject=0x32c) returned 1
	[0129.010] CloseHandle (hObject=0x338) returned 1
	[0129.010] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.cdf-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.011] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3bbf54b0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x4546)) returned 1
	[0129.011] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c4e0 | out: pbBuffer=0x1244c4e0) returned 1
	[0129.011] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744368 | out: pbBuffer=0x12744368) returned 1
	[0129.012] ReadFile (in: hFile=0x338, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x1242bd1c*=0x4546, lpOverlapped=0x0) returned 1
	[0129.012] GetFileType (hFile=0x338) returned 0x1
	[0129.012] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.012] WriteFile (in: hFile=0x338, lpBuffer=0x12614800*, nNumberOfBytesToWrite=0x4546, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12614800*, lpNumberOfBytesWritten=0x1242bd00*=0x4546, lpOverlapped=0x1242bd0c) returned 1
	[0129.012] GetFileType (hFile=0x338) returned 0x1
	[0129.012] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x4546, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.012] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0129.012] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0129.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0129.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744460 | out: pbBuffer=0x12744460) returned 1
	[0129.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.013] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.013] WriteFile (in: hFile=0x32c, lpBuffer=0x12632f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12632f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.013] CloseHandle (hObject=0x32c) returned 1
	[0129.013] CloseHandle (hObject=0x338) returned 1
	[0129.013] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.cdf-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.051] SetEvent (hEvent=0x68) returned 1
	[0129.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.051] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66051ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x66051ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9791f220, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1a918)) returned 1
	[0129.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0129.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e780 | out: pbBuffer=0x1251e780) returned 1
	[0129.051] ReadFile (in: hFile=0x340, lpBuffer=0x1292e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1292e000*, lpNumberOfBytesRead=0x1242bd1c*=0x1a918, lpOverlapped=0x0) returned 1
	[0129.071] GetFileType (hFile=0x340) returned 0x1
	[0129.071] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.071] WriteFile (in: hFile=0x340, lpBuffer=0x12694000*, nNumberOfBytesToWrite=0x1a918, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12694000*, lpNumberOfBytesWritten=0x1242bd00*=0x1a918, lpOverlapped=0x1242bd0c) returned 1
	[0129.071] GetFileType (hFile=0x340) returned 0x1
	[0129.071] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x1a918, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.072] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8401 | out: pbBuffer=0x127e8401) returned 1
	[0129.072] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8501 | out: pbBuffer=0x127e8501) returned 1
	[0129.072] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0129.072] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e898 | out: pbBuffer=0x1251e898) returned 1
	[0129.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.073] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.073] WriteFile (in: hFile=0x338, lpBuffer=0x12980000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12980000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.073] CloseHandle (hObject=0x338) returned 1
	[0129.073] CloseHandle (hObject=0x340) returned 1
	[0129.073] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\GDIPFONTCACHEV1.DAT.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\gdipfontcachev1.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.074] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.098] SetEvent (hEvent=0x2e4) returned 1
	[0129.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.099] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0129.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), fInfoLevelId=0x0, lpFileInformation=0x12629ad0 | out: lpFileInformation=0x12629ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5beda0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.099] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4a0 | out: pbBuffer=0x1240f4a0) returned 1
	[0129.099] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106b0 | out: pbBuffer=0x124106b0) returned 1
	[0129.099] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0129.100] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0129.100] SetEvent (hEvent=0x2e4) returned 1
	[0129.100] SetEvent (hEvent=0x2e8) returned 1
	[0129.100] ReadFile (in: hFile=0x338, lpBuffer=0x126ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12629d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ba000*, lpNumberOfBytesRead=0x12629d1c*=0x0, lpOverlapped=0x0) returned 1
	[0129.100] CloseHandle (hObject=0x338) returned 1
	[0129.101] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0129.105] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0129.106] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0129.106] SetEvent (hEvent=0x318) returned 1
	[0129.106] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0129.107] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0129.206] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0129.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0129.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0129.206] ReadFile (in: hFile=0x2cc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1277dd1c*=0x2000, lpOverlapped=0x0) returned 1
	[0129.263] GetFileType (hFile=0x2cc) returned 0x1
	[0129.263] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.263] WriteFile (in: hFile=0x2cc, lpBuffer=0x127ec000*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x1277dd00, lpOverlapped=0x1277dd0c | out: lpBuffer=0x127ec000*, lpNumberOfBytesWritten=0x1277dd00*=0x2000, lpOverlapped=0x1277dd0c) returned 1
	[0129.263] GetFileType (hFile=0x2cc) returned 0x1
	[0129.263] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x2000, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.264] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0129.264] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0129.264] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0129.264] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e500 | out: pbBuffer=0x1251e500) returned 1
	[0129.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0129.264] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.264] WriteFile (in: hFile=0x328, lpBuffer=0x1261e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1261e500*, lpNumberOfBytesWritten=0x1277dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.265] CloseHandle (hObject=0x328) returned 1
	[0129.265] CloseHandle (hObject=0x2cc) returned 1
	[0129.265] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d44890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6)) returned 1
	[0129.316] SetEvent (hEvent=0xa0) returned 1
	[0129.316] SetEvent (hEvent=0x2e4) returned 1
	[0129.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126)) returned 1
	[0129.333] SetEvent (hEvent=0x318) returned 1
	[0129.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.344] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.344] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0129.344] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
	[0129.344] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ad9940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
	[0129.344] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
	[0129.344] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
	[0129.344] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.345] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.347] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0129.347] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0129.349] CloseHandle (hObject=0x340) returned 1
	[0129.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82bed750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1
	[0129.350] SetEvent (hEvent=0x2e4) returned 1
	[0129.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0129.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ad9940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.363] SetEvent (hEvent=0x2e8) returned 1
	[0129.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a)) returned 1
	[0129.367] SetEvent (hEvent=0x68) returned 1
	[0129.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0129.381] SetEvent (hEvent=0x68) returned 1
	[0129.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.388] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.388] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.390] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0129.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
	[0129.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
	[0129.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
	[0129.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
	[0129.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.391] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.394] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0129.394] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0129.396] CloseHandle (hObject=0x340) returned 1
	[0129.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad)) returned 1
	[0129.396] SetEvent (hEvent=0x68) returned 1
	[0129.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824d3190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0129.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a)) returned 1
	[0129.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0129.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.397] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a)) returned 1
	[0129.398] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e400 | out: pbBuffer=0x1240e400) returned 1
	[0129.398] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410450 | out: pbBuffer=0x12410450) returned 1
	[0129.398] ReadFile (in: hFile=0x340, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1277dd1c*=0x9a, lpOverlapped=0x0) returned 1
	[0129.399] GetFileType (hFile=0x340) returned 0x1
	[0129.399] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.399] WriteFile (in: hFile=0x340, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0x1277dd00, lpOverlapped=0x1277dd0c | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x1277dd00*=0x9a, lpOverlapped=0x1277dd0c) returned 1
	[0129.399] GetFileType (hFile=0x340) returned 0x1
	[0129.399] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x9a, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.399] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0129.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0129.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0129.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410538 | out: pbBuffer=0x12410538) returned 1
	[0129.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.400] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.400] WriteFile (in: hFile=0x338, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x1277dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.401] CloseHandle (hObject=0x338) returned 1
	[0129.401] CloseHandle (hObject=0x340) returned 1
	[0129.401] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.402] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0129.402] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e6c0 | out: pbBuffer=0x1240e6c0) returned 1
	[0129.402] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410550 | out: pbBuffer=0x12410550) returned 1
	[0129.402] ReadFile (in: hFile=0x340, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1277dd1c*=0x29, lpOverlapped=0x0) returned 1
	[0129.404] GetFileType (hFile=0x340) returned 0x1
	[0129.404] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.404] WriteFile (in: hFile=0x340, lpBuffer=0x124660f0*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x1277dd00, lpOverlapped=0x1277dd0c | out: lpBuffer=0x124660f0*, lpNumberOfBytesWritten=0x1277dd00*=0x29, lpOverlapped=0x1277dd0c) returned 1
	[0129.404] GetFileType (hFile=0x340) returned 0x1
	[0129.404] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x29, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0129.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0129.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0129.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410638 | out: pbBuffer=0x12410638) returned 1
	[0129.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.405] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.405] WriteFile (in: hFile=0x338, lpBuffer=0x12612500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12612500*, lpNumberOfBytesWritten=0x1277dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.405] CloseHandle (hObject=0x338) returned 1
	[0129.406] CloseHandle (hObject=0x340) returned 1
	[0129.406] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.414] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.421] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.421] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1
	[0129.421] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1
	[0129.421] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1
	[0129.421] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1
	[0129.421] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="felcaaldnbdncclmgdcncolpebgiejap", cAlternateFileName="FELCAA~1")) returned 1
	[0129.421] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1
	[0129.421] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1
	[0129.421] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1
	[0129.421] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8399f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839a6a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839a6a40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1
	[0129.421] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.421] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.427] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.427] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.428] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0129.428] WriteFile (in: hFile=0x32c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0129.429] CloseHandle (hObject=0x32c) returned 1
	[0129.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85cca3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cf0550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cf0550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1
	[0129.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.432] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.433] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0129.433] WriteFile (in: hFile=0x32c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0129.435] CloseHandle (hObject=0x32c) returned 1
	[0129.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.437] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.439] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.439] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
	[0129.439] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
	[0129.439] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1
	[0129.439] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1
	[0129.439] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0129.439] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0129.439] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0129.439] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.439] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.442] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0129.442] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0129.445] CloseHandle (hObject=0x32c) returned 1
	[0129.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.447] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0129.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0129.450] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0129.451] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0129.451] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0129.451] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0129.451] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0129.451] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0129.451] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0129.451] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.451] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.454] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0129.454] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0129.456] CloseHandle (hObject=0x32c) returned 1
	[0129.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.457] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.457] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857953d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.457] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.457] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.457] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.458] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.458] WriteFile (in: hFile=0x32c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.460] CloseHandle (hObject=0x32c) returned 1
	[0129.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1
	[0129.461] SetEvent (hEvent=0x2e4) returned 1
	[0129.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.461] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.461] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.461] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.461] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.461] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.462] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.463] WriteFile (in: hFile=0x32c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.465] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.471] SetEvent (hEvent=0x2e4) returned 1
	[0129.471] CloseHandle (hObject=0x32c) returned 1
	[0129.472] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.472] SetEvent (hEvent=0x2e4) returned 1
	[0129.472] SetEvent (hEvent=0x68) returned 1
	[0129.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1
	[0129.474] SetEvent (hEvent=0x68) returned 1
	[0129.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.475] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.475] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.475] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.475] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.475] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.476] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.477] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.478] CloseHandle (hObject=0x32c) returned 1
	[0129.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0129.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.479] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.480] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.480] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.480] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.480] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.481] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.481] WriteFile (in: hFile=0x32c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.484] CloseHandle (hObject=0x32c) returned 1
	[0129.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0129.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.498] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.498] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.499] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.499] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.499] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.500] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.500] WriteFile (in: hFile=0x32c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.501] CloseHandle (hObject=0x32c) returned 1
	[0129.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0129.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.502] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.503] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.503] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.503] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.503] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.504] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.504] WriteFile (in: hFile=0x32c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.505] CloseHandle (hObject=0x32c) returned 1
	[0129.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1
	[0129.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.515] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bb530, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x857bb530, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.515] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.516] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.516] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.518] CloseHandle (hObject=0x32c) returned 1
	[0129.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857e35d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1
	[0129.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.530] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.530] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.531] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.531] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.533] CloseHandle (hObject=0x32c) returned 1
	[0129.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1
	[0129.534] SetEvent (hEvent=0x2e4) returned 1
	[0129.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.534] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.535] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.535] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.535] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.535] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.536] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.536] WriteFile (in: hFile=0x32c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.537] CloseHandle (hObject=0x32c) returned 1
	[0129.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0129.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.539] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859aa710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859aa710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.539] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.539] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.539] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.543] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.543] WriteFile (in: hFile=0x338, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.548] CloseHandle (hObject=0x338) returned 1
	[0129.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0129.550] SetEvent (hEvent=0x2e8) returned 1
	[0129.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.550] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.550] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.550] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.550] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.550] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.556] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.556] WriteFile (in: hFile=0x2fc, lpBuffer=0x12779300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12779300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.559] CloseHandle (hObject=0x2fc) returned 1
	[0129.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0129.561] SetEvent (hEvent=0x68) returned 1
	[0129.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.563] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.569] SetEvent (hEvent=0x2e8) returned 1
	[0129.569] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.569] SetEvent (hEvent=0x2e8) returned 1
	[0129.569] SetEvent (hEvent=0x2e4) returned 1
	[0129.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.569] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.569] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.570] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.570] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.570] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.570] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.570] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.572] CloseHandle (hObject=0x2fc) returned 1
	[0129.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1
	[0129.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.573] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859d0870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.573] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.573] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.573] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.574] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.574] WriteFile (in: hFile=0x2fc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.575] CloseHandle (hObject=0x2fc) returned 1
	[0129.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0129.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.586] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.587] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.587] WriteFile (in: hFile=0x2fc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.598] CloseHandle (hObject=0x2fc) returned 1
	[0129.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0129.599] SetEvent (hEvent=0x2e4) returned 1
	[0129.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.599] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.599] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.599] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.599] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.599] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.601] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.601] WriteFile (in: hFile=0x2fc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.602] CloseHandle (hObject=0x2fc) returned 1
	[0129.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0129.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.614] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.614] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f69d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x859f69d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.614] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.614] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.614] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.614] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.615] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.615] WriteFile (in: hFile=0x2fc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.618] CloseHandle (hObject=0x2fc) returned 1
	[0129.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1
	[0129.618] SetEvent (hEvent=0x2e8) returned 1
	[0129.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.619] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.620] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.620] WriteFile (in: hFile=0x2fc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.622] CloseHandle (hObject=0x2fc) returned 1
	[0129.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123)) returned 1
	[0129.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.635] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.635] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.636] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.636] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.636] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.637] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.637] WriteFile (in: hFile=0x2fc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.638] CloseHandle (hObject=0x2fc) returned 1
	[0129.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0129.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1cb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a1cb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.640] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.641] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.641] WriteFile (in: hFile=0x2fc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.643] CloseHandle (hObject=0x2fc) returned 1
	[0129.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1
	[0129.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.653] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.653] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.653] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.653] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.653] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.654] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.654] WriteFile (in: hFile=0x340, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.657] CloseHandle (hObject=0x340) returned 1
	[0129.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0129.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.658] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.658] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.658] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.658] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.660] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.660] WriteFile (in: hFile=0x340, lpBuffer=0x12779300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12779300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.661] CloseHandle (hObject=0x340) returned 1
	[0129.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1
	[0129.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.679] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a42c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a42c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.680] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.681] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.681] WriteFile (in: hFile=0x2fc, lpBuffer=0x1277a600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1277a600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.683] CloseHandle (hObject=0x2fc) returned 1
	[0129.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0129.684] SetEvent (hEvent=0x68) returned 1
	[0129.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.684] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.684] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.684] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.684] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.685] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.685] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.686] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.686] WriteFile (in: hFile=0x2fc, lpBuffer=0x1277b900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1277b900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.687] CloseHandle (hObject=0x2fc) returned 1
	[0129.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1
	[0129.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.690] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.726] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.737] SetEvent (hEvent=0x68) returned 1
	[0129.748] SetEvent (hEvent=0x2e8) returned 1
	[0129.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.751] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x128e7d0c | out: lpMode=0x128e7d0c) returned 0
	[0129.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x128e7ad0 | out: lpFileInformation=0x128e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1
	[0129.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0129.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0129.754] ReadFile (in: hFile=0x2fc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x128e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x128e7d1c*=0xe4, lpOverlapped=0x0) returned 1
	[0129.764] GetFileType (hFile=0x2fc) returned 0x1
	[0129.765] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x128e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.765] WriteFile (in: hFile=0x2fc, lpBuffer=0x1298e0f0*, nNumberOfBytesToWrite=0xe4, lpNumberOfBytesWritten=0x128e7d00, lpOverlapped=0x128e7d0c | out: lpBuffer=0x1298e0f0*, lpNumberOfBytesWritten=0x128e7d00*=0xe4, lpOverlapped=0x128e7d0c) returned 1
	[0129.765] GetFileType (hFile=0x2fc) returned 0x1
	[0129.765] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xe4, lpNewFilePointer=0x0, dwMoveMethod=0x128e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.765] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0129.765] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0129.766] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0129.766] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0129.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.766] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x128e7d0c | out: lpMode=0x128e7d0c) returned 0
	[0129.766] WriteFile (in: hFile=0x340, lpBuffer=0x128da500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x128e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x128da500*, lpNumberOfBytesWritten=0x128e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.766] CloseHandle (hObject=0x340) returned 1
	[0129.767] CloseHandle (hObject=0x2fc) returned 1
	[0129.767] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.768] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.768] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a68df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a68df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.768] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.768] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.768] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.769] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.769] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.771] CloseHandle (hObject=0x2fc) returned 1
	[0129.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a6a560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1
	[0129.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a68df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.772] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.773] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.773] WriteFile (in: hFile=0x2fc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.775] CloseHandle (hObject=0x2fc) returned 1
	[0129.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0129.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.791] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.791] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.791] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.791] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.792] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.792] WriteFile (in: hFile=0x2fc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.794] CloseHandle (hObject=0x2fc) returned 1
	[0129.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0129.794] SetEvent (hEvent=0x2e8) returned 1
	[0129.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.795] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.795] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.795] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.795] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.796] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.796] WriteFile (in: hFile=0x2fc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.797] CloseHandle (hObject=0x2fc) returned 1
	[0129.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1
	[0129.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.812] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85a8ef50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.812] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.812] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.812] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.813] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.813] WriteFile (in: hFile=0x2fc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.814] CloseHandle (hObject=0x2fc) returned 1
	[0129.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0129.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.815] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.815] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.815] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.815] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.816] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.816] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.816] WriteFile (in: hFile=0x2fc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.823] CloseHandle (hObject=0x2fc) returned 1
	[0129.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0129.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.844] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.844] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab50b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ab50b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.844] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.844] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.844] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.845] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.845] WriteFile (in: hFile=0x2fc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.847] CloseHandle (hObject=0x2fc) returned 1
	[0129.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0129.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.848] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.848] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.848] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.848] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.848] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.848] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.848] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.848] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.849] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.849] WriteFile (in: hFile=0x2fc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.850] CloseHandle (hObject=0x2fc) returned 1
	[0129.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0129.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.865] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.865] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.865] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.865] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.866] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.866] WriteFile (in: hFile=0x2fc, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.868] CloseHandle (hObject=0x2fc) returned 1
	[0129.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1
	[0129.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.869] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.869] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.869] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.869] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.870] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.870] WriteFile (in: hFile=0x2fc, lpBuffer=0x1276f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.906] CloseHandle (hObject=0x2fc) returned 1
	[0129.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1
	[0129.908] SetEvent (hEvent=0x68) returned 1
	[0129.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.920] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.920] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85adb210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85adb210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.920] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.920] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.921] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.928] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.928] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.933] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.938] SetEvent (hEvent=0x2e8) returned 1
	[0129.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.939] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0129.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0129.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0129.939] ReadFile (in: hFile=0x340, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f5d1c*=0xdf, lpOverlapped=0x0) returned 1
	[0129.941] GetFileType (hFile=0x340) returned 0x1
	[0129.941] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.941] WriteFile (in: hFile=0x340, lpBuffer=0x12648000*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12648000*, lpNumberOfBytesWritten=0x124f5d00*=0xdf, lpOverlapped=0x124f5d0c) returned 1
	[0129.942] GetFileType (hFile=0x340) returned 0x1
	[0129.942] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xdf, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.942] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0129.943] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0129.943] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0129.943] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0129.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.943] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.943] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.946] CloseHandle (hObject=0x33c) returned 1
	[0129.946] CloseHandle (hObject=0x340) returned 1
	[0129.948] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.955] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.960] SetEvent (hEvent=0x2e8) returned 1
	[0129.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.960] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0129.961] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0129.961] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0129.961] ReadFile (in: hFile=0x2fc, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x1242bd1c*=0xe2, lpOverlapped=0x0) returned 1
	[0129.962] GetFileType (hFile=0x2fc) returned 0x1
	[0129.962] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.962] WriteFile (in: hFile=0x2fc, lpBuffer=0x124fa000*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124fa000*, lpNumberOfBytesWritten=0x1242bd00*=0xe2, lpOverlapped=0x1242bd0c) returned 1
	[0129.964] GetFileType (hFile=0x2fc) returned 0x1
	[0129.964] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.964] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0129.964] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0129.964] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0129.965] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0129.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.965] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.965] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.967] CloseHandle (hObject=0x340) returned 1
	[0129.967] CloseHandle (hObject=0x2fc) returned 1
	[0129.969] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.976] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0129.982] SetEvent (hEvent=0x2e8) returned 1
	[0129.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.982] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0129.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0129.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0129.982] ReadFile (in: hFile=0x33c, lpBuffer=0x128de000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128de000*, lpNumberOfBytesRead=0x124f5d1c*=0xdd, lpOverlapped=0x0) returned 1
	[0129.984] GetFileType (hFile=0x33c) returned 0x1
	[0129.984] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.984] WriteFile (in: hFile=0x33c, lpBuffer=0x12648620*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12648620*, lpNumberOfBytesWritten=0x124f5d00*=0xdd, lpOverlapped=0x124f5d0c) returned 1
	[0129.986] GetFileType (hFile=0x33c) returned 0x1
	[0129.986] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xdd, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.986] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0129.986] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0129.986] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0129.986] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445f0 | out: pbBuffer=0x127445f0) returned 1
	[0129.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.987] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.987] WriteFile (in: hFile=0x2fc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.989] CloseHandle (hObject=0x2fc) returned 1
	[0129.989] CloseHandle (hObject=0x33c) returned 1
	[0129.991] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.999] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.004] SetEvent (hEvent=0x2e8) returned 1
	[0130.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.005] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0130.005] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb20 | out: pbBuffer=0x1244cb20) returned 1
	[0130.005] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744608 | out: pbBuffer=0x12744608) returned 1
	[0130.005] ReadFile (in: hFile=0x340, lpBuffer=0x1295e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1295e000*, lpNumberOfBytesRead=0x1242bd1c*=0xed, lpOverlapped=0x0) returned 1
	[0130.006] GetFileType (hFile=0x340) returned 0x1
	[0130.006] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.006] WriteFile (in: hFile=0x340, lpBuffer=0x124fa0f0*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124fa0f0*, lpNumberOfBytesWritten=0x1242bd00*=0xed, lpOverlapped=0x1242bd0c) returned 1
	[0130.008] GetFileType (hFile=0x340) returned 0x1
	[0130.008] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xed, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0130.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0130.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0130.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446c0 | out: pbBuffer=0x127446c0) returned 1
	[0130.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.009] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.009] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.011] CloseHandle (hObject=0x33c) returned 1
	[0130.011] CloseHandle (hObject=0x340) returned 1
	[0130.013] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.021] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.025] SetEvent (hEvent=0x2e8) returned 1
	[0130.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.026] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0130.026] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd40 | out: pbBuffer=0x1244cd40) returned 1
	[0130.026] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446d8 | out: pbBuffer=0x127446d8) returned 1
	[0130.026] ReadFile (in: hFile=0x2fc, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f5d1c*=0xd1, lpOverlapped=0x0) returned 1
	[0130.028] GetFileType (hFile=0x2fc) returned 0x1
	[0130.028] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.028] WriteFile (in: hFile=0x2fc, lpBuffer=0x12648c40*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12648c40*, lpNumberOfBytesWritten=0x124f5d00*=0xd1, lpOverlapped=0x124f5d0c) returned 1
	[0130.032] GetFileType (hFile=0x2fc) returned 0x1
	[0130.032] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd1, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0130.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0130.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0130.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127447a0 | out: pbBuffer=0x127447a0) returned 1
	[0130.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.033] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.033] WriteFile (in: hFile=0x33c, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.035] CloseHandle (hObject=0x33c) returned 1
	[0130.035] CloseHandle (hObject=0x2fc) returned 1
	[0130.037] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.043] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.048] SetEvent (hEvent=0x2e4) returned 1
	[0130.048] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.078] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1
	[0130.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0130.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0130.079] ReadFile (in: hFile=0x32c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f5d1c*=0x2d5, lpOverlapped=0x0) returned 1
	[0130.089] GetFileType (hFile=0x32c) returned 0x1
	[0130.089] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.090] WriteFile (in: hFile=0x32c, lpBuffer=0x1260a300*, nNumberOfBytesToWrite=0x2d5, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260a300*, lpNumberOfBytesWritten=0x124f5d00*=0x2d5, lpOverlapped=0x124f5d0c) returned 1
	[0130.090] GetFileType (hFile=0x32c) returned 0x1
	[0130.090] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x2d5, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0130.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0130.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0130.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0130.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.091] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.091] WriteFile (in: hFile=0x33c, lpBuffer=0x127d6000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d6000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.091] CloseHandle (hObject=0x33c) returned 1
	[0130.095] CloseHandle (hObject=0x32c) returned 1
	[0130.125] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.207] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0130.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1
	[0130.207] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0130.207] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0130.207] ReadFile (in: hFile=0x2fc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12429d1c*=0xd0, lpOverlapped=0x0) returned 1
	[0130.209] GetFileType (hFile=0x2fc) returned 0x1
	[0130.209] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.209] WriteFile (in: hFile=0x2fc, lpBuffer=0x12786000*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12786000*, lpNumberOfBytesWritten=0x12429d00*=0xd0, lpOverlapped=0x12429d0c) returned 1
	[0130.209] GetFileType (hFile=0x2fc) returned 0x1
	[0130.209] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0130.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0130.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0130.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0130.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.210] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0130.210] WriteFile (in: hFile=0x340, lpBuffer=0x125fa500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fa500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.210] CloseHandle (hObject=0x340) returned 1
	[0130.210] CloseHandle (hObject=0x2fc) returned 1
	[0130.210] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.211] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.222] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.229] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0130.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0130.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0130.230] ReadFile (in: hFile=0x338, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f5d1c*=0xce, lpOverlapped=0x0) returned 1
	[0130.265] GetFileType (hFile=0x338) returned 0x1
	[0130.265] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.265] WriteFile (in: hFile=0x338, lpBuffer=0x12636000*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12636000*, lpNumberOfBytesWritten=0x124f5d00*=0xce, lpOverlapped=0x124f5d0c) returned 1
	[0130.267] GetFileType (hFile=0x338) returned 0x1
	[0130.267] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xce, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0130.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0130.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0130.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0130.268] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.268] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.268] WriteFile (in: hFile=0x33c, lpBuffer=0x1277e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277e000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.271] CloseHandle (hObject=0x33c) returned 1
	[0130.271] CloseHandle (hObject=0x338) returned 1
	[0130.276] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.282] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.285] SetEvent (hEvent=0x68) returned 1
	[0130.286] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.286] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0130.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4a0 | out: pbBuffer=0x1252e4a0) returned 1
	[0130.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0130.286] ReadFile (in: hFile=0x2fc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0xd8, lpOverlapped=0x0) returned 1
	[0130.287] GetFileType (hFile=0x2fc) returned 0x1
	[0130.287] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.287] WriteFile (in: hFile=0x2fc, lpBuffer=0x127ea540*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127ea540*, lpNumberOfBytesWritten=0x124f3d00*=0xd8, lpOverlapped=0x124f3d0c) returned 1
	[0130.289] GetFileType (hFile=0x2fc) returned 0x1
	[0130.289] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0130.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0130.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0130.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0130.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.290] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.290] WriteFile (in: hFile=0x340, lpBuffer=0x12626a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.292] CloseHandle (hObject=0x340) returned 1
	[0130.292] CloseHandle (hObject=0x2fc) returned 1
	[0130.293] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.300] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.301] SetEvent (hEvent=0x2e8) returned 1
	[0130.301] SetEvent (hEvent=0x68) returned 1
	[0130.301] WriteFile (in: hFile=0x33c, lpBuffer=0x12770600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12770600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.302] CloseHandle (hObject=0x33c) returned 1
	[0130.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0130.304] SetEvent (hEvent=0x68) returned 1
	[0130.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.305] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.305] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.305] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.305] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.305] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.308] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.308] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.311] CloseHandle (hObject=0x340) returned 1
	[0130.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0130.311] SetEvent (hEvent=0x2e8) returned 1
	[0130.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.312] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.312] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.312] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.312] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.312] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.315] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.315] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.318] CloseHandle (hObject=0x340) returned 1
	[0130.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117)) returned 1
	[0130.321] SetEvent (hEvent=0x68) returned 1
	[0130.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.322] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.322] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.325] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.325] WriteFile (in: hFile=0x2fc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.359] CloseHandle (hObject=0x2fc) returned 1
	[0130.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1
	[0130.360] SetEvent (hEvent=0x2e8) returned 1
	[0130.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.361] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.361] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.361] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.361] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.361] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.366] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.366] WriteFile (in: hFile=0x2fc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.369] CloseHandle (hObject=0x2fc) returned 1
	[0130.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0130.371] SetEvent (hEvent=0x68) returned 1
	[0130.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.372] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.372] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.372] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.372] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.376] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.376] WriteFile (in: hFile=0x340, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.379] CloseHandle (hObject=0x340) returned 1
	[0130.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0130.380] SetEvent (hEvent=0x2e8) returned 1
	[0130.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.381] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.381] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.381] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.381] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.385] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.385] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.388] CloseHandle (hObject=0x340) returned 1
	[0130.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0130.391] SetEvent (hEvent=0x68) returned 1
	[0130.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.391] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.391] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.395] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.395] WriteFile (in: hFile=0x2fc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.398] CloseHandle (hObject=0x2fc) returned 1
	[0130.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1
	[0130.399] SetEvent (hEvent=0x2e8) returned 1
	[0130.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.399] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.399] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.400] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.400] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.410] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.410] WriteFile (in: hFile=0x2fc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.413] CloseHandle (hObject=0x2fc) returned 1
	[0130.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1
	[0130.416] SetEvent (hEvent=0x68) returned 1
	[0130.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.416] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.416] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.416] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.416] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.416] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.420] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.420] WriteFile (in: hFile=0x340, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.423] CloseHandle (hObject=0x340) returned 1
	[0130.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0130.424] SetEvent (hEvent=0x2e8) returned 1
	[0130.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.425] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.425] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.425] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.425] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.425] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.429] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.429] WriteFile (in: hFile=0x340, lpBuffer=0x1276f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.433] CloseHandle (hObject=0x340) returned 1
	[0130.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1
	[0130.435] SetEvent (hEvent=0x68) returned 1
	[0130.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.436] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.436] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.436] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.436] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.441] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.441] SetEvent (hEvent=0x30c) returned 1
	[0130.441] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0130.442] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0130.443] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0130.443] SetEvent (hEvent=0x318) returned 1
	[0130.443] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0130.444] WriteFile (in: hFile=0x2fc, lpBuffer=0x12771900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12771900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.447] CloseHandle (hObject=0x2fc) returned 1
	[0130.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0130.448] SetEvent (hEvent=0x318) returned 1
	[0130.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.448] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.449] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.452] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.452] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.455] CloseHandle (hObject=0x33c) returned 1
	[0130.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc3)) returned 1
	[0130.458] SetEvent (hEvent=0x68) returned 1
	[0130.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.458] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.458] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.459] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.459] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.459] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.463] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.463] WriteFile (in: hFile=0x2fc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.466] CloseHandle (hObject=0x2fc) returned 1
	[0130.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0130.467] SetEvent (hEvent=0x318) returned 1
	[0130.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.468] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.468] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.468] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.468] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.468] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.473] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.473] WriteFile (in: hFile=0x2fc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.477] CloseHandle (hObject=0x2fc) returned 1
	[0130.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0130.480] SetEvent (hEvent=0x68) returned 1
	[0130.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.481] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.481] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.486] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.486] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.489] CloseHandle (hObject=0x33c) returned 1
	[0130.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1
	[0130.489] SetEvent (hEvent=0x318) returned 1
	[0130.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.490] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.490] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.490] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.490] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.494] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.494] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.498] CloseHandle (hObject=0x33c) returned 1
	[0130.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0130.501] SetEvent (hEvent=0x68) returned 1
	[0130.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.502] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.502] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.502] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.502] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.507] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.507] WriteFile (in: hFile=0x2fc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.510] CloseHandle (hObject=0x2fc) returned 1
	[0130.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a)) returned 1
	[0130.512] SetEvent (hEvent=0x318) returned 1
	[0130.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.512] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.512] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.512] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.512] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.512] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.513] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.517] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.517] WriteFile (in: hFile=0x2fc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.521] CloseHandle (hObject=0x2fc) returned 1
	[0130.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0130.524] SetEvent (hEvent=0x68) returned 1
	[0130.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.524] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.524] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.524] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.525] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.525] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.529] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.529] WriteFile (in: hFile=0x33c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.534] CloseHandle (hObject=0x33c) returned 1
	[0130.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1
	[0130.535] SetEvent (hEvent=0x318) returned 1
	[0130.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.535] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.535] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.535] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.535] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.536] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.540] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.540] WriteFile (in: hFile=0x33c, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.544] CloseHandle (hObject=0x33c) returned 1
	[0130.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1
	[0130.547] SetEvent (hEvent=0x68) returned 1
	[0130.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.548] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.548] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.548] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.548] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.548] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.553] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.553] WriteFile (in: hFile=0x2fc, lpBuffer=0x1276f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.557] CloseHandle (hObject=0x2fc) returned 1
	[0130.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1
	[0130.558] SetEvent (hEvent=0x318) returned 1
	[0130.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.558] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.559] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.559] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.559] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.559] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.565] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.566] SetEvent (hEvent=0x30c) returned 1
	[0130.566] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0130.567] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0130.569] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0130.569] SetEvent (hEvent=0x2e8) returned 1
	[0130.569] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0130.595] WriteFile (in: hFile=0x2fc, lpBuffer=0x12770600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12770600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.597] CloseHandle (hObject=0x2fc) returned 1
	[0130.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0130.599] SetEvent (hEvent=0x68) returned 1
	[0130.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.600] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.600] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.600] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.600] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.600] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.604] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.604] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.606] CloseHandle (hObject=0x33c) returned 1
	[0130.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1
	[0130.607] SetEvent (hEvent=0x2e8) returned 1
	[0130.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.607] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.608] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.611] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.611] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.614] CloseHandle (hObject=0x33c) returned 1
	[0130.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0130.616] SetEvent (hEvent=0x68) returned 1
	[0130.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.617] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.617] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.617] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.617] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.620] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.620] WriteFile (in: hFile=0x340, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.623] CloseHandle (hObject=0x340) returned 1
	[0130.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1
	[0130.624] SetEvent (hEvent=0x2e8) returned 1
	[0130.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.624] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.624] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.624] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.624] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.628] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.628] WriteFile (in: hFile=0x340, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.632] CloseHandle (hObject=0x340) returned 1
	[0130.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0130.642] SetEvent (hEvent=0x68) returned 1
	[0130.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.643] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.643] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.643] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.643] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.643] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.647] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.647] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.651] CloseHandle (hObject=0x33c) returned 1
	[0130.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0130.652] SetEvent (hEvent=0x2e8) returned 1
	[0130.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.656] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.656] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0130.656] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0130.656] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.656] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.662] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0130.662] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0130.664] CloseHandle (hObject=0x33c) returned 1
	[0130.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1
	[0130.666] SetEvent (hEvent=0x68) returned 1
	[0130.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1
	[0130.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8d)) returned 1
	[0130.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f)) returned 1
	[0130.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.667] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8d)) returned 1
	[0130.668] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3a0 | out: pbBuffer=0x1240e3a0) returned 1
	[0130.668] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0130.668] ReadFile (in: hFile=0x33c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f5d1c*=0xc8d, lpOverlapped=0x0) returned 1
	[0130.674] GetFileType (hFile=0x33c) returned 0x1
	[0130.674] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.674] WriteFile (in: hFile=0x33c, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0xc8d, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x124f5d00*=0xc8d, lpOverlapped=0x124f5d0c) returned 1
	[0130.680] GetFileType (hFile=0x33c) returned 0x1
	[0130.680] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xc8d, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0130.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0130.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0130.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e840 | out: pbBuffer=0x1251e840) returned 1
	[0130.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0130.680] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.680] WriteFile (in: hFile=0x328, lpBuffer=0x1262e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262e500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.683] CloseHandle (hObject=0x328) returned 1
	[0130.683] CloseHandle (hObject=0x33c) returned 1
	[0130.686] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.689] SetEvent (hEvent=0x80) returned 1
	[0130.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.689] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1
	[0130.689] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732080 | out: pbBuffer=0x12732080) returned 1
	[0130.689] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744180 | out: pbBuffer=0x12744180) returned 1
	[0130.689] ReadFile (in: hFile=0x338, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0x5c, lpOverlapped=0x0) returned 1
	[0130.691] GetFileType (hFile=0x338) returned 0x1
	[0130.691] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.691] WriteFile (in: hFile=0x338, lpBuffer=0x12456060*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12456060*, lpNumberOfBytesWritten=0x124f5d00*=0x5c, lpOverlapped=0x124f5d0c) returned 1
	[0130.691] GetFileType (hFile=0x338) returned 0x1
	[0130.691] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x5c, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.691] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0130.691] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0130.691] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0130.691] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744388 | out: pbBuffer=0x12744388) returned 1
	[0130.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.691] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.691] WriteFile (in: hFile=0x2fc, lpBuffer=0x127e2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.692] CloseHandle (hObject=0x2fc) returned 1
	[0130.693] CloseHandle (hObject=0x338) returned 1
	[0130.694] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.749] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.759] SetEvent (hEvent=0x80) returned 1
	[0130.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.760] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1
	[0130.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0130.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0130.760] ReadFile (in: hFile=0x340, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x1242bd1c*=0x116, lpOverlapped=0x0) returned 1
	[0130.762] GetFileType (hFile=0x340) returned 0x1
	[0130.762] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.763] WriteFile (in: hFile=0x340, lpBuffer=0x1272d200*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1272d200*, lpNumberOfBytesWritten=0x1242bd00*=0x116, lpOverlapped=0x1242bd0c) returned 1
	[0130.763] GetFileType (hFile=0x340) returned 0x1
	[0130.763] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x116, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.763] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0130.763] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0130.763] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0130.764] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0130.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.764] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.764] WriteFile (in: hFile=0x33c, lpBuffer=0x1262ea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262ea00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.764] CloseHandle (hObject=0x33c) returned 1
	[0130.764] CloseHandle (hObject=0x340) returned 1
	[0130.764] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.766] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f)) returned 1
	[0130.766] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0130.766] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0130.766] ReadFile (in: hFile=0x340, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f5d1c*=0x13f, lpOverlapped=0x0) returned 1
	[0130.767] GetFileType (hFile=0x340) returned 0x1
	[0130.767] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.768] WriteFile (in: hFile=0x340, lpBuffer=0x1261a780*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1261a780*, lpNumberOfBytesWritten=0x124f5d00*=0x13f, lpOverlapped=0x124f5d0c) returned 1
	[0130.768] GetFileType (hFile=0x340) returned 0x1
	[0130.768] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x13f, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.768] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0130.768] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434901 | out: pbBuffer=0x12434901) returned 1
	[0130.768] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0130.768] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0130.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.769] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.769] WriteFile (in: hFile=0x33c, lpBuffer=0x1262ef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262ef00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.769] CloseHandle (hObject=0x33c) returned 1
	[0130.769] CloseHandle (hObject=0x340) returned 1
	[0130.769] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.770] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.794] SetEvent (hEvent=0x80) returned 1
	[0130.794] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.794] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3)) returned 1
	[0130.795] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0130.795] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882a8 | out: pbBuffer=0x127882a8) returned 1
	[0130.795] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x1242bd1c*=0xf3, lpOverlapped=0x0) returned 1
	[0130.796] GetFileType (hFile=0x33c) returned 0x1
	[0130.796] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.796] WriteFile (in: hFile=0x33c, lpBuffer=0x12633000*, nNumberOfBytesToWrite=0xf3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12633000*, lpNumberOfBytesWritten=0x1242bd00*=0xf3, lpOverlapped=0x1242bd0c) returned 1
	[0130.796] GetFileType (hFile=0x33c) returned 0x1
	[0130.796] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xf3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0130.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0130.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0130.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788370 | out: pbBuffer=0x12788370) returned 1
	[0130.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0130.797] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.797] WriteFile (in: hFile=0x328, lpBuffer=0x1262f400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262f400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.798] CloseHandle (hObject=0x328) returned 1
	[0130.798] CloseHandle (hObject=0x33c) returned 1
	[0130.798] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.801] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.806] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0130.808] SetEvent (hEvent=0x2e8) returned 1
	[0130.808] SetEvent (hEvent=0x320) returned 1
	[0130.809] SwitchToThread () returned 1
	[0130.853] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.006] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.007] SetEvent (hEvent=0x318) returned 1
	[0131.007] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.008] SetEvent (hEvent=0x318) returned 1
	[0131.008] SetEvent (hEvent=0x68) returned 1
	[0131.008] SwitchToThread () returned 1
	[0131.009] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.012] SetEvent (hEvent=0x68) returned 1
	[0131.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.013] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1
	[0131.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0131.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0131.013] ReadFile (in: hFile=0x2fc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f5d1c*=0x116, lpOverlapped=0x0) returned 1
	[0131.015] GetFileType (hFile=0x2fc) returned 0x1
	[0131.015] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.015] WriteFile (in: hFile=0x2fc, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f5d00*=0x116, lpOverlapped=0x124f5d0c) returned 1
	[0131.017] GetFileType (hFile=0x2fc) returned 0x1
	[0131.017] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x116, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.017] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0131.017] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0131.017] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0131.018] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0131.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.018] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.018] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.021] CloseHandle (hObject=0x340) returned 1
	[0131.021] CloseHandle (hObject=0x2fc) returned 1
	[0131.023] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.031] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.035] SetEvent (hEvent=0x68) returned 1
	[0131.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.036] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107)) returned 1
	[0131.036] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0131.036] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0131.036] ReadFile (in: hFile=0x2fc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1242bd1c*=0x107, lpOverlapped=0x0) returned 1
	[0131.037] GetFileType (hFile=0x2fc) returned 0x1
	[0131.037] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.037] WriteFile (in: hFile=0x2fc, lpBuffer=0x1260cea0*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260cea0*, lpNumberOfBytesWritten=0x1242bd00*=0x107, lpOverlapped=0x1242bd0c) returned 1
	[0131.039] GetFileType (hFile=0x2fc) returned 0x1
	[0131.039] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x107, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0131.040] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0131.040] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0131.040] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0131.040] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.040] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.040] WriteFile (in: hFile=0x338, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.043] CloseHandle (hObject=0x338) returned 1
	[0131.043] CloseHandle (hObject=0x2fc) returned 1
	[0131.045] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.054] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.058] SetEvent (hEvent=0x68) returned 1
	[0131.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.059] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105)) returned 1
	[0131.059] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0131.059] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0131.059] ReadFile (in: hFile=0x2fc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f5d1c*=0x105, lpOverlapped=0x0) returned 1
	[0131.061] GetFileType (hFile=0x2fc) returned 0x1
	[0131.061] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.061] WriteFile (in: hFile=0x2fc, lpBuffer=0x1260dd40*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260dd40*, lpNumberOfBytesWritten=0x124f5d00*=0x105, lpOverlapped=0x124f5d0c) returned 1
	[0131.063] GetFileType (hFile=0x2fc) returned 0x1
	[0131.063] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x105, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.063] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0131.063] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0131.064] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0131.064] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0131.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.064] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.064] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.067] CloseHandle (hObject=0x340) returned 1
	[0131.067] CloseHandle (hObject=0x2fc) returned 1
	[0131.069] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.077] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.081] SetEvent (hEvent=0x68) returned 1
	[0131.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.082] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1
	[0131.082] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0131.082] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0131.082] ReadFile (in: hFile=0x2fc, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1242bd1c*=0x125, lpOverlapped=0x0) returned 1
	[0131.084] GetFileType (hFile=0x2fc) returned 0x1
	[0131.084] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.084] WriteFile (in: hFile=0x2fc, lpBuffer=0x12535180*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12535180*, lpNumberOfBytesWritten=0x1242bd00*=0x125, lpOverlapped=0x1242bd0c) returned 1
	[0131.086] GetFileType (hFile=0x2fc) returned 0x1
	[0131.086] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x125, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0131.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0131.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0131.087] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0131.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.087] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.087] WriteFile (in: hFile=0x338, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.089] CloseHandle (hObject=0x338) returned 1
	[0131.089] CloseHandle (hObject=0x2fc) returned 1
	[0131.092] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.099] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.105] SetEvent (hEvent=0x68) returned 1
	[0131.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.106] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d)) returned 1
	[0131.106] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4c0 | out: pbBuffer=0x1240f4c0) returned 1
	[0131.106] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788378 | out: pbBuffer=0x12788378) returned 1
	[0131.107] ReadFile (in: hFile=0x2fc, lpBuffer=0x12906000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12906000*, lpNumberOfBytesRead=0x124f5d1c*=0x11d, lpOverlapped=0x0) returned 1
	[0131.108] GetFileType (hFile=0x2fc) returned 0x1
	[0131.108] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.108] WriteFile (in: hFile=0x2fc, lpBuffer=0x128999e0*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x128999e0*, lpNumberOfBytesWritten=0x124f5d00*=0x11d, lpOverlapped=0x124f5d0c) returned 1
	[0131.110] GetFileType (hFile=0x2fc) returned 0x1
	[0131.110] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x11d, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.110] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0131.111] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0131.111] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0131.111] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788430 | out: pbBuffer=0x12788430) returned 1
	[0131.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.111] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.111] WriteFile (in: hFile=0x340, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.114] CloseHandle (hObject=0x340) returned 1
	[0131.114] CloseHandle (hObject=0x2fc) returned 1
	[0131.116] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.123] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.127] SetEvent (hEvent=0x68) returned 1
	[0131.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.127] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0131.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f6e0 | out: pbBuffer=0x1240f6e0) returned 1
	[0131.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788458 | out: pbBuffer=0x12788458) returned 1
	[0131.127] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0131.128] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.129] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0131.129] SetEvent (hEvent=0x68) returned 1
	[0131.129] ReadFile (in: hFile=0x2fc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0xfe, lpOverlapped=0x0) returned 1
	[0131.131] GetFileType (hFile=0x2fc) returned 0x1
	[0131.131] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.131] WriteFile (in: hFile=0x2fc, lpBuffer=0x1277d200*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1277d200*, lpNumberOfBytesWritten=0x1242bd00*=0xfe, lpOverlapped=0x1242bd0c) returned 1
	[0131.134] GetFileType (hFile=0x2fc) returned 0x1
	[0131.134] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.134] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0131.134] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0131.134] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0131.134] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0131.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.135] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.135] WriteFile (in: hFile=0x338, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.136] CloseHandle (hObject=0x338) returned 1
	[0131.136] CloseHandle (hObject=0x2fc) returned 1
	[0131.138] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.144] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.159] SetEvent (hEvent=0x80) returned 1
	[0131.159] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.159] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1
	[0131.160] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0131.160] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0131.160] ReadFile (in: hFile=0x338, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f3d1c*=0xda, lpOverlapped=0x0) returned 1
	[0131.163] GetFileType (hFile=0x338) returned 0x1
	[0131.163] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.163] WriteFile (in: hFile=0x338, lpBuffer=0x124581c0*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124581c0*, lpNumberOfBytesWritten=0x124f3d00*=0xda, lpOverlapped=0x124f3d0c) returned 1
	[0131.165] GetFileType (hFile=0x338) returned 0x1
	[0131.165] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xda, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0131.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0131.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0131.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0131.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.166] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.166] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.168] CloseHandle (hObject=0x2fc) returned 1
	[0131.168] CloseHandle (hObject=0x338) returned 1
	[0131.171] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.178] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.182] SetEvent (hEvent=0x80) returned 1
	[0131.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.182] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1
	[0131.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0131.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0131.183] ReadFile (in: hFile=0x338, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1242bd1c*=0xf6, lpOverlapped=0x0) returned 1
	[0131.184] GetFileType (hFile=0x338) returned 0x1
	[0131.184] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.184] WriteFile (in: hFile=0x338, lpBuffer=0x1245e300*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1245e300*, lpNumberOfBytesWritten=0x1242bd00*=0xf6, lpOverlapped=0x1242bd0c) returned 1
	[0131.186] GetFileType (hFile=0x338) returned 0x1
	[0131.186] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xf6, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.186] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0131.187] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0131.187] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0131.187] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0131.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.187] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.187] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.190] CloseHandle (hObject=0x340) returned 1
	[0131.190] CloseHandle (hObject=0x338) returned 1
	[0131.192] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.199] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.203] SetEvent (hEvent=0x80) returned 1
	[0131.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.203] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0131.204] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0131.204] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788288 | out: pbBuffer=0x12788288) returned 1
	[0131.204] ReadFile (in: hFile=0x338, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0x119, lpOverlapped=0x0) returned 1
	[0131.206] GetFileType (hFile=0x338) returned 0x1
	[0131.206] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.206] WriteFile (in: hFile=0x338, lpBuffer=0x1245d200*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1245d200*, lpNumberOfBytesWritten=0x124f3d00*=0x119, lpOverlapped=0x124f3d0c) returned 1
	[0131.208] GetFileType (hFile=0x338) returned 0x1
	[0131.208] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x119, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.208] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0131.208] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0131.208] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0131.208] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788340 | out: pbBuffer=0x12788340) returned 1
	[0131.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.209] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.209] WriteFile (in: hFile=0x2fc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.211] CloseHandle (hObject=0x2fc) returned 1
	[0131.211] CloseHandle (hObject=0x338) returned 1
	[0131.213] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.222] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.225] SetEvent (hEvent=0x80) returned 1
	[0131.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.226] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f7ed20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1
	[0131.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f480 | out: pbBuffer=0x1240f480) returned 1
	[0131.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788358 | out: pbBuffer=0x12788358) returned 1
	[0131.226] ReadFile (in: hFile=0x338, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x1242bd1c*=0x112, lpOverlapped=0x0) returned 1
	[0131.228] GetFileType (hFile=0x338) returned 0x1
	[0131.228] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.228] WriteFile (in: hFile=0x338, lpBuffer=0x12628120*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12628120*, lpNumberOfBytesWritten=0x1242bd00*=0x112, lpOverlapped=0x1242bd0c) returned 1
	[0131.230] GetFileType (hFile=0x338) returned 0x1
	[0131.230] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x112, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0131.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0131.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0131.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788420 | out: pbBuffer=0x12788420) returned 1
	[0131.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.231] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.231] WriteFile (in: hFile=0x340, lpBuffer=0x128bc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128bc000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.233] CloseHandle (hObject=0x340) returned 1
	[0131.233] CloseHandle (hObject=0x338) returned 1
	[0131.235] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.243] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.261] SetEvent (hEvent=0x80) returned 1
	[0131.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.262] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11f)) returned 1
	[0131.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f6a0 | out: pbBuffer=0x1240f6a0) returned 1
	[0131.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788438 | out: pbBuffer=0x12788438) returned 1
	[0131.262] ReadFile (in: hFile=0x338, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f3d1c*=0x11f, lpOverlapped=0x0) returned 1
	[0131.295] GetFileType (hFile=0x338) returned 0x1
	[0131.295] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.295] WriteFile (in: hFile=0x338, lpBuffer=0x12628fc0*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12628fc0*, lpNumberOfBytesWritten=0x124f3d00*=0x11f, lpOverlapped=0x124f3d0c) returned 1
	[0131.298] GetFileType (hFile=0x338) returned 0x1
	[0131.299] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x11f, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401481 | out: pbBuffer=0x12401481) returned 1
	[0131.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401581 | out: pbBuffer=0x12401581) returned 1
	[0131.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401681 | out: pbBuffer=0x12401681) returned 1
	[0131.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788500 | out: pbBuffer=0x12788500) returned 1
	[0131.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.299] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.300] WriteFile (in: hFile=0x2fc, lpBuffer=0x128bc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x128bc500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.302] CloseHandle (hObject=0x2fc) returned 1
	[0131.302] CloseHandle (hObject=0x338) returned 1
	[0131.304] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.313] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.314] SetEvent (hEvent=0x318) returned 1
	[0131.314] SetEvent (hEvent=0x80) returned 1
	[0131.314] WriteFile (in: hFile=0x340, lpBuffer=0x125e5900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x125e5900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.317] CloseHandle (hObject=0x340) returned 1
	[0131.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x164)) returned 1
	[0131.319] SetEvent (hEvent=0x68) returned 1
	[0131.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.320] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.320] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.324] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.324] WriteFile (in: hFile=0x340, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.327] CloseHandle (hObject=0x340) returned 1
	[0131.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e)) returned 1
	[0131.328] SetEvent (hEvent=0x80) returned 1
	[0131.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.328] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.329] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.329] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x161, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.329] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.329] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.333] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.333] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.337] CloseHandle (hObject=0x340) returned 1
	[0131.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x161)) returned 1
	[0131.339] SetEvent (hEvent=0x68) returned 1
	[0131.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.340] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.345] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.345] WriteFile (in: hFile=0x338, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.349] CloseHandle (hObject=0x338) returned 1
	[0131.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117)) returned 1
	[0131.350] SetEvent (hEvent=0x80) returned 1
	[0131.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.351] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.351] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.351] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x111, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.351] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.351] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.356] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.356] WriteFile (in: hFile=0x338, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.360] CloseHandle (hObject=0x338) returned 1
	[0131.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x111)) returned 1
	[0131.364] SetEvent (hEvent=0x68) returned 1
	[0131.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.365] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.365] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.365] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.365] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.365] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.370] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.370] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.416] CloseHandle (hObject=0x340) returned 1
	[0131.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10b)) returned 1
	[0131.418] SetEvent (hEvent=0x80) returned 1
	[0131.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.419] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.419] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0131.419] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.419] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.424] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0131.424] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0131.427] CloseHandle (hObject=0x340) returned 1
	[0131.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0x2bd5)) returned 1
	[0131.430] SetEvent (hEvent=0x68) returned 1
	[0131.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8716c790, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec)) returned 1
	[0131.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.431] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.431] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81a42ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.431] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4.2.8_0", cAlternateFileName="4278E1~1.8_0")) returned 1
	[0131.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.432] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.439] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.441] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0131.441] WriteFile (in: hFile=0x340, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0131.446] CloseHandle (hObject=0x340) returned 1
	[0131.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.451] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.455] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.455] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
	[0131.455] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0131.455] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0131.455] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0131.455] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.455] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.460] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0131.460] WriteFile (in: hFile=0x2fc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0131.462] CloseHandle (hObject=0x2fc) returned 1
	[0131.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4e)) returned 1
	[0131.465] SetEvent (hEvent=0x318) returned 1
	[0131.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.466] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0131.481] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0131.482] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.482] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.486] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0131.486] WriteFile (in: hFile=0x328, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0131.487] CloseHandle (hObject=0x328) returned 1
	[0131.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.499] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.499] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.499] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.499] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.499] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.501] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.501] WriteFile (in: hFile=0x328, lpBuffer=0x125e3300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x125e3300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.504] CloseHandle (hObject=0x328) returned 1
	[0131.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.505] SetEvent (hEvent=0x318) returned 1
	[0131.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.507] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.515] SetEvent (hEvent=0x318) returned 1
	[0131.515] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.515] SetEvent (hEvent=0x318) returned 1
	[0131.515] SetEvent (hEvent=0x320) returned 1
	[0131.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.516] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.516] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.516] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.516] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.516] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.517] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.517] WriteFile (in: hFile=0x328, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.518] CloseHandle (hObject=0x328) returned 1
	[0131.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.519] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x851f1e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.520] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.520] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.520] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.521] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.521] WriteFile (in: hFile=0x328, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.522] CloseHandle (hObject=0x328) returned 1
	[0131.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.534] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.534] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.534] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.534] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.534] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.535] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.535] WriteFile (in: hFile=0x328, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.537] CloseHandle (hObject=0x328) returned 1
	[0131.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.537] SetEvent (hEvent=0x320) returned 1
	[0131.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.538] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.538] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.538] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.538] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.538] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.539] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.539] WriteFile (in: hFile=0x328, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.541] CloseHandle (hObject=0x328) returned 1
	[0131.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.558] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.558] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.558] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.558] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.558] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.559] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.559] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.561] CloseHandle (hObject=0x2fc) returned 1
	[0131.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.561] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.562] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.563] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.563] WriteFile (in: hFile=0x2fc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.564] CloseHandle (hObject=0x2fc) returned 1
	[0131.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.574] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.574] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85217f70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85217f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.574] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.574] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.575] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.575] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.575] WriteFile (in: hFile=0x338, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.577] CloseHandle (hObject=0x338) returned 1
	[0131.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.580] SetEvent (hEvent=0x320) returned 1
	[0131.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.580] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.580] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.580] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.581] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.581] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.582] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.582] WriteFile (in: hFile=0x338, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.583] CloseHandle (hObject=0x338) returned 1
	[0131.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.597] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.597] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.597] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.597] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.597] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.598] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.599] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.599] WriteFile (in: hFile=0x2fc, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.600] CloseHandle (hObject=0x2fc) returned 1
	[0131.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.601] SetEvent (hEvent=0x320) returned 1
	[0131.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.601] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.601] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.601] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.602] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.602] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.602] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.603] WriteFile (in: hFile=0x2fc, lpBuffer=0x12767300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12767300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.604] CloseHandle (hObject=0x2fc) returned 1
	[0131.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.615] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.624] SetEvent (hEvent=0x320) returned 1
	[0131.624] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.640] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.663] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.672] SetEvent (hEvent=0x320) returned 1
	[0131.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.673] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.673] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0131.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0131.673] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.675] GetFileType (hFile=0x33c) returned 0x1
	[0131.675] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.675] WriteFile (in: hFile=0x33c, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x124f3d00*=0xb3, lpOverlapped=0x124f3d0c) returned 1
	[0131.675] GetFileType (hFile=0x33c) returned 0x1
	[0131.675] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.675] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400401 | out: pbBuffer=0x12400401) returned 1
	[0131.675] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0131.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0131.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0131.676] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.676] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.676] WriteFile (in: hFile=0x340, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.676] CloseHandle (hObject=0x340) returned 1
	[0131.676] CloseHandle (hObject=0x33c) returned 1
	[0131.677] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.678] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.678] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0131.678] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0131.678] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f1d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.679] GetFileType (hFile=0x33c) returned 0x1
	[0131.679] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.680] WriteFile (in: hFile=0x33c, lpBuffer=0x12780180*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12780180*, lpNumberOfBytesWritten=0x124f1d00*=0xb3, lpOverlapped=0x124f1d0c) returned 1
	[0131.680] GetFileType (hFile=0x33c) returned 0x1
	[0131.680] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0131.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0131.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0131.681] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0131.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.681] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.681] WriteFile (in: hFile=0x340, lpBuffer=0x12628500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.681] CloseHandle (hObject=0x340) returned 1
	[0131.681] CloseHandle (hObject=0x33c) returned 1
	[0131.681] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.682] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.710] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.718] SetEvent (hEvent=0x320) returned 1
	[0131.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.719] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0131.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0131.719] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f3d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.721] GetFileType (hFile=0x33c) returned 0x1
	[0131.721] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.721] WriteFile (in: hFile=0x33c, lpBuffer=0x12780300*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12780300*, lpNumberOfBytesWritten=0x124f3d00*=0xb3, lpOverlapped=0x124f3d0c) returned 1
	[0131.721] GetFileType (hFile=0x33c) returned 0x1
	[0131.721] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0131.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0131.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0131.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0131.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.722] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.722] WriteFile (in: hFile=0x340, lpBuffer=0x12628a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.722] CloseHandle (hObject=0x340) returned 1
	[0131.723] CloseHandle (hObject=0x33c) returned 1
	[0131.723] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.723] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.724] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb20 | out: pbBuffer=0x1244cb20) returned 1
	[0131.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0131.724] ReadFile (in: hFile=0x33c, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f1d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.726] GetFileType (hFile=0x33c) returned 0x1
	[0131.726] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.726] WriteFile (in: hFile=0x33c, lpBuffer=0x12780480*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12780480*, lpNumberOfBytesWritten=0x124f1d00*=0xb3, lpOverlapped=0x124f1d0c) returned 1
	[0131.726] GetFileType (hFile=0x33c) returned 0x1
	[0131.726] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.726] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0131.726] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0131.726] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0131.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0131.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.727] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.727] WriteFile (in: hFile=0x340, lpBuffer=0x12628f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.727] CloseHandle (hObject=0x340) returned 1
	[0131.736] CloseHandle (hObject=0x33c) returned 1
	[0131.737] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.738] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.738] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244ce40 | out: pbBuffer=0x1244ce40) returned 1
	[0131.739] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788378 | out: pbBuffer=0x12788378) returned 1
	[0131.739] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0131.773] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.773] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0131.773] SetEvent (hEvent=0xa0) returned 1
	[0131.773] SetEvent (hEvent=0x320) returned 1
	[0131.773] SetEvent (hEvent=0x68) returned 1
	[0131.773] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.775] GetFileType (hFile=0x33c) returned 0x1
	[0131.775] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.775] WriteFile (in: hFile=0x33c, lpBuffer=0x12780600*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12780600*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0131.775] GetFileType (hFile=0x33c) returned 0x1
	[0131.775] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.775] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0131.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0131.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401481 | out: pbBuffer=0x12401481) returned 1
	[0131.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788430 | out: pbBuffer=0x12788430) returned 1
	[0131.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.776] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.776] WriteFile (in: hFile=0x340, lpBuffer=0x12629900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12629900*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.777] CloseHandle (hObject=0x340) returned 1
	[0131.777] CloseHandle (hObject=0x33c) returned 1
	[0131.777] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.778] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0131.822] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.822] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0131.939] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0131.940] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0131.940] SetEvent (hEvent=0x2f4) returned 1
	[0131.940] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0132.133] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0132.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.133] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0132.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f)) returned 1
	[0132.134] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0132.134] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0132.134] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0x9f, lpOverlapped=0x0) returned 1
	[0132.135] GetFileType (hFile=0x33c) returned 0x1
	[0132.135] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.135] WriteFile (in: hFile=0x33c, lpBuffer=0x124fa140*, nNumberOfBytesToWrite=0x9f, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124fa140*, lpNumberOfBytesWritten=0x124f5d00*=0x9f, lpOverlapped=0x124f5d0c) returned 1
	[0132.135] GetFileType (hFile=0x33c) returned 0x1
	[0132.135] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x9f, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.135] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400401 | out: pbBuffer=0x12400401) returned 1
	[0132.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0132.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0132.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0132.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.136] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0132.136] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.137] CloseHandle (hObject=0x340) returned 1
	[0132.137] CloseHandle (hObject=0x33c) returned 1
	[0132.137] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.138] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0132.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.138] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0132.138] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744398 | out: pbBuffer=0x12744398) returned 1
	[0132.138] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f1d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.139] GetFileType (hFile=0x33c) returned 0x1
	[0132.139] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.140] WriteFile (in: hFile=0x33c, lpBuffer=0x124640c0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124640c0*, lpNumberOfBytesWritten=0x124f1d00*=0xb3, lpOverlapped=0x124f1d0c) returned 1
	[0132.140] GetFileType (hFile=0x33c) returned 0x1
	[0132.140] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.140] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0132.140] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0132.140] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0132.141] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744510 | out: pbBuffer=0x12744510) returned 1
	[0132.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.141] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0132.141] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.141] CloseHandle (hObject=0x340) returned 1
	[0132.141] CloseHandle (hObject=0x33c) returned 1
	[0132.141] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.146] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0132.279] SetEvent (hEvent=0x68) returned 1
	[0132.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.280] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0132.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.280] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0132.280] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744528 | out: pbBuffer=0x12744528) returned 1
	[0132.280] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f5d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.324] GetFileType (hFile=0x33c) returned 0x1
	[0132.324] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.324] WriteFile (in: hFile=0x33c, lpBuffer=0x12464240*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12464240*, lpNumberOfBytesWritten=0x124f5d00*=0xb3, lpOverlapped=0x124f5d0c) returned 1
	[0132.325] GetFileType (hFile=0x33c) returned 0x1
	[0132.325] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0132.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0132.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0132.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445e0 | out: pbBuffer=0x127445e0) returned 1
	[0132.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.326] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0132.326] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.326] CloseHandle (hObject=0x340) returned 1
	[0132.326] CloseHandle (hObject=0x33c) returned 1
	[0132.326] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.327] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0132.429] SetEvent (hEvent=0x320) returned 1
	[0132.429] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0132.553] SetEvent (hEvent=0x2f4) returned 1
	[0132.553] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0132.935] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0133.223] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0133.308] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0133.355] SetEvent (hEvent=0x320) returned 1
	[0133.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.356] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0133.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1
	[0133.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0133.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0133.356] ReadFile (in: hFile=0x2cc, lpBuffer=0x1269e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1269e000*, lpNumberOfBytesRead=0x124f1d1c*=0xcf, lpOverlapped=0x0) returned 1
	[0133.358] GetFileType (hFile=0x2cc) returned 0x1
	[0133.358] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.358] WriteFile (in: hFile=0x2cc, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x124f1d00*=0xcf, lpOverlapped=0x124f1d0c) returned 1
	[0133.358] GetFileType (hFile=0x2cc) returned 0x1
	[0133.358] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xcf, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0133.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0133.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0133.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0133.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.359] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0133.360] WriteFile (in: hFile=0x33c, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.360] CloseHandle (hObject=0x33c) returned 1
	[0133.360] CloseHandle (hObject=0x2cc) returned 1
	[0133.360] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.361] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0133.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1
	[0133.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0133.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0133.362] ReadFile (in: hFile=0x2cc, lpBuffer=0x126de000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126de000*, lpNumberOfBytesRead=0x124f3d1c*=0xdc, lpOverlapped=0x0) returned 1
	[0133.363] GetFileType (hFile=0x2cc) returned 0x1
	[0133.363] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.363] WriteFile (in: hFile=0x2cc, lpBuffer=0x127702a0*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127702a0*, lpNumberOfBytesWritten=0x124f3d00*=0xdc, lpOverlapped=0x124f3d0c) returned 1
	[0133.363] GetFileType (hFile=0x2cc) returned 0x1
	[0133.363] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xdc, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.363] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0133.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0133.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0133.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0133.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.364] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0133.364] WriteFile (in: hFile=0x33c, lpBuffer=0x12628a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.364] CloseHandle (hObject=0x33c) returned 1
	[0133.364] CloseHandle (hObject=0x2cc) returned 1
	[0133.365] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.366] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0133.458] SetEvent (hEvent=0x320) returned 1
	[0133.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.459] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0133.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0133.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0133.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0133.459] ReadFile (in: hFile=0x2cc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f1d1c*=0xd5, lpOverlapped=0x0) returned 1
	[0133.461] GetFileType (hFile=0x2cc) returned 0x1
	[0133.461] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.461] WriteFile (in: hFile=0x2cc, lpBuffer=0x12770620*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12770620*, lpNumberOfBytesWritten=0x124f1d00*=0xd5, lpOverlapped=0x124f1d0c) returned 1
	[0133.461] GetFileType (hFile=0x2cc) returned 0x1
	[0133.461] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xd5, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0133.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0133.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0133.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105c0 | out: pbBuffer=0x124105c0) returned 1
	[0133.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.462] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0133.462] WriteFile (in: hFile=0x33c, lpBuffer=0x12628f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.463] CloseHandle (hObject=0x33c) returned 1
	[0133.463] CloseHandle (hObject=0x2cc) returned 1
	[0133.463] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.465] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0133.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1
	[0133.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0133.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105d8 | out: pbBuffer=0x124105d8) returned 1
	[0133.465] ReadFile (in: hFile=0x2cc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0xe5, lpOverlapped=0x0) returned 1
	[0133.466] GetFileType (hFile=0x2cc) returned 0x1
	[0133.466] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.467] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261c1e0*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1261c1e0*, lpNumberOfBytesWritten=0x124f3d00*=0xe5, lpOverlapped=0x124f3d0c) returned 1
	[0133.467] GetFileType (hFile=0x2cc) returned 0x1
	[0133.467] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xe5, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0133.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0133.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0133.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106f0 | out: pbBuffer=0x124106f0) returned 1
	[0133.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.468] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0133.468] WriteFile (in: hFile=0x33c, lpBuffer=0x12629400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12629400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.468] CloseHandle (hObject=0x33c) returned 1
	[0133.468] CloseHandle (hObject=0x2cc) returned 1
	[0133.476] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.477] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0133.587] SetEvent (hEvent=0x320) returned 1
	[0133.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.588] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0133.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0133.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4a0 | out: pbBuffer=0x1240f4a0) returned 1
	[0133.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410718 | out: pbBuffer=0x12410718) returned 1
	[0133.588] ReadFile (in: hFile=0x2cc, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x12429d1c*=0xe2, lpOverlapped=0x0) returned 1
	[0133.590] GetFileType (hFile=0x2cc) returned 0x1
	[0133.590] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.590] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261c2d0*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1261c2d0*, lpNumberOfBytesWritten=0x12429d00*=0xe2, lpOverlapped=0x12429d0c) returned 1
	[0133.590] GetFileType (hFile=0x2cc) returned 0x1
	[0133.590] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.590] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0133.590] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0133.591] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401481 | out: pbBuffer=0x12401481) returned 1
	[0133.591] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410800 | out: pbBuffer=0x12410800) returned 1
	[0133.591] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.591] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0133.591] WriteFile (in: hFile=0x33c, lpBuffer=0x12629900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12629900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.591] CloseHandle (hObject=0x33c) returned 1
	[0133.592] CloseHandle (hObject=0x2cc) returned 1
	[0133.592] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.593] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0133.670] SetEvent (hEvent=0x320) returned 1
	[0133.670] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0133.717] SetEvent (hEvent=0x2f4) returned 1
	[0133.717] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.216] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.277] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.296] SetEvent (hEvent=0x68) returned 1
	[0134.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.296] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841c9290, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0134.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0134.297] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0134.297] ReadFile (in: hFile=0x2cc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f3d1c*=0xd5, lpOverlapped=0x0) returned 1
	[0134.298] GetFileType (hFile=0x2cc) returned 0x1
	[0134.298] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.298] WriteFile (in: hFile=0x2cc, lpBuffer=0x1248c000*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1248c000*, lpNumberOfBytesWritten=0x124f3d00*=0xd5, lpOverlapped=0x124f3d0c) returned 1
	[0134.298] GetFileType (hFile=0x2cc) returned 0x1
	[0134.298] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xd5, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.298] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0134.298] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0134.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0134.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0134.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.299] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.299] WriteFile (in: hFile=0x33c, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.299] CloseHandle (hObject=0x33c) returned 1
	[0134.299] CloseHandle (hObject=0x2cc) returned 1
	[0134.300] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.301] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0134.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d07c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0134.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0134.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0134.301] ReadFile (in: hFile=0x2cc, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f1d1c*=0xe6, lpOverlapped=0x0) returned 1
	[0134.303] GetFileType (hFile=0x2cc) returned 0x1
	[0134.303] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.303] WriteFile (in: hFile=0x2cc, lpBuffer=0x124602d0*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124602d0*, lpNumberOfBytesWritten=0x124f1d00*=0xe6, lpOverlapped=0x124f1d0c) returned 1
	[0134.303] GetFileType (hFile=0x2cc) returned 0x1
	[0134.303] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xe6, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.303] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0134.303] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0134.303] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0134.303] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0134.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.303] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0134.304] WriteFile (in: hFile=0x33c, lpBuffer=0x1245c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245c500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.304] CloseHandle (hObject=0x33c) returned 1
	[0134.304] CloseHandle (hObject=0x2cc) returned 1
	[0134.304] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.305] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.317] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.328] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.334] SetEvent (hEvent=0x68) returned 1
	[0134.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.334] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0134.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f78c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0134.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0134.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0134.334] ReadFile (in: hFile=0x33c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f1d1c*=0xde, lpOverlapped=0x0) returned 1
	[0134.336] GetFileType (hFile=0x33c) returned 0x1
	[0134.336] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.336] WriteFile (in: hFile=0x33c, lpBuffer=0x1248c2a0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1248c2a0*, lpNumberOfBytesWritten=0x124f1d00*=0xde, lpOverlapped=0x124f1d0c) returned 1
	[0134.337] GetFileType (hFile=0x33c) returned 0x1
	[0134.337] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xde, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0134.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0134.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0134.338] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445f0 | out: pbBuffer=0x127445f0) returned 1
	[0134.338] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.338] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0134.338] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245ca00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.338] CloseHandle (hObject=0x2cc) returned 1
	[0134.338] CloseHandle (hObject=0x33c) returned 1
	[0134.339] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.340] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.371] SetEvent (hEvent=0x68) returned 1
	[0134.371] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.377] SetEvent (hEvent=0x2f4) returned 1
	[0134.377] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.378] SetEvent (hEvent=0x68) returned 1
	[0134.378] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.379] SetEvent (hEvent=0x68) returned 1
	[0134.379] SetEvent (hEvent=0x2f4) returned 1
	[0134.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.379] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12723d0c | out: lpMode=0x12723d0c) returned 0
	[0134.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12723ad0 | out: lpFileInformation=0x12723ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84214d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1
	[0134.379] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0134.379] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0134.380] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12723d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12723d1c*=0xe1, lpOverlapped=0x0) returned 1
	[0134.381] GetFileType (hFile=0x33c) returned 0x1
	[0134.381] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12723ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.381] WriteFile (in: hFile=0x33c, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0x12723d00, lpOverlapped=0x12723d0c | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x12723d00*=0xe1, lpOverlapped=0x12723d0c) returned 1
	[0134.381] GetFileType (hFile=0x33c) returned 0x1
	[0134.381] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xe1, lpNewFilePointer=0x0, dwMoveMethod=0x12723ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.381] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0134.382] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0134.382] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0134.382] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0134.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.382] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12723d0c | out: lpMode=0x12723d0c) returned 0
	[0134.382] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12723d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277a000*, lpNumberOfBytesWritten=0x12723d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.382] CloseHandle (hObject=0x2cc) returned 1
	[0134.383] CloseHandle (hObject=0x33c) returned 1
	[0134.383] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.384] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0134.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8420d850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a)) returned 1
	[0134.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0134.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0134.385] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1242bd1c*=0x10a, lpOverlapped=0x0) returned 1
	[0134.386] GetFileType (hFile=0x33c) returned 0x1
	[0134.386] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.386] WriteFile (in: hFile=0x33c, lpBuffer=0x12602d80*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12602d80*, lpNumberOfBytesWritten=0x1242bd00*=0x10a, lpOverlapped=0x1242bd0c) returned 1
	[0134.386] GetFileType (hFile=0x33c) returned 0x1
	[0134.387] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0134.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0134.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0134.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0134.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.387] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0134.387] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1277a500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.388] CloseHandle (hObject=0x2cc) returned 1
	[0134.388] CloseHandle (hObject=0x33c) returned 1
	[0134.388] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.390] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1271fad0 | out: lpFileInformation=0x1271fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841fedf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1
	[0134.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0134.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0134.390] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1271fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1271fd1c*=0xec, lpOverlapped=0x0) returned 1
	[0134.391] GetFileType (hFile=0x33c) returned 0x1
	[0134.391] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.391] WriteFile (in: hFile=0x33c, lpBuffer=0x1244a0f0*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x1271fd00, lpOverlapped=0x1271fd0c | out: lpBuffer=0x1244a0f0*, lpNumberOfBytesWritten=0x1271fd00*=0xec, lpOverlapped=0x1271fd0c) returned 1
	[0134.391] GetFileType (hFile=0x33c) returned 0x1
	[0134.391] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.391] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0134.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0134.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0134.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105c0 | out: pbBuffer=0x124105c0) returned 1
	[0134.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.392] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.392] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1271fd0c, lpOverlapped=0x0 | out: lpBuffer=0x1277aa00*, lpNumberOfBytesWritten=0x1271fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.393] CloseHandle (hObject=0x2cc) returned 1
	[0134.393] CloseHandle (hObject=0x33c) returned 1
	[0134.393] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.395] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.395] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842237e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.395] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.395] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.396] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.396] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.397] CloseHandle (hObject=0x33c) returned 1
	[0134.397] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x842237e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1
	[0134.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.398] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.398] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.398] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8422ad10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.398] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.398] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.399] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.399] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.401] CloseHandle (hObject=0x33c) returned 1
	[0134.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8422ad10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1
	[0134.413] SetEvent (hEvent=0x2f4) returned 1
	[0134.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.414] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.414] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.414] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84232240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.414] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.414] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.415] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.415] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.417] CloseHandle (hObject=0x33c) returned 1
	[0134.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84232240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1
	[0134.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.432] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x844eed30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0134.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8424a8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8424a8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0134.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.432] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.453] SetEvent (hEvent=0xa0) returned 1
	[0134.453] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0134.454] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0134.455] CloseHandle (hObject=0x33c) returned 1
	[0134.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x844eed30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1
	[0134.455] SetEvent (hEvent=0x68) returned 1
	[0134.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8424a8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8424a8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1
	[0134.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84234950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd47)) returned 1
	[0134.541] SetEvent (hEvent=0x320) returned 1
	[0134.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84239770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9d)) returned 1
	[0134.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8423be80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8423e590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1
	[0134.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.542] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x1271fad0 | out: lpFileInformation=0x1271fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84239770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9d)) returned 1
	[0134.543] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f120 | out: pbBuffer=0x1240f120) returned 1
	[0134.543] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410778 | out: pbBuffer=0x12410778) returned 1
	[0134.543] ReadFile (in: hFile=0x340, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1271fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x1271fd1c*=0x9d, lpOverlapped=0x0) returned 1
	[0134.544] GetFileType (hFile=0x340) returned 0x1
	[0134.544] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.544] WriteFile (in: hFile=0x340, lpBuffer=0x128bb5e0*, nNumberOfBytesToWrite=0x9d, lpNumberOfBytesWritten=0x1271fd00, lpOverlapped=0x1271fd0c | out: lpBuffer=0x128bb5e0*, lpNumberOfBytesWritten=0x1271fd00*=0x9d, lpOverlapped=0x1271fd0c) returned 1
	[0134.544] GetFileType (hFile=0x340) returned 0x1
	[0134.544] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x9d, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0134.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0134.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0134.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410880 | out: pbBuffer=0x12410880) returned 1
	[0134.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0134.544] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.545] WriteFile (in: hFile=0x32c, lpBuffer=0x1277b400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1271fd0c, lpOverlapped=0x0 | out: lpBuffer=0x1277b400*, lpNumberOfBytesWritten=0x1271fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.545] CloseHandle (hObject=0x32c) returned 1
	[0134.545] CloseHandle (hObject=0x340) returned 1
	[0134.545] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_16.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.547] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x1271fad0 | out: lpFileInformation=0x1271fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8423be80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8423e590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1
	[0134.547] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4e0 | out: pbBuffer=0x1240f4e0) returned 1
	[0134.547] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124108c8 | out: pbBuffer=0x124108c8) returned 1
	[0134.547] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0134.559] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.559] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0134.559] SetEvent (hEvent=0xa0) returned 1
	[0134.559] SetEvent (hEvent=0x320) returned 1
	[0134.560] ReadFile (in: hFile=0x340, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1271fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1271fd1c*=0x5c, lpOverlapped=0x0) returned 1
	[0134.561] GetFileType (hFile=0x340) returned 0x1
	[0134.561] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.561] WriteFile (in: hFile=0x340, lpBuffer=0x124d6600*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x1271fd00, lpOverlapped=0x1271fd0c | out: lpBuffer=0x124d6600*, lpNumberOfBytesWritten=0x1271fd00*=0x5c, lpOverlapped=0x1271fd0c) returned 1
	[0134.562] GetFileType (hFile=0x340) returned 0x1
	[0134.562] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x5c, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0134.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0134.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401481 | out: pbBuffer=0x12401481) returned 1
	[0134.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410a00 | out: pbBuffer=0x12410a00) returned 1
	[0134.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.563] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.563] WriteFile (in: hFile=0x33c, lpBuffer=0x1277b900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1271fd0c, lpOverlapped=0x0 | out: lpBuffer=0x1277b900*, lpNumberOfBytesWritten=0x1271fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.563] CloseHandle (hObject=0x33c) returned 1
	[0134.563] CloseHandle (hObject=0x340) returned 1
	[0134.563] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.html.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.582] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.583] SetEvent (hEvent=0x2f4) returned 1
	[0134.583] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.584] SetEvent (hEvent=0x2f4) returned 1
	[0134.584] SetEvent (hEvent=0x68) returned 1
	[0134.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84240ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84240ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1
	[0134.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x840205b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84245ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844aa770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d6)) returned 1
	[0134.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.673] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.674] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.674] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x862fc2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86322450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86322450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.674] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_0", cAlternateFileName="")) returned 1
	[0134.674] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.674] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.675] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0134.675] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0134.677] CloseHandle (hObject=0x33c) returned 1
	[0134.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.678] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.684] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.685] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
	[0134.685] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="contentscript_bin_prod.js", cAlternateFileName="CONTEN~1.JS")) returned 1
	[0134.685] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="dasherSettingSchema.json", cAlternateFileName="DASHER~1.JSO")) returned 1
	[0134.685] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventpage_bin_prod.js", cAlternateFileName="EVENTP~1.JS")) returned 1
	[0134.685] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0134.685] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="page_embed_script.js", cAlternateFileName="PAGE_E~1.JS")) returned 1
	[0134.685] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0134.685] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0134.685] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.685] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.688] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0134.688] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0134.689] CloseHandle (hObject=0x33c) returned 1
	[0134.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1
	[0134.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.696] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1
	[0134.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1
	[0134.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0134.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az", cAlternateFileName="")) returned 1
	[0134.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0134.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1
	[0134.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_CA", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1
	[0134.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo", cAlternateFileName="")) returned 1
	[0134.703] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0134.704] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0134.704] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0134.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0134.706] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0134.706] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1
	[0134.706] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0134.706] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0134.706] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1
	[0134.706] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0134.706] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1
	[0134.706] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.706] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.709] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0134.709] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0134.710] CloseHandle (hObject=0x33c) returned 1
	[0134.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.712] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.712] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dd4d90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.712] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.712] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.712] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.714] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.714] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.715] CloseHandle (hObject=0x33c) returned 1
	[0134.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84)) returned 1
	[0134.716] SetEvent (hEvent=0x80) returned 1
	[0134.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.717] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.718] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.718] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.719] CloseHandle (hObject=0x33c) returned 1
	[0134.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1
	[0134.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.721] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12721ad0 | out: lpFileInformation=0x12721ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dd4d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x84)) returned 1
	[0134.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c640 | out: pbBuffer=0x1244c640) returned 1
	[0134.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127449a8 | out: pbBuffer=0x127449a8) returned 1
	[0134.721] ReadFile (in: hFile=0x33c, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12721d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x12721d1c*=0x84, lpOverlapped=0x0) returned 1
	[0134.722] GetFileType (hFile=0x33c) returned 0x1
	[0134.722] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.722] WriteFile (in: hFile=0x33c, lpBuffer=0x1245b290*, nNumberOfBytesToWrite=0x84, lpNumberOfBytesWritten=0x12721d00, lpOverlapped=0x12721d0c | out: lpBuffer=0x1245b290*, lpNumberOfBytesWritten=0x12721d00*=0x84, lpOverlapped=0x12721d0c) returned 1
	[0134.722] GetFileType (hFile=0x33c) returned 0x1
	[0134.722] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x84, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.723] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0134.723] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0134.723] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0134.723] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744a60 | out: pbBuffer=0x12744a60) returned 1
	[0134.723] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.723] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.723] WriteFile (in: hFile=0x344, lpBuffer=0x125fa000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12721d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fa000*, lpNumberOfBytesWritten=0x12721d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.724] CloseHandle (hObject=0x344) returned 1
	[0134.724] CloseHandle (hObject=0x33c) returned 1
	[0134.724] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\af\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.725] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12721ad0 | out: lpFileInformation=0x12721ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1
	[0134.726] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c8e0 | out: pbBuffer=0x1244c8e0) returned 1
	[0134.726] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744a78 | out: pbBuffer=0x12744a78) returned 1
	[0134.726] ReadFile (in: hFile=0x33c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12721d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x12721d1c*=0x103, lpOverlapped=0x0) returned 1
	[0134.727] GetFileType (hFile=0x33c) returned 0x1
	[0134.727] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.727] WriteFile (in: hFile=0x33c, lpBuffer=0x125ecd80*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x12721d00, lpOverlapped=0x12721d0c | out: lpBuffer=0x125ecd80*, lpNumberOfBytesWritten=0x12721d00*=0x103, lpOverlapped=0x12721d0c) returned 1
	[0134.727] GetFileType (hFile=0x33c) returned 0x1
	[0134.727] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0134.728] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0134.728] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0134.728] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744b30 | out: pbBuffer=0x12744b30) returned 1
	[0134.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.728] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.728] WriteFile (in: hFile=0x344, lpBuffer=0x125fa500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12721d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fa500*, lpNumberOfBytesWritten=0x12721d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.729] CloseHandle (hObject=0x344) returned 1
	[0134.729] CloseHandle (hObject=0x33c) returned 1
	[0134.729] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\am\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.731] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.732] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.732] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.732] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.733] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.733] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.734] CloseHandle (hObject=0x33c) returned 1
	[0134.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0134.734] SetEvent (hEvent=0x80) returned 1
	[0134.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.735] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.735] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.735] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.735] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.736] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.736] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.738] CloseHandle (hObject=0x33c) returned 1
	[0134.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1
	[0134.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.738] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12721ad0 | out: lpFileInformation=0x12721ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0134.739] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb00 | out: pbBuffer=0x1244cb00) returned 1
	[0134.739] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744bd8 | out: pbBuffer=0x12744bd8) returned 1
	[0134.739] ReadFile (in: hFile=0x33c, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12721d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x12721d1c*=0xed, lpOverlapped=0x0) returned 1
	[0134.740] GetFileType (hFile=0x33c) returned 0x1
	[0134.740] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.740] WriteFile (in: hFile=0x33c, lpBuffer=0x124b22d0*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x12721d00, lpOverlapped=0x12721d0c | out: lpBuffer=0x124b22d0*, lpNumberOfBytesWritten=0x12721d00*=0xed, lpOverlapped=0x12721d0c) returned 1
	[0134.740] GetFileType (hFile=0x33c) returned 0x1
	[0134.740] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xed, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.740] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0134.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401581 | out: pbBuffer=0x12401581) returned 1
	[0134.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401681 | out: pbBuffer=0x12401681) returned 1
	[0134.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744c90 | out: pbBuffer=0x12744c90) returned 1
	[0134.741] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.741] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.741] WriteFile (in: hFile=0x344, lpBuffer=0x125faa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12721d0c, lpOverlapped=0x0 | out: lpBuffer=0x125faa00*, lpNumberOfBytesWritten=0x12721d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.742] CloseHandle (hObject=0x344) returned 1
	[0134.742] CloseHandle (hObject=0x33c) returned 1
	[0134.742] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ar\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.743] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12721ad0 | out: lpFileInformation=0x12721ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1
	[0134.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd20 | out: pbBuffer=0x1244cd20) returned 1
	[0134.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744ca8 | out: pbBuffer=0x12744ca8) returned 1
	[0134.744] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12721d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12721d1c*=0xa7, lpOverlapped=0x0) returned 1
	[0134.745] GetFileType (hFile=0x33c) returned 0x1
	[0134.745] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.745] WriteFile (in: hFile=0x33c, lpBuffer=0x125eae70*, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0x12721d00, lpOverlapped=0x12721d0c | out: lpBuffer=0x125eae70*, lpNumberOfBytesWritten=0x12721d00*=0xa7, lpOverlapped=0x12721d0c) returned 1
	[0134.745] GetFileType (hFile=0x33c) returned 0x1
	[0134.745] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xa7, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401781 | out: pbBuffer=0x12401781) returned 1
	[0134.746] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401881 | out: pbBuffer=0x12401881) returned 1
	[0134.746] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401981 | out: pbBuffer=0x12401981) returned 1
	[0134.746] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744d60 | out: pbBuffer=0x12744d60) returned 1
	[0134.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.746] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.746] WriteFile (in: hFile=0x344, lpBuffer=0x125faf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12721d0c, lpOverlapped=0x0 | out: lpBuffer=0x125faf00*, lpNumberOfBytesWritten=0x12721d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.747] CloseHandle (hObject=0x344) returned 1
	[0134.747] CloseHandle (hObject=0x33c) returned 1
	[0134.747] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\az\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.749] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.772] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.773] SetEvent (hEvent=0x80) returned 1
	[0134.773] SetEvent (hEvent=0x320) returned 1
	[0134.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.788] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.788] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.789] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.789] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.789] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.789] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.790] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.791] WriteFile (in: hFile=0x340, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.792] CloseHandle (hObject=0x340) returned 1
	[0134.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1
	[0134.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.793] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.793] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.793] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.793] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.794] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.795] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.795] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.796] CloseHandle (hObject=0x340) returned 1
	[0134.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xad)) returned 1
	[0134.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.812] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.812] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.812] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.812] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.814] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.814] WriteFile (in: hFile=0x340, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.816] CloseHandle (hObject=0x340) returned 1
	[0134.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1
	[0134.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.817] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.817] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.817] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.817] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.818] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.818] WriteFile (in: hFile=0x340, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.820] CloseHandle (hObject=0x340) returned 1
	[0134.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1)) returned 1
	[0134.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.832] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.832] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.832] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.832] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.832] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.833] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.833] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.835] CloseHandle (hObject=0x340) returned 1
	[0134.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12a)) returned 1
	[0134.835] SetEvent (hEvent=0x68) returned 1
	[0134.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e23760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e23760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.836] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.837] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.837] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.839] CloseHandle (hObject=0x340) returned 1
	[0134.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1
	[0134.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.858] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.858] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.859] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.859] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.859] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.860] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.860] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.862] CloseHandle (hObject=0x33c) returned 1
	[0134.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1
	[0134.862] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.863] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1
	[0134.863] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0134.863] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127449f0 | out: pbBuffer=0x127449f0) returned 1
	[0134.863] ReadFile (in: hFile=0x33c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f5d1c*=0xb2, lpOverlapped=0x0) returned 1
	[0134.865] GetFileType (hFile=0x33c) returned 0x1
	[0134.865] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.865] WriteFile (in: hFile=0x33c, lpBuffer=0x12742000*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12742000*, lpNumberOfBytesWritten=0x124f5d00*=0xb2, lpOverlapped=0x124f5d0c) returned 1
	[0134.865] GetFileType (hFile=0x33c) returned 0x1
	[0134.865] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb2, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0134.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0134.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0134.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744aa8 | out: pbBuffer=0x12744aa8) returned 1
	[0134.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.867] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.867] WriteFile (in: hFile=0x344, lpBuffer=0x12638000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12638000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.867] CloseHandle (hObject=0x344) returned 1
	[0134.867] CloseHandle (hObject=0x33c) returned 1
	[0134.867] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_GB\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_gb\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.869] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1
	[0134.869] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0134.869] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744ac0 | out: pbBuffer=0x12744ac0) returned 1
	[0134.869] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f5d1c*=0x109, lpOverlapped=0x0) returned 1
	[0134.871] GetFileType (hFile=0x33c) returned 0x1
	[0134.871] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.871] WriteFile (in: hFile=0x33c, lpBuffer=0x125267e0*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125267e0*, lpNumberOfBytesWritten=0x124f5d00*=0x109, lpOverlapped=0x124f5d0c) returned 1
	[0134.871] GetFileType (hFile=0x33c) returned 0x1
	[0134.871] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0134.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0134.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0134.872] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744b78 | out: pbBuffer=0x12744b78) returned 1
	[0134.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.872] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.872] WriteFile (in: hFile=0x344, lpBuffer=0x12638500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12638500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.872] CloseHandle (hObject=0x344) returned 1
	[0134.872] CloseHandle (hObject=0x33c) returned 1
	[0134.872] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_US\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\en_us\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.874] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.874] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.874] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.874] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.874] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.875] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.875] WriteFile (in: hFile=0x33c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.876] CloseHandle (hObject=0x33c) returned 1
	[0134.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc)) returned 1
	[0134.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.887] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.887] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.887] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.887] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.887] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.888] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.888] WriteFile (in: hFile=0x340, lpBuffer=0x12604000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12604000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.890] CloseHandle (hObject=0x340) returned 1
	[0134.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1
	[0134.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.891] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.891] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.891] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.891] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.891] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.892] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.892] WriteFile (in: hFile=0x340, lpBuffer=0x12605300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12605300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.895] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.911] CloseHandle (hObject=0x340) returned 1
	[0134.912] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0134.912] SetEvent (hEvent=0x80) returned 1
	[0134.912] SetEvent (hEvent=0x2f4) returned 1
	[0134.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1
	[0134.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.921] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.921] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.921] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.921] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.921] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.922] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.922] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.924] CloseHandle (hObject=0x340) returned 1
	[0134.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98)) returned 1
	[0134.924] SetEvent (hEvent=0x2f4) returned 1
	[0134.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.925] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.925] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e498c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e498c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.925] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.925] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.925] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.927] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.927] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.928] CloseHandle (hObject=0x340) returned 1
	[0134.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1
	[0134.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.944] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.945] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.945] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.945] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.946] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.946] WriteFile (in: hFile=0x340, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.947] CloseHandle (hObject=0x340) returned 1
	[0134.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb7)) returned 1
	[0134.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.948] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.948] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.948] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.948] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.948] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.949] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.949] WriteFile (in: hFile=0x340, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.951] CloseHandle (hObject=0x340) returned 1
	[0134.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc7)) returned 1
	[0134.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.962] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.963] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.964] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.964] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.966] CloseHandle (hObject=0x33c) returned 1
	[0134.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1
	[0134.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.974] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.974] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e6fa20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.975] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.975] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.975] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.977] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.977] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.979] CloseHandle (hObject=0x340) returned 1
	[0134.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr_ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0134.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.980] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.981] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.981] WriteFile (in: hFile=0x340, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.983] CloseHandle (hObject=0x340) returned 1
	[0134.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1
	[0134.990] SetEvent (hEvent=0x68) returned 1
	[0134.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.991] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.991] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.991] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.991] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.991] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.992] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.992] WriteFile (in: hFile=0x340, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.994] CloseHandle (hObject=0x340) returned 1
	[0134.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1
	[0134.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.995] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.996] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.996] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.996] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.997] WriteFile (in: hFile=0x340, lpBuffer=0x12604000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12604000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.998] CloseHandle (hObject=0x340) returned 1
	[0134.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1
	[0135.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.012] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.012] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.012] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.012] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.012] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.013] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.013] WriteFile (in: hFile=0x340, lpBuffer=0x12606600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12606600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.015] CloseHandle (hObject=0x340) returned 1
	[0135.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8)) returned 1
	[0135.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.016] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.016] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85e95b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.016] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.016] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.016] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.017] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.017] WriteFile (in: hFile=0x340, lpBuffer=0x12607900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12607900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.019] CloseHandle (hObject=0x340) returned 1
	[0135.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1
	[0135.026] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.031] SetEvent (hEvent=0x80) returned 1
	[0135.031] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.032] SetEvent (hEvent=0x80) returned 1
	[0135.032] SetEvent (hEvent=0x2f4) returned 1
	[0135.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.032] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.032] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.032] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.032] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.032] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.033] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.033] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.034] CloseHandle (hObject=0x340) returned 1
	[0135.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x299)) returned 1
	[0135.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.035] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.035] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.035] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.035] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.035] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.036] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.036] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.037] CloseHandle (hObject=0x340) returned 1
	[0135.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1
	[0135.045] SetEvent (hEvent=0x2f4) returned 1
	[0135.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.046] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.046] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.046] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.046] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.046] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.047] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.047] WriteFile (in: hFile=0x32c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.049] CloseHandle (hObject=0x32c) returned 1
	[0135.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1
	[0135.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.049] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.050] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.050] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.050] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.050] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.050] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.050] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.050] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.050] WriteFile (in: hFile=0x32c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.052] CloseHandle (hObject=0x32c) returned 1
	[0135.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1
	[0135.064] SetEvent (hEvent=0x2f4) returned 1
	[0135.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.064] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.064] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebbce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ebbce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.064] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.064] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.065] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.067] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.067] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.070] CloseHandle (hObject=0x32c) returned 1
	[0135.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1
	[0135.073] SetEvent (hEvent=0x80) returned 1
	[0135.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.073] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.074] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.074] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.074] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.074] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.077] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.077] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.080] CloseHandle (hObject=0x32c) returned 1
	[0135.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1
	[0135.082] SetEvent (hEvent=0x2f4) returned 1
	[0135.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.083] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.083] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.083] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.083] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.083] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.089] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.089] WriteFile (in: hFile=0x32c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.091] CloseHandle (hObject=0x32c) returned 1
	[0135.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x165)) returned 1
	[0135.092] SetEvent (hEvent=0x80) returned 1
	[0135.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.092] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.092] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.092] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.093] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.103] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.103] WriteFile (in: hFile=0x340, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.106] CloseHandle (hObject=0x340) returned 1
	[0135.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x25f)) returned 1
	[0135.108] SetEvent (hEvent=0x2f4) returned 1
	[0135.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.109] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.109] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.109] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.109] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.113] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.113] WriteFile (in: hFile=0x32c, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.116] CloseHandle (hObject=0x32c) returned 1
	[0135.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x147)) returned 1
	[0135.118] SetEvent (hEvent=0x80) returned 1
	[0135.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.118] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.118] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee1e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85ee1e40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.118] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.118] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.119] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.121] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.125] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.125] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.131] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.140] SetEvent (hEvent=0x2f4) returned 1
	[0135.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.140] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0135.140] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0135.140] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0135.140] ReadFile (in: hFile=0x32c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f1d1c*=0xd9, lpOverlapped=0x0) returned 1
	[0135.142] GetFileType (hFile=0x32c) returned 0x1
	[0135.142] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.142] WriteFile (in: hFile=0x32c, lpBuffer=0x12474000*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12474000*, lpNumberOfBytesWritten=0x124f1d00*=0xd9, lpOverlapped=0x124f1d0c) returned 1
	[0135.142] GetFileType (hFile=0x32c) returned 0x1
	[0135.142] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xd9, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0135.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0135.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0135.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0135.142] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.142] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.143] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.143] CloseHandle (hObject=0x33c) returned 1
	[0135.143] CloseHandle (hObject=0x32c) returned 1
	[0135.143] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.144] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2)) returned 1
	[0135.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0135.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0135.145] ReadFile (in: hFile=0x32c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x1c2, lpOverlapped=0x0) returned 1
	[0135.146] GetFileType (hFile=0x32c) returned 0x1
	[0135.146] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.146] WriteFile (in: hFile=0x32c, lpBuffer=0x124c81e0*, nNumberOfBytesToWrite=0x1c2, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124c81e0*, lpNumberOfBytesWritten=0x1242bd00*=0x1c2, lpOverlapped=0x1242bd0c) returned 1
	[0135.146] GetFileType (hFile=0x32c) returned 0x1
	[0135.146] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x1c2, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.146] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0135.146] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0135.146] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0135.146] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0135.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.147] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.147] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.147] CloseHandle (hObject=0x33c) returned 1
	[0135.147] CloseHandle (hObject=0x32c) returned 1
	[0135.147] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.148] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.164] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.195] SetEvent (hEvent=0x2f4) returned 1
	[0135.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.196] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x183)) returned 1
	[0135.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0135.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0135.196] ReadFile (in: hFile=0x32c, lpBuffer=0x1291c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1291c000*, lpNumberOfBytesRead=0x124f1d1c*=0x183, lpOverlapped=0x0) returned 1
	[0135.206] GetFileType (hFile=0x32c) returned 0x1
	[0135.206] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.206] WriteFile (in: hFile=0x32c, lpBuffer=0x1271fd40*, nNumberOfBytesToWrite=0x183, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1271fd40*, lpNumberOfBytesWritten=0x124f1d00*=0x183, lpOverlapped=0x124f1d0c) returned 1
	[0135.213] GetFileType (hFile=0x32c) returned 0x1
	[0135.213] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x183, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0135.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0135.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0135.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105c0 | out: pbBuffer=0x124105c0) returned 1
	[0135.214] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.214] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.214] WriteFile (in: hFile=0x344, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.219] CloseHandle (hObject=0x344) returned 1
	[0135.219] CloseHandle (hObject=0x32c) returned 1
	[0135.222] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.236] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.246] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.258] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.267] SetEvent (hEvent=0x320) returned 1
	[0135.267] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.275] SetEvent (hEvent=0x320) returned 1
	[0135.275] SetEvent (hEvent=0x2f4) returned 1
	[0135.275] SetEvent (hEvent=0x80) returned 1
	[0135.275] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.276] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.298] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.308] SetEvent (hEvent=0x320) returned 1
	[0135.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.309] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1
	[0135.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0135.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0135.309] ReadFile (in: hFile=0x32c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f5d1c*=0xc6, lpOverlapped=0x0) returned 1
	[0135.311] GetFileType (hFile=0x32c) returned 0x1
	[0135.311] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.311] WriteFile (in: hFile=0x32c, lpBuffer=0x12534000*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12534000*, lpNumberOfBytesWritten=0x124f5d00*=0xc6, lpOverlapped=0x124f5d0c) returned 1
	[0135.311] GetFileType (hFile=0x32c) returned 0x1
	[0135.311] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xc6, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.311] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0135.311] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0135.312] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0135.312] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744670 | out: pbBuffer=0x12744670) returned 1
	[0135.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.312] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.312] WriteFile (in: hFile=0x348, lpBuffer=0x12606000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12606000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.312] CloseHandle (hObject=0x348) returned 1
	[0135.312] CloseHandle (hObject=0x32c) returned 1
	[0135.313] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.314] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf)) returned 1
	[0135.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0135.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744698 | out: pbBuffer=0x12744698) returned 1
	[0135.315] ReadFile (in: hFile=0x32c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f1d1c*=0xaf, lpOverlapped=0x0) returned 1
	[0135.316] GetFileType (hFile=0x32c) returned 0x1
	[0135.316] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.316] WriteFile (in: hFile=0x32c, lpBuffer=0x1260c4d0*, nNumberOfBytesToWrite=0xaf, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1260c4d0*, lpNumberOfBytesWritten=0x124f1d00*=0xaf, lpOverlapped=0x124f1d0c) returned 1
	[0135.317] GetFileType (hFile=0x32c) returned 0x1
	[0135.317] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xaf, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0135.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0135.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0135.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744980 | out: pbBuffer=0x12744980) returned 1
	[0135.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.317] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.318] WriteFile (in: hFile=0x348, lpBuffer=0x12606500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12606500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.318] CloseHandle (hObject=0x348) returned 1
	[0135.318] CloseHandle (hObject=0x32c) returned 1
	[0135.318] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.319] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.331] SetEvent (hEvent=0x80) returned 1
	[0135.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.331] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1
	[0135.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0135.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744998 | out: pbBuffer=0x12744998) returned 1
	[0135.331] ReadFile (in: hFile=0x348, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0x14e, lpOverlapped=0x0) returned 1
	[0135.333] GetFileType (hFile=0x348) returned 0x1
	[0135.333] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.333] WriteFile (in: hFile=0x348, lpBuffer=0x12786000*, nNumberOfBytesToWrite=0x14e, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12786000*, lpNumberOfBytesWritten=0x12429d00*=0x14e, lpOverlapped=0x12429d0c) returned 1
	[0135.333] GetFileType (hFile=0x348) returned 0x1
	[0135.333] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x14e, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0135.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0135.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0135.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744a50 | out: pbBuffer=0x12744a50) returned 1
	[0135.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.334] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.334] WriteFile (in: hFile=0x34c, lpBuffer=0x12606f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12606f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.335] CloseHandle (hObject=0x34c) returned 1
	[0135.335] CloseHandle (hObject=0x348) returned 1
	[0135.335] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.349] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.353] SetEvent (hEvent=0x80) returned 1
	[0135.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.354] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc5)) returned 1
	[0135.354] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0135.354] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744a68 | out: pbBuffer=0x12744a68) returned 1
	[0135.354] ReadFile (in: hFile=0x348, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f5d1c*=0xc5, lpOverlapped=0x0) returned 1
	[0135.355] GetFileType (hFile=0x348) returned 0x1
	[0135.356] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.356] WriteFile (in: hFile=0x348, lpBuffer=0x125340d0*, nNumberOfBytesToWrite=0xc5, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125340d0*, lpNumberOfBytesWritten=0x124f5d00*=0xc5, lpOverlapped=0x124f5d0c) returned 1
	[0135.357] GetFileType (hFile=0x348) returned 0x1
	[0135.357] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0xc5, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0135.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0135.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0135.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744b20 | out: pbBuffer=0x12744b20) returned 1
	[0135.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.358] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.358] WriteFile (in: hFile=0x34c, lpBuffer=0x12607400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12607400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.360] CloseHandle (hObject=0x34c) returned 1
	[0135.361] CloseHandle (hObject=0x348) returned 1
	[0135.362] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.369] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.400] SetEvent (hEvent=0x320) returned 1
	[0135.401] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.401] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1
	[0135.401] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4a0 | out: pbBuffer=0x1240f4a0) returned 1
	[0135.401] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744b38 | out: pbBuffer=0x12744b38) returned 1
	[0135.401] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0135.402] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0135.402] SetEvent (hEvent=0xa0) returned 1
	[0135.402] SetEvent (hEvent=0x320) returned 1
	[0135.403] ReadFile (in: hFile=0x348, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x124f5d1c*=0xc4, lpOverlapped=0x0) returned 1
	[0135.404] GetFileType (hFile=0x348) returned 0x1
	[0135.404] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.405] WriteFile (in: hFile=0x348, lpBuffer=0x125341a0*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125341a0*, lpNumberOfBytesWritten=0x124f5d00*=0xc4, lpOverlapped=0x124f5d0c) returned 1
	[0135.405] GetFileType (hFile=0x348) returned 0x1
	[0135.405] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0xc4, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0135.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0135.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0135.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744bf0 | out: pbBuffer=0x12744bf0) returned 1
	[0135.406] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.406] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.406] WriteFile (in: hFile=0x32c, lpBuffer=0x12607900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12607900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.407] CloseHandle (hObject=0x32c) returned 1
	[0135.407] CloseHandle (hObject=0x348) returned 1
	[0135.407] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.408] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0135.409] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0135.409] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0135.409] SetEvent (hEvent=0x2e8) returned 1
	[0135.409] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0135.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.413] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1
	[0135.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0135.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0135.413] ReadFile (in: hFile=0x34c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12429d1c*=0x150, lpOverlapped=0x0) returned 1
	[0135.415] GetFileType (hFile=0x34c) returned 0x1
	[0135.415] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.415] WriteFile (in: hFile=0x34c, lpBuffer=0x1247c580*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1247c580*, lpNumberOfBytesWritten=0x12429d00*=0x150, lpOverlapped=0x12429d0c) returned 1
	[0135.415] GetFileType (hFile=0x34c) returned 0x1
	[0135.415] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x150, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.415] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0135.415] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0135.415] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0135.416] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0135.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.416] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.416] WriteFile (in: hFile=0x348, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.416] CloseHandle (hObject=0x348) returned 1
	[0135.416] CloseHandle (hObject=0x34c) returned 1
	[0135.416] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.418] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.443] SetEvent (hEvent=0x80) returned 1
	[0135.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.443] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcd)) returned 1
	[0135.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0135.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0135.444] ReadFile (in: hFile=0x34c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1242bd1c*=0xcd, lpOverlapped=0x0) returned 1
	[0135.445] GetFileType (hFile=0x34c) returned 0x1
	[0135.445] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.445] WriteFile (in: hFile=0x34c, lpBuffer=0x12534000*, nNumberOfBytesToWrite=0xcd, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12534000*, lpNumberOfBytesWritten=0x1242bd00*=0xcd, lpOverlapped=0x1242bd0c) returned 1
	[0135.445] GetFileType (hFile=0x34c) returned 0x1
	[0135.445] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xcd, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.445] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0135.445] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0135.445] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0135.446] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0135.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.446] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.446] WriteFile (in: hFile=0x348, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.446] CloseHandle (hObject=0x348) returned 1
	[0135.446] CloseHandle (hObject=0x34c) returned 1
	[0135.447] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.448] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1
	[0135.448] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0135.448] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0135.448] ReadFile (in: hFile=0x34c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12429d1c*=0x115, lpOverlapped=0x0) returned 1
	[0135.470] GetFileType (hFile=0x34c) returned 0x1
	[0135.470] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.470] WriteFile (in: hFile=0x34c, lpBuffer=0x125fe480*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125fe480*, lpNumberOfBytesWritten=0x12429d00*=0x115, lpOverlapped=0x12429d0c) returned 1
	[0135.470] GetFileType (hFile=0x34c) returned 0x1
	[0135.470] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0135.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0135.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0135.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0135.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.471] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.471] WriteFile (in: hFile=0x348, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.471] CloseHandle (hObject=0x348) returned 1
	[0135.472] CloseHandle (hObject=0x34c) returned 1
	[0135.472] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.473] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.546] SetEvent (hEvent=0x320) returned 1
	[0135.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.547] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaa)) returned 1
	[0135.547] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0135.547] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0135.547] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0135.548] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0135.548] SetEvent (hEvent=0xa0) returned 1
	[0135.548] SetEvent (hEvent=0x320) returned 1
	[0135.548] SetEvent (hEvent=0x80) returned 1
	[0135.548] ReadFile (in: hFile=0x34c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0xaa, lpOverlapped=0x0) returned 1
	[0135.549] GetFileType (hFile=0x34c) returned 0x1
	[0135.549] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.550] WriteFile (in: hFile=0x34c, lpBuffer=0x125291e0*, nNumberOfBytesToWrite=0xaa, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125291e0*, lpNumberOfBytesWritten=0x124f3d00*=0xaa, lpOverlapped=0x124f3d0c) returned 1
	[0135.550] GetFileType (hFile=0x34c) returned 0x1
	[0135.550] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xaa, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.550] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0135.550] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0135.550] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0135.550] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106e0 | out: pbBuffer=0x124106e0) returned 1
	[0135.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.550] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.551] WriteFile (in: hFile=0x348, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.551] CloseHandle (hObject=0x348) returned 1
	[0135.551] CloseHandle (hObject=0x34c) returned 1
	[0135.551] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.553] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0135.553] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0135.553] SetEvent (hEvent=0x2e8) returned 1
	[0135.553] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0135.559] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.568] SetEvent (hEvent=0x320) returned 1
	[0135.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.569] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454)) returned 1
	[0135.569] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0135.569] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0135.569] ReadFile (in: hFile=0x348, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f3d1c*=0x4454, lpOverlapped=0x0) returned 1
	[0135.574] GetFileType (hFile=0x348) returned 0x1
	[0135.574] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.574] WriteFile (in: hFile=0x348, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x4454, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x124f3d00*=0x4454, lpOverlapped=0x124f3d0c) returned 1
	[0135.575] GetFileType (hFile=0x348) returned 0x1
	[0135.575] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x4454, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.575] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0135.575] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0135.575] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0135.575] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127443d0 | out: pbBuffer=0x127443d0) returned 1
	[0135.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.575] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.575] WriteFile (in: hFile=0x34c, lpBuffer=0x12626000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.576] CloseHandle (hObject=0x34c) returned 1
	[0135.576] CloseHandle (hObject=0x348) returned 1
	[0135.576] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.577] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.589] SetEvent (hEvent=0x320) returned 1
	[0135.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.590] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x127d5d0c | out: lpMode=0x127d5d0c) returned 0
	[0135.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), fInfoLevelId=0x0, lpFileInformation=0x127d5ad0 | out: lpFileInformation=0x127d5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x356)) returned 1
	[0135.590] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0135.590] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443f8 | out: pbBuffer=0x127443f8) returned 1
	[0135.591] ReadFile (in: hFile=0x34c, lpBuffer=0x126c6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x127d5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126c6000*, lpNumberOfBytesRead=0x127d5d1c*=0x356, lpOverlapped=0x0) returned 1
	[0135.599] GetFileType (hFile=0x34c) returned 0x1
	[0135.599] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x127d5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.599] WriteFile (in: hFile=0x34c, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x356, lpNumberOfBytesWritten=0x127d5d00, lpOverlapped=0x127d5d0c | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x127d5d00*=0x356, lpOverlapped=0x127d5d0c) returned 1
	[0135.609] GetFileType (hFile=0x34c) returned 0x1
	[0135.609] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x356, lpNewFilePointer=0x0, dwMoveMethod=0x127d5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0135.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0135.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0135.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744560 | out: pbBuffer=0x12744560) returned 1
	[0135.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.701] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x127d5d0c | out: lpMode=0x127d5d0c) returned 0
	[0135.701] WriteFile (in: hFile=0x348, lpBuffer=0x12626500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x127d5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626500*, lpNumberOfBytesWritten=0x127d5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.705] CloseHandle (hObject=0x348) returned 1
	[0135.706] CloseHandle (hObject=0x34c) returned 1
	[0135.707] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.743] SetEvent (hEvent=0xa0) returned 1
	[0135.743] SetEvent (hEvent=0x2f4) returned 1
	[0135.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.743] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x127d5d0c | out: lpMode=0x127d5d0c) returned 0
	[0135.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127d5ad0 | out: lpFileInformation=0x127d5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376)) returned 1
	[0135.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e5c0 | out: pbBuffer=0x1252e5c0) returned 1
	[0135.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744930 | out: pbBuffer=0x12744930) returned 1
	[0135.743] ReadFile (in: hFile=0x32c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x127d5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x127d5d1c*=0x376, lpOverlapped=0x0) returned 1
	[0135.749] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.753] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.845] SetEvent (hEvent=0x68) returned 1
	[0135.845] SetEvent (hEvent=0x80) returned 1
	[0135.845] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.918] SetEvent (hEvent=0x68) returned 1
	[0135.918] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0135.965] SetEvent (hEvent=0x2f4) returned 1
	[0135.966] SetEvent (hEvent=0x30c) returned 1
	[0135.966] SetEvent (hEvent=0x2e4) returned 1
	[0135.966] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0135.968] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0135.972] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0135.972] SetEvent (hEvent=0x80) returned 1
	[0135.972] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0135.975] GetFileType (hFile=0x2cc) returned 0x1
	[0135.975] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.975] WriteFile (in: hFile=0x2cc, lpBuffer=0x12622000*, nNumberOfBytesToWrite=0x26e, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12622000*, lpNumberOfBytesWritten=0x12429d00*=0x26e, lpOverlapped=0x12429d0c) returned 1
	[0135.975] GetFileType (hFile=0x2cc) returned 0x1
	[0135.975] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x26e, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0135.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0135.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0135.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0135.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.976] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.976] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.977] CloseHandle (hObject=0x344) returned 1
	[0135.977] CloseHandle (hObject=0x2cc) returned 1
	[0135.977] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb)) returned 1
	[0135.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.986] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.986] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.986] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.986] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.986] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.987] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.987] WriteFile (in: hFile=0x34c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.989] CloseHandle (hObject=0x34c) returned 1
	[0135.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284)) returned 1
	[0135.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.990] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.990] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.991] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.991] WriteFile (in: hFile=0x34c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.992] CloseHandle (hObject=0x34c) returned 1
	[0135.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1
	[0135.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.997] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.997] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.997] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.998] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.998] WriteFile (in: hFile=0x32c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.000] CloseHandle (hObject=0x32c) returned 1
	[0136.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8279df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1
	[0136.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.001] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.001] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.001] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.001] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.001] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.002] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.002] WriteFile (in: hFile=0x32c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.004] CloseHandle (hObject=0x32c) returned 1
	[0136.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b)) returned 1
	[0136.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.017] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.017] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.017] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.018] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.018] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.019] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.019] WriteFile (in: hFile=0x344, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.021] CloseHandle (hObject=0x344) returned 1
	[0136.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295)) returned 1
	[0136.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.022] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827a5440, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b)) returned 1
	[0136.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0136.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105a0 | out: pbBuffer=0x124105a0) returned 1
	[0136.022] ReadFile (in: hFile=0x344, lpBuffer=0x12958000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12958000*, lpNumberOfBytesRead=0x124f1d1c*=0x29b, lpOverlapped=0x0) returned 1
	[0136.051] GetFileType (hFile=0x344) returned 0x1
	[0136.051] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.051] WriteFile (in: hFile=0x344, lpBuffer=0x12460580*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12460580*, lpNumberOfBytesWritten=0x124f1d00*=0x29b, lpOverlapped=0x124f1d0c) returned 1
	[0136.051] GetFileType (hFile=0x344) returned 0x1
	[0136.051] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x29b, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0136.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0136.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0136.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106a8 | out: pbBuffer=0x124106a8) returned 1
	[0136.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.052] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.052] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.053] CloseHandle (hObject=0x2cc) returned 1
	[0136.053] CloseHandle (hObject=0x344) returned 1
	[0136.053] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_BR\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_br\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.054] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0136.075] SetEvent (hEvent=0x80) returned 1
	[0136.075] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0136.252] SetEvent (hEvent=0x2e8) returned 1
	[0136.252] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0136.286] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.286] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0136.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12629ad0 | out: lpFileInformation=0x12629ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1
	[0136.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0136.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0136.287] ReadFile (in: hFile=0x2cc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12629d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12629d1c*=0x32c, lpOverlapped=0x0) returned 1
	[0136.308] GetFileType (hFile=0x2cc) returned 0x1
	[0136.308] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.308] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277a000*, nNumberOfBytesToWrite=0x32c, lpNumberOfBytesWritten=0x12629d00, lpOverlapped=0x12629d0c | out: lpBuffer=0x1277a000*, lpNumberOfBytesWritten=0x12629d00*=0x32c, lpOverlapped=0x12629d0c) returned 1
	[0136.308] GetFileType (hFile=0x2cc) returned 0x1
	[0136.308] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x32c, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0136.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0136.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0136.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0136.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.309] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0136.309] WriteFile (in: hFile=0x32c, lpBuffer=0x12768000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12629d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768000*, lpNumberOfBytesWritten=0x12629d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.310] CloseHandle (hObject=0x32c) returned 1
	[0136.310] CloseHandle (hObject=0x2cc) returned 1
	[0136.310] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.321] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b)) returned 1
	[0136.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0136.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0136.322] ReadFile (in: hFile=0x2cc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f1d1c*=0x44b, lpOverlapped=0x0) returned 1
	[0136.338] GetFileType (hFile=0x2cc) returned 0x1
	[0136.338] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.338] WriteFile (in: hFile=0x2cc, lpBuffer=0x125f4480*, nNumberOfBytesToWrite=0x44b, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x125f4480*, lpNumberOfBytesWritten=0x124f1d00*=0x44b, lpOverlapped=0x124f1d0c) returned 1
	[0136.338] GetFileType (hFile=0x2cc) returned 0x1
	[0136.338] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x44b, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.338] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0136.338] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0136.339] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0136.339] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0136.339] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.339] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.339] WriteFile (in: hFile=0x32c, lpBuffer=0x12768500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.339] CloseHandle (hObject=0x32c) returned 1
	[0136.339] CloseHandle (hObject=0x2cc) returned 1
	[0136.340] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.341] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0136.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12629ad0 | out: lpFileInformation=0x12629ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315)) returned 1
	[0136.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4c0 | out: pbBuffer=0x1252e4c0) returned 1
	[0136.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0136.342] ReadFile (in: hFile=0x2cc, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12629d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x12629d1c*=0x315, lpOverlapped=0x0) returned 1
	[0136.355] GetFileType (hFile=0x2cc) returned 0x1
	[0136.355] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.355] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277a380*, nNumberOfBytesToWrite=0x315, lpNumberOfBytesWritten=0x12629d00, lpOverlapped=0x12629d0c | out: lpBuffer=0x1277a380*, lpNumberOfBytesWritten=0x12629d00*=0x315, lpOverlapped=0x12629d0c) returned 1
	[0136.355] GetFileType (hFile=0x2cc) returned 0x1
	[0136.355] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x315, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0136.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0136.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0136.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744650 | out: pbBuffer=0x12744650) returned 1
	[0136.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.356] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0136.356] WriteFile (in: hFile=0x344, lpBuffer=0x12768a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12629d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768a00*, lpNumberOfBytesWritten=0x12629d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.357] CloseHandle (hObject=0x344) returned 1
	[0136.357] CloseHandle (hObject=0x2cc) returned 1
	[0136.357] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.358] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1
	[0136.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6e0 | out: pbBuffer=0x1252e6e0) returned 1
	[0136.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744668 | out: pbBuffer=0x12744668) returned 1
	[0136.359] ReadFile (in: hFile=0x2cc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f5d1c*=0x2d0, lpOverlapped=0x0) returned 1
	[0136.368] GetFileType (hFile=0x2cc) returned 0x1
	[0136.368] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.369] WriteFile (in: hFile=0x2cc, lpBuffer=0x1260a300*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260a300*, lpNumberOfBytesWritten=0x124f5d00*=0x2d0, lpOverlapped=0x124f5d0c) returned 1
	[0136.369] GetFileType (hFile=0x2cc) returned 0x1
	[0136.369] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x2d0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0136.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0136.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0136.370] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744a50 | out: pbBuffer=0x12744a50) returned 1
	[0136.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.370] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.370] WriteFile (in: hFile=0x344, lpBuffer=0x12768f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.370] CloseHandle (hObject=0x344) returned 1
	[0136.370] CloseHandle (hObject=0x2cc) returned 1
	[0136.370] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.393] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253)) returned 1
	[0136.393] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e900 | out: pbBuffer=0x1252e900) returned 1
	[0136.393] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744a68 | out: pbBuffer=0x12744a68) returned 1
	[0136.393] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0136.395] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0136.395] SetEvent (hEvent=0xa0) returned 1
	[0136.395] SetEvent (hEvent=0x68) returned 1
	[0136.395] SetEvent (hEvent=0x320) returned 1
	[0136.396] ReadFile (in: hFile=0x2cc, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x124f1d1c*=0x253, lpOverlapped=0x0) returned 1
	[0136.399] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0136.400] SetEvent (hEvent=0x68) returned 1
	[0136.400] GetFileType (hFile=0x2cc) returned 0x1
	[0136.400] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.401] WriteFile (in: hFile=0x2cc, lpBuffer=0x125dd680*, nNumberOfBytesToWrite=0x253, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x125dd680*, lpNumberOfBytesWritten=0x124f1d00*=0x253, lpOverlapped=0x124f1d0c) returned 1
	[0136.401] GetFileType (hFile=0x2cc) returned 0x1
	[0136.401] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x253, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.401] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca01 | out: pbBuffer=0x124eca01) returned 1
	[0136.401] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb01 | out: pbBuffer=0x124ecb01) returned 1
	[0136.401] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc01 | out: pbBuffer=0x124ecc01) returned 1
	[0136.402] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0136.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.402] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.402] WriteFile (in: hFile=0x32c, lpBuffer=0x125e5400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e5400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.402] CloseHandle (hObject=0x32c) returned 1
	[0136.402] CloseHandle (hObject=0x2cc) returned 1
	[0136.402] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.404] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0136.404] SetEvent (hEvent=0x68) returned 1
	[0136.405] SetEvent (hEvent=0x80) returned 1
	[0136.405] GetFileType (hFile=0x344) returned 0x1
	[0136.405] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.405] WriteFile (in: hFile=0x344, lpBuffer=0x1298e780*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1298e780*, lpNumberOfBytesWritten=0x12429d00*=0x280, lpOverlapped=0x12429d0c) returned 1
	[0136.405] GetFileType (hFile=0x344) returned 0x1
	[0136.405] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x280, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0136.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0136.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0136.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0136.406] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.406] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.406] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.407] CloseHandle (hObject=0x2cc) returned 1
	[0136.407] CloseHandle (hObject=0x344) returned 1
	[0136.407] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.409] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1
	[0136.409] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0136.409] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0136.409] ReadFile (in: hFile=0x344, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1242bd1c*=0x2dfa, lpOverlapped=0x0) returned 1
	[0136.450] GetFileType (hFile=0x344) returned 0x1
	[0136.450] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.450] WriteFile (in: hFile=0x344, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x2dfa, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x1242bd00*=0x2dfa, lpOverlapped=0x1242bd0c) returned 1
	[0136.450] GetFileType (hFile=0x344) returned 0x1
	[0136.450] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x2dfa, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0136.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0136.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0136.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0136.451] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.451] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.451] WriteFile (in: hFile=0x32c, lpBuffer=0x125e4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.452] CloseHandle (hObject=0x32c) returned 1
	[0136.452] CloseHandle (hObject=0x344) returned 1
	[0136.452] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.475] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0136.519] SetEvent (hEvent=0x68) returned 1
	[0136.519] SetEvent (hEvent=0x2e4) returned 1
	[0136.519] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0137.306] SetEvent (hEvent=0x2e8) returned 1
	[0137.306] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0137.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.337] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79)) returned 1
	[0137.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0137.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0137.337] ReadFile (in: hFile=0x33c, lpBuffer=0x128fc000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128fc000*, lpNumberOfBytesRead=0x12429d1c*=0x3f79, lpOverlapped=0x0) returned 1
	[0137.357] GetFileType (hFile=0x33c) returned 0x1
	[0137.357] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.357] WriteFile (in: hFile=0x33c, lpBuffer=0x12524000*, nNumberOfBytesToWrite=0x3f79, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12524000*, lpNumberOfBytesWritten=0x12429d00*=0x3f79, lpOverlapped=0x12429d0c) returned 1
	[0137.357] GetFileType (hFile=0x33c) returned 0x1
	[0137.357] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3f79, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0137.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0137.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0137.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0137.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.358] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.358] WriteFile (in: hFile=0x32c, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.358] CloseHandle (hObject=0x32c) returned 1
	[0137.358] CloseHandle (hObject=0x33c) returned 1
	[0137.359] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.360] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0137.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe)) returned 1
	[0137.360] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0137.360] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0137.360] ReadFile (in: hFile=0x33c, lpBuffer=0x1279c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1279c000*, lpNumberOfBytesRead=0x124f5d1c*=0x4afe, lpOverlapped=0x0) returned 1
	[0137.374] GetFileType (hFile=0x33c) returned 0x1
	[0137.375] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.375] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x4afe, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x124f5d00*=0x4afe, lpOverlapped=0x124f5d0c) returned 1
	[0137.375] GetFileType (hFile=0x33c) returned 0x1
	[0137.375] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4afe, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0137.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0137.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0137.376] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0137.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.376] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0137.376] WriteFile (in: hFile=0x32c, lpBuffer=0x1263a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.376] CloseHandle (hObject=0x32c) returned 1
	[0137.376] CloseHandle (hObject=0x33c) returned 1
	[0137.376] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.378] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b)) returned 1
	[0137.379] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0137.379] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0137.379] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0x404b, lpOverlapped=0x0) returned 1
	[0137.390] GetFileType (hFile=0x33c) returned 0x1
	[0137.391] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.391] WriteFile (in: hFile=0x33c, lpBuffer=0x1297c000*, nNumberOfBytesToWrite=0x404b, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1297c000*, lpNumberOfBytesWritten=0x12429d00*=0x404b, lpOverlapped=0x12429d0c) returned 1
	[0137.391] GetFileType (hFile=0x33c) returned 0x1
	[0137.391] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x404b, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.391] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0137.391] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0137.391] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0137.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0137.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.392] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.392] WriteFile (in: hFile=0x34c, lpBuffer=0x1263aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263aa00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.392] CloseHandle (hObject=0x34c) returned 1
	[0137.392] CloseHandle (hObject=0x33c) returned 1
	[0137.393] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.395] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85)) returned 1
	[0137.395] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6c0 | out: pbBuffer=0x1252e6c0) returned 1
	[0137.395] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0137.395] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0137.396] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0137.396] SetEvent (hEvent=0xa0) returned 1
	[0137.396] SetEvent (hEvent=0x30c) returned 1
	[0137.396] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f1d1c*=0x3e85, lpOverlapped=0x0) returned 1
	[0137.407] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0137.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.455] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0137.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c)) returned 1
	[0137.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0137.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0137.455] ReadFile (in: hFile=0x32c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1277dd1c*=0x3f4c, lpOverlapped=0x0) returned 1
	[0137.474] GetFileType (hFile=0x32c) returned 0x1
	[0137.474] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.474] WriteFile (in: hFile=0x32c, lpBuffer=0x12524000*, nNumberOfBytesToWrite=0x3f4c, lpNumberOfBytesWritten=0x1277dd00, lpOverlapped=0x1277dd0c | out: lpBuffer=0x12524000*, lpNumberOfBytesWritten=0x1277dd00*=0x3f4c, lpOverlapped=0x1277dd0c) returned 1
	[0137.474] GetFileType (hFile=0x32c) returned 0x1
	[0137.474] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x3f4c, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.474] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0137.474] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0137.475] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0137.475] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0137.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0137.475] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0137.475] WriteFile (in: hFile=0x2cc, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x1277dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.475] CloseHandle (hObject=0x2cc) returned 1
	[0137.475] CloseHandle (hObject=0x32c) returned 1
	[0137.476] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.477] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0137.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7)) returned 1
	[0137.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0137.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0137.478] ReadFile (in: hFile=0x32c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1277dd1c*=0x50f7, lpOverlapped=0x0) returned 1
	[0137.605] GetFileType (hFile=0x32c) returned 0x1
	[0137.605] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.605] WriteFile (in: hFile=0x32c, lpBuffer=0x124a6a00*, nNumberOfBytesToWrite=0x50f7, lpNumberOfBytesWritten=0x1277dd00, lpOverlapped=0x1277dd0c | out: lpBuffer=0x124a6a00*, lpNumberOfBytesWritten=0x1277dd00*=0x50f7, lpOverlapped=0x1277dd0c) returned 1
	[0137.605] GetFileType (hFile=0x32c) returned 0x1
	[0137.605] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x50f7, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.605] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0137.606] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0137.606] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0137.606] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0137.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0137.606] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0137.606] WriteFile (in: hFile=0x344, lpBuffer=0x12618a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12618a00*, lpNumberOfBytesWritten=0x1277dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.606] CloseHandle (hObject=0x344) returned 1
	[0137.606] CloseHandle (hObject=0x32c) returned 1
	[0137.606] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.608] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0137.653] SetEvent (hEvent=0x80) returned 1
	[0137.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.654] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x125cdd0c | out: lpMode=0x125cdd0c) returned 0
	[0137.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x125cdad0 | out: lpFileInformation=0x125cdad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2)) returned 1
	[0137.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0137.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0137.655] ReadFile (in: hFile=0x32c, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125cdd1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x125cdd1c*=0x3ff2, lpOverlapped=0x0) returned 1
	[0137.720] GetFileType (hFile=0x32c) returned 0x1
	[0137.720] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125cdce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.720] WriteFile (in: hFile=0x32c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x3ff2, lpNumberOfBytesWritten=0x125cdd00, lpOverlapped=0x125cdd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x125cdd00*=0x3ff2, lpOverlapped=0x125cdd0c) returned 1
	[0137.720] GetFileType (hFile=0x32c) returned 0x1
	[0137.720] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x3ff2, lpNewFilePointer=0x0, dwMoveMethod=0x125cdce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.720] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0137.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0137.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0137.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106e0 | out: pbBuffer=0x124106e0) returned 1
	[0137.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.721] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125cdd0c | out: lpMode=0x125cdd0c) returned 0
	[0137.721] WriteFile (in: hFile=0x33c, lpBuffer=0x12618f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125cdd0c, lpOverlapped=0x0 | out: lpBuffer=0x12618f00*, lpNumberOfBytesWritten=0x125cdd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.721] CloseHandle (hObject=0x33c) returned 1
	[0137.721] CloseHandle (hObject=0x32c) returned 1
	[0137.722] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.832] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0138.957] SetEvent (hEvent=0x30c) returned 1
	[0138.957] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0139.650] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0142.034] SetEvent (hEvent=0x80) returned 1
	[0142.034] SetEvent (hEvent=0x320) returned 1
	[0142.034] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0142.068] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0142.068] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0142.102] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0142.102] SetEvent (hEvent=0x2f4) returned 1
	[0142.102] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0142.140] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0142.140] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0142.831] SetEvent (hEvent=0x30c) returned 1
	[0142.832] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0142.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833dcb50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836af5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8395fd70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1
	[0142.837] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0142.928] SetEvent (hEvent=0x80) returned 1
	[0142.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x7c33)) returned 1
	[0142.929] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0142.935] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0143.111] SetEvent (hEvent=0x80) returned 1
	[0143.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1
	[0143.112] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0143.138] SetEvent (hEvent=0x80) returned 1
	[0143.138] SetEvent (hEvent=0x2e8) returned 1
	[0143.138] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0143.283] SetEvent (hEvent=0x30c) returned 1
	[0143.283] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0143.707] SetEvent (hEvent=0x80) returned 1
	[0143.707] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0143.713] SetEvent (hEvent=0x80) returned 1
	[0143.713] SetEvent (hEvent=0x2e4) returned 1
	[0143.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1
	[0143.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.718] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1
	[0143.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0143.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0143.719] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12429d1c*=0x3c00, lpOverlapped=0x0) returned 1
	[0143.723] GetFileType (hFile=0x33c) returned 0x1
	[0143.723] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.723] WriteFile (in: hFile=0x33c, lpBuffer=0x12740000*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12740000*, lpNumberOfBytesWritten=0x12429d00*=0x3c00, lpOverlapped=0x12429d0c) returned 1
	[0143.724] GetFileType (hFile=0x33c) returned 0x1
	[0143.724] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3c00, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0143.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0143.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0143.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0143.724] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.724] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.724] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.725] CloseHandle (hObject=0x34c) returned 1
	[0143.725] CloseHandle (hObject=0x33c) returned 1
	[0143.725] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.728] SetEvent (hEvent=0x2e4) returned 1
	[0143.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.728] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.729] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0143.729] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0143.729] ReadFile (in: hFile=0x33c, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.729] CloseHandle (hObject=0x33c) returned 1
	[0143.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1
	[0143.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1
	[0143.730] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.731] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1
	[0143.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e260 | out: pbBuffer=0x1252e260) returned 1
	[0143.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0143.731] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12429d1c*=0x28, lpOverlapped=0x0) returned 1
	[0143.733] GetFileType (hFile=0x33c) returned 0x1
	[0143.733] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.733] WriteFile (in: hFile=0x33c, lpBuffer=0x1240a2a0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1240a2a0*, lpNumberOfBytesWritten=0x12429d00*=0x28, lpOverlapped=0x12429d0c) returned 1
	[0143.733] GetFileType (hFile=0x33c) returned 0x1
	[0143.733] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.733] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0143.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0143.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0143.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5f0 | out: pbBuffer=0x1251e5f0) returned 1
	[0143.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.734] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.734] WriteFile (in: hFile=0x34c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.734] CloseHandle (hObject=0x34c) returned 1
	[0143.734] CloseHandle (hObject=0x33c) returned 1
	[0143.735] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Persistent State.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\network persistent state.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.737] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1
	[0143.737] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4a0 | out: pbBuffer=0x1252e4a0) returned 1
	[0143.737] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e688 | out: pbBuffer=0x1251e688) returned 1
	[0143.737] ReadFile (in: hFile=0x33c, lpBuffer=0x12938000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12938000*, lpNumberOfBytesRead=0x12429d1c*=0x1400, lpOverlapped=0x0) returned 1
	[0143.743] GetFileType (hFile=0x33c) returned 0x1
	[0143.743] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.743] WriteFile (in: hFile=0x33c, lpBuffer=0x1250d500*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1250d500*, lpNumberOfBytesWritten=0x12429d00*=0x1400, lpOverlapped=0x12429d0c) returned 1
	[0143.743] GetFileType (hFile=0x33c) returned 0x1
	[0143.743] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1400, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0143.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0143.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0143.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e750 | out: pbBuffer=0x1251e750) returned 1
	[0143.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.744] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.744] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.744] CloseHandle (hObject=0x34c) returned 1
	[0143.745] CloseHandle (hObject=0x33c) returned 1
	[0143.745] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.749] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.754] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6c0 | out: pbBuffer=0x1252e6c0) returned 1
	[0143.754] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e768 | out: pbBuffer=0x1251e768) returned 1
	[0143.754] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.754] CloseHandle (hObject=0x33c) returned 1
	[0143.754] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0143.905] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0143.943] SetEvent (hEvent=0x2e8) returned 1
	[0143.943] SetEvent (hEvent=0x320) returned 1
	[0143.943] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0143.979] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0143.979] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0144.080] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0144.080] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0144.080] SetEvent (hEvent=0x2e8) returned 1
	[0144.081] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0144.115] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0144.115] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0161.204] SetEvent (hEvent=0x68) returned 1
	[0161.204] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0162.115] SwitchToThread () returned 1
	[0162.174] SwitchToThread () returned 1
	[0162.175] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0162.186] SetEvent (hEvent=0x30c) returned 1
	[0162.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\VBj DzpAPGzF3j.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vbj dzpapgzf3j.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0162.187] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0162.187] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\VBj DzpAPGzF3j.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vbj dzpapgzf3j.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5599d300, ftCreationTime.dwHighDateTime=0x1d5e2b5, ftLastAccessTime.dwLowDateTime=0x5bf78ea0, ftLastAccessTime.dwHighDateTime=0x1d5e296, ftLastWriteTime.dwLowDateTime=0x5bf78ea0, ftLastWriteTime.dwHighDateTime=0x1d5e296, nFileSizeHigh=0x0, nFileSizeLow=0x1374c)) returned 1
	[0162.187] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0162.187] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0162.188] ReadFile (in: hFile=0x340, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x12429d1c*=0x1374c, lpOverlapped=0x0) returned 1
	[0162.193] GetFileType (hFile=0x340) returned 0x1
	[0162.193] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.193] WriteFile (in: hFile=0x340, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x1374c, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x12429d00*=0x1374c, lpOverlapped=0x12429d0c) returned 1
	[0162.194] GetFileType (hFile=0x340) returned 0x1
	[0162.194] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x1374c, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.194] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0162.194] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0162.194] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0162.195] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0162.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\VBj DzpAPGzF3j.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vbj dzpapgzf3j.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0162.195] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0162.195] WriteFile (in: hFile=0x350, lpBuffer=0x12524000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12524000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.195] CloseHandle (hObject=0x350) returned 1
	[0162.196] CloseHandle (hObject=0x340) returned 1
	[0162.199] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\VBj DzpAPGzF3j.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vbj dzpapgzf3j.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\VBj DzpAPGzF3j.gif.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vbj dzpapgzf3j.gif.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Y68O.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\y68o.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0162.228] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0162.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Y68O.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\y68o.wav"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f111500, ftCreationTime.dwHighDateTime=0x1d5d861, ftLastAccessTime.dwLowDateTime=0xb562d500, ftLastAccessTime.dwHighDateTime=0x1d5e582, ftLastWriteTime.dwLowDateTime=0xb562d500, ftLastWriteTime.dwHighDateTime=0x1d5e582, nFileSizeHigh=0x0, nFileSizeLow=0x1668b)) returned 1
	[0162.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0162.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0162.228] ReadFile (in: hFile=0x33c, lpBuffer=0x128e4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e4000*, lpNumberOfBytesRead=0x124f3d1c*=0x1668b, lpOverlapped=0x0) returned 1
	[0162.248] GetFileType (hFile=0x33c) returned 0x1
	[0162.249] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.249] WriteFile (in: hFile=0x33c, lpBuffer=0x1286c000*, nNumberOfBytesToWrite=0x1668b, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1286c000*, lpNumberOfBytesWritten=0x124f3d00*=0x1668b, lpOverlapped=0x124f3d0c) returned 1
	[0162.249] GetFileType (hFile=0x33c) returned 0x1
	[0162.249] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1668b, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.249] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0162.249] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0162.249] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0162.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0162.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Y68O.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\y68o.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0162.250] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0162.250] WriteFile (in: hFile=0x340, lpBuffer=0x12602000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12602000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.250] CloseHandle (hObject=0x340) returned 1
	[0162.250] CloseHandle (hObject=0x33c) returned 1
	[0162.250] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Y68O.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\y68o.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Y68O.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\y68o.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\acKsRzA IaCKL6.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\acksrza iackl6.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0162.258] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0162.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\acKsRzA IaCKL6.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\acksrza iackl6.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1e694c0, ftCreationTime.dwHighDateTime=0x1d5e471, ftLastAccessTime.dwLowDateTime=0x1498dd50, ftLastAccessTime.dwHighDateTime=0x1d5db40, ftLastWriteTime.dwLowDateTime=0x1498dd50, ftLastWriteTime.dwHighDateTime=0x1d5db40, nFileSizeHigh=0x0, nFileSizeLow=0x126d)) returned 1
	[0162.258] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0162.258] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0162.258] ReadFile (in: hFile=0x33c, lpBuffer=0x12904000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12904000*, lpNumberOfBytesRead=0x1245dd1c*=0x126d, lpOverlapped=0x0) returned 1
	[0162.284] GetFileType (hFile=0x33c) returned 0x1
	[0162.284] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.284] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x126d, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1245dd00*=0x126d, lpOverlapped=0x1245dd0c) returned 1
	[0162.285] GetFileType (hFile=0x33c) returned 0x1
	[0162.285] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x126d, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0162.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0162.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0162.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0162.286] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\acKsRzA IaCKL6.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\acksrza iackl6.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0162.286] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0162.286] WriteFile (in: hFile=0x350, lpBuffer=0x12602500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12602500*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.286] CloseHandle (hObject=0x350) returned 1
	[0162.286] CloseHandle (hObject=0x33c) returned 1
	[0162.287] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\acKsRzA IaCKL6.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\acksrza iackl6.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\acKsRzA IaCKL6.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\acksrza iackl6.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.324] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0162.340] SetEvent (hEvent=0x320) returned 1
	[0162.340] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0162.348] SetEvent (hEvent=0x320) returned 1
	[0162.348] SetEvent (hEvent=0x80) returned 1
	[0162.349] GetFileType (hFile=0x340) returned 0x1
	[0162.349] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.349] WriteFile (in: hFile=0x340, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x18fd2, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x1245bd00*=0x18fd2, lpOverlapped=0x1245bd0c) returned 1
	[0162.350] GetFileType (hFile=0x340) returned 0x1
	[0162.350] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x18fd2, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0162.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0162.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0162.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0162.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\guhNBmJGTnVeriINiWLp.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\guhnbmjgtnveriiniwlp.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0162.351] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0162.351] WriteFile (in: hFile=0x350, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.351] CloseHandle (hObject=0x350) returned 1
	[0162.352] CloseHandle (hObject=0x340) returned 1
	[0162.352] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\guhNBmJGTnVeriINiWLp.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\guhnbmjgtnveriiniwlp.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\guhNBmJGTnVeriINiWLp.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\guhnbmjgtnveriiniwlp.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lGaXRLi6YTbXeMEsLC.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lgaxrli6ytbxemeslc.mkv"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1bad820, ftCreationTime.dwHighDateTime=0x1d5db48, ftLastAccessTime.dwLowDateTime=0x521d1100, ftLastAccessTime.dwHighDateTime=0x1d5e144, ftLastWriteTime.dwLowDateTime=0x521d1100, ftLastWriteTime.dwHighDateTime=0x1d5e144, nFileSizeHigh=0x0, nFileSizeLow=0xa475)) returned 1
	[0162.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\m_0F 5e.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\m_0f 5e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8a811180, ftCreationTime.dwHighDateTime=0x1d5e2da, ftLastAccessTime.dwLowDateTime=0x8c2ff4d0, ftLastAccessTime.dwHighDateTime=0x1d5e07b, ftLastWriteTime.dwLowDateTime=0x8c2ff4d0, ftLastWriteTime.dwHighDateTime=0x1d5e07b, nFileSizeHigh=0x0, nFileSizeLow=0x17840)) returned 1
	[0162.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\txRhv5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\txrhv5.pptx"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc05091e0, ftCreationTime.dwHighDateTime=0x1d5dc14, ftLastAccessTime.dwLowDateTime=0xfa356d90, ftLastAccessTime.dwHighDateTime=0x1d5e790, ftLastWriteTime.dwLowDateTime=0xfa356d90, ftLastWriteTime.dwHighDateTime=0x1d5e790, nFileSizeHigh=0x0, nFileSizeLow=0xfc99)) returned 1
	[0162.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\u0gc-wcOTa0l.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\u0gc-wcota0l.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e9ac2d0, ftCreationTime.dwHighDateTime=0x1d5dd11, ftLastAccessTime.dwLowDateTime=0x156ecab0, ftLastAccessTime.dwHighDateTime=0x1d5de50, ftLastWriteTime.dwLowDateTime=0x156ecab0, ftLastWriteTime.dwHighDateTime=0x1d5de50, nFileSizeHigh=0x0, nFileSizeLow=0x2bd7)) returned 1
	[0162.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\txRhv5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\txrhv5.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0162.369] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0162.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\txRhv5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\txrhv5.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc05091e0, ftCreationTime.dwHighDateTime=0x1d5dc14, ftLastAccessTime.dwLowDateTime=0xfa356d90, ftLastAccessTime.dwHighDateTime=0x1d5e790, ftLastWriteTime.dwLowDateTime=0xfa356d90, ftLastWriteTime.dwHighDateTime=0x1d5e790, nFileSizeHigh=0x0, nFileSizeLow=0xfc99)) returned 1
	[0162.370] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0162.370] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0162.370] ReadFile (in: hFile=0x340, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1245bd1c*=0xfc99, lpOverlapped=0x0) returned 1
	[0162.408] GetFileType (hFile=0x340) returned 0x1
	[0162.408] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.408] WriteFile (in: hFile=0x340, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0xfc99, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x1245bd00*=0xfc99, lpOverlapped=0x1245bd0c) returned 1
	[0162.417] GetFileType (hFile=0x340) returned 0x1
	[0162.417] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xfc99, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0162.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0162.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0162.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0162.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\txRhv5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\txrhv5.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0162.418] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0162.418] WriteFile (in: hFile=0x354, lpBuffer=0x125d4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125d4500*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.432] CloseHandle (hObject=0x354) returned 1
	[0162.433] CloseHandle (hObject=0x340) returned 1
	[0162.534] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\txRhv5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\txrhv5.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\txRhv5.pptx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\txrhv5.pptx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.555] SetEvent (hEvent=0x2e4) returned 1
	[0162.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\u0gc-wcOTa0l.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\u0gc-wcota0l.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0162.556] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0162.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\u0gc-wcOTa0l.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\u0gc-wcota0l.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e9ac2d0, ftCreationTime.dwHighDateTime=0x1d5dd11, ftLastAccessTime.dwLowDateTime=0x156ecab0, ftLastAccessTime.dwHighDateTime=0x1d5de50, ftLastWriteTime.dwLowDateTime=0x156ecab0, ftLastWriteTime.dwHighDateTime=0x1d5de50, nFileSizeHigh=0x0, nFileSizeLow=0x2bd7)) returned 1
	[0162.557] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f2a0 | out: pbBuffer=0x1240f2a0) returned 1
	[0162.557] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105e8 | out: pbBuffer=0x124105e8) returned 1
	[0162.557] ReadFile (in: hFile=0x34c, lpBuffer=0x1256c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1256c000*, lpNumberOfBytesRead=0x1245bd1c*=0x2bd7, lpOverlapped=0x0) returned 1
	[0162.560] GetFileType (hFile=0x34c) returned 0x1
	[0162.561] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.561] WriteFile (in: hFile=0x34c, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x2bd7, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x1245bd00*=0x2bd7, lpOverlapped=0x1245bd0c) returned 1
	[0162.561] GetFileType (hFile=0x34c) returned 0x1
	[0162.561] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x2bd7, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.561] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0162.561] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0162.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0162.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410710 | out: pbBuffer=0x12410710) returned 1
	[0162.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\u0gc-wcOTa0l.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\u0gc-wcota0l.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0162.562] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0162.562] WriteFile (in: hFile=0x2cc, lpBuffer=0x125d4f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125d4f00*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.562] CloseHandle (hObject=0x2cc) returned 1
	[0162.563] CloseHandle (hObject=0x34c) returned 1
	[0162.566] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\u0gc-wcOTa0l.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\u0gc-wcota0l.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\u0gc-wcOTa0l.xlsx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\u0gc-wcota0l.xlsx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uU9Rm2-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uu9rm2-.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0162.609] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0162.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uU9Rm2-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uu9rm2-.png"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xccd11da0, ftCreationTime.dwHighDateTime=0x1d5e7f8, ftLastAccessTime.dwLowDateTime=0xb671f0b0, ftLastAccessTime.dwHighDateTime=0x1d5e817, ftLastWriteTime.dwLowDateTime=0xb671f0b0, ftLastWriteTime.dwHighDateTime=0x1d5e817, nFileSizeHigh=0x0, nFileSizeLow=0xfb5a)) returned 1
	[0162.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f560 | out: pbBuffer=0x1240f560) returned 1
	[0162.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410728 | out: pbBuffer=0x12410728) returned 1
	[0162.610] ReadFile (in: hFile=0x34c, lpBuffer=0x1281a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1281a000*, lpNumberOfBytesRead=0x124f1d1c*=0xfb5a, lpOverlapped=0x0) returned 1
	[0162.615] GetFileType (hFile=0x34c) returned 0x1
	[0162.615] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.615] WriteFile (in: hFile=0x34c, lpBuffer=0x1285a000*, nNumberOfBytesToWrite=0xfb5a, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1285a000*, lpNumberOfBytesWritten=0x124f1d00*=0xfb5a, lpOverlapped=0x124f1d0c) returned 1
	[0162.616] GetFileType (hFile=0x34c) returned 0x1
	[0162.616] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xfb5a, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.616] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0162.616] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0162.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0162.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410820 | out: pbBuffer=0x12410820) returned 1
	[0162.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uU9Rm2-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uu9rm2-.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0162.617] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0162.617] WriteFile (in: hFile=0x33c, lpBuffer=0x125d5400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125d5400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.617] CloseHandle (hObject=0x33c) returned 1
	[0162.618] CloseHandle (hObject=0x34c) returned 1
	[0162.619] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uU9Rm2-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uu9rm2-.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uU9Rm2-.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uu9rm2-.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xB5iP3.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xb5ip3.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0162.751] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0162.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xB5iP3.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xb5ip3.flv"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8cd1e0, ftCreationTime.dwHighDateTime=0x1d5d91f, ftLastAccessTime.dwLowDateTime=0x524bd0b0, ftLastAccessTime.dwHighDateTime=0x1d5dea8, ftLastWriteTime.dwLowDateTime=0x524bd0b0, ftLastWriteTime.dwHighDateTime=0x1d5dea8, nFileSizeHigh=0x0, nFileSizeLow=0x166a3)) returned 1
	[0162.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0162.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0162.751] ReadFile (in: hFile=0x34c, lpBuffer=0x128da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128da000*, lpNumberOfBytesRead=0x124f5d1c*=0x166a3, lpOverlapped=0x0) returned 1
	[0162.771] GetFileType (hFile=0x34c) returned 0x1
	[0162.771] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.771] WriteFile (in: hFile=0x34c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x166a3, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x124f5d00*=0x166a3, lpOverlapped=0x124f5d0c) returned 1
	[0162.772] GetFileType (hFile=0x34c) returned 0x1
	[0162.772] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x166a3, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0162.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0162.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0162.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0162.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xB5iP3.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xb5ip3.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.773] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0162.773] WriteFile (in: hFile=0x344, lpBuffer=0x125dc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.773] CloseHandle (hObject=0x344) returned 1
	[0162.773] CloseHandle (hObject=0x34c) returned 1
	[0162.773] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xB5iP3.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xb5ip3.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xB5iP3.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xb5ip3.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.787] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0162.796] SetEvent (hEvent=0x80) returned 1
	[0162.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.797] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0162.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0162.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0162.798] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0162.798] ReadFile (in: hFile=0x344, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f1d1c*=0x2000, lpOverlapped=0x0) returned 1
	[0162.806] GetFileType (hFile=0x344) returned 0x1
	[0162.806] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.806] WriteFile (in: hFile=0x344, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x124f1d00*=0x2000, lpOverlapped=0x124f1d0c) returned 1
	[0162.806] GetFileType (hFile=0x344) returned 0x1
	[0162.806] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x2000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0162.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0162.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0162.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0162.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0162.806] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0162.806] WriteFile (in: hFile=0x34c, lpBuffer=0x125dc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.807] CloseHandle (hObject=0x34c) returned 1
	[0162.807] CloseHandle (hObject=0x344) returned 1
	[0162.807] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.818] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0162.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff)) returned 1
	[0162.818] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0162.818] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0162.818] ReadFile (in: hFile=0x344, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1242bd1c*=0xa5ff, lpOverlapped=0x0) returned 1
	[0162.835] GetFileType (hFile=0x344) returned 0x1
	[0162.835] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.835] WriteFile (in: hFile=0x344, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0xa5ff, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x1242bd00*=0xa5ff, lpOverlapped=0x1242bd0c) returned 1
	[0162.836] GetFileType (hFile=0x344) returned 0x1
	[0162.836] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xa5ff, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0162.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f01 | out: pbBuffer=0x12400f01) returned 1
	[0162.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401001 | out: pbBuffer=0x12401001) returned 1
	[0162.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788370 | out: pbBuffer=0x12788370) returned 1
	[0162.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0162.837] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0162.837] WriteFile (in: hFile=0x34c, lpBuffer=0x125dcf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125dcf00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.837] CloseHandle (hObject=0x34c) returned 1
	[0162.837] CloseHandle (hObject=0x344) returned 1
	[0162.837] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.840] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0163.008] SetEvent (hEvent=0x80) returned 1
	[0163.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.011] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0163.011] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c9e0 | out: pbBuffer=0x1244c9e0) returned 1
	[0163.011] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788388 | out: pbBuffer=0x12788388) returned 1
	[0163.011] ReadFile (in: hFile=0x344, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1245dd1c*=0x1d7, lpOverlapped=0x0) returned 1
	[0163.095] GetFileType (hFile=0x344) returned 0x1
	[0163.095] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.095] WriteFile (in: hFile=0x344, lpBuffer=0x124c81e0*, nNumberOfBytesToWrite=0x1d7, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x124c81e0*, lpNumberOfBytesWritten=0x1245dd00*=0x1d7, lpOverlapped=0x1245dd0c) returned 1
	[0163.095] GetFileType (hFile=0x344) returned 0x1
	[0163.095] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1d7, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.095] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401481 | out: pbBuffer=0x12401481) returned 1
	[0163.096] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401581 | out: pbBuffer=0x12401581) returned 1
	[0163.096] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401681 | out: pbBuffer=0x12401681) returned 1
	[0163.096] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788440 | out: pbBuffer=0x12788440) returned 1
	[0163.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.096] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.096] WriteFile (in: hFile=0x34c, lpBuffer=0x125dd400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125dd400*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.097] CloseHandle (hObject=0x34c) returned 1
	[0163.097] CloseHandle (hObject=0x344) returned 1
	[0163.097] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.113] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0163.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8)) returned 1
	[0163.114] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0163.114] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744010 | out: pbBuffer=0x12744010) returned 1
	[0163.114] ReadFile (in: hFile=0x344, lpBuffer=0x12542000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12542000*, lpNumberOfBytesRead=0x124f1d1c*=0x1d8, lpOverlapped=0x0) returned 1
	[0163.116] GetFileType (hFile=0x344) returned 0x1
	[0163.116] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.116] WriteFile (in: hFile=0x344, lpBuffer=0x12860000*, nNumberOfBytesToWrite=0x1d8, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12860000*, lpNumberOfBytesWritten=0x124f1d00*=0x1d8, lpOverlapped=0x124f1d0c) returned 1
	[0163.116] GetFileType (hFile=0x344) returned 0x1
	[0163.116] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1d8, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.116] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca001 | out: pbBuffer=0x127ca001) returned 1
	[0163.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca101 | out: pbBuffer=0x127ca101) returned 1
	[0163.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca201 | out: pbBuffer=0x127ca201) returned 1
	[0163.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d8 | out: pbBuffer=0x127440d8) returned 1
	[0163.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0163.117] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0163.117] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.117] CloseHandle (hObject=0x33c) returned 1
	[0163.118] CloseHandle (hObject=0x344) returned 1
	[0163.118] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.137] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0163.138] SetEvent (hEvent=0x320) returned 1
	[0163.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\23b523c9e7746f715d33c6527c18eb9d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.139] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\23b523c9e7746f715d33c6527c18eb9d"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145)) returned 1
	[0163.139] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0163.139] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744120 | out: pbBuffer=0x12744120) returned 1
	[0163.139] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0163.141] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0163.141] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0163.141] SetEvent (hEvent=0xa0) returned 1
	[0163.141] SetEvent (hEvent=0x320) returned 1
	[0163.141] ReadFile (in: hFile=0x344, lpBuffer=0x12924000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12924000*, lpNumberOfBytesRead=0x1245dd1c*=0x145, lpOverlapped=0x0) returned 1
	[0163.143] GetFileType (hFile=0x344) returned 0x1
	[0163.143] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.143] WriteFile (in: hFile=0x344, lpBuffer=0x1296c000*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x1296c000*, lpNumberOfBytesWritten=0x1245dd00*=0x145, lpOverlapped=0x1245dd0c) returned 1
	[0163.143] GetFileType (hFile=0x344) returned 0x1
	[0163.143] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x145, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.143] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca401 | out: pbBuffer=0x127ca401) returned 1
	[0163.143] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca501 | out: pbBuffer=0x127ca501) returned 1
	[0163.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca601 | out: pbBuffer=0x127ca601) returned 1
	[0163.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744378 | out: pbBuffer=0x12744378) returned 1
	[0163.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\23b523c9e7746f715d33c6527c18eb9d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.144] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.144] WriteFile (in: hFile=0x350, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.144] CloseHandle (hObject=0x350) returned 1
	[0163.146] CloseHandle (hObject=0x344) returned 1
	[0163.147] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\23b523c9e7746f715d33c6527c18eb9d"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\23b523c9e7746f715d33c6527c18eb9d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.184] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0163.190] SetEvent (hEvent=0x80) returned 1
	[0163.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0163.191] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0163.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1
	[0163.192] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0163.192] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744010 | out: pbBuffer=0x12744010) returned 1
	[0163.192] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1242bd1c*=0xb68, lpOverlapped=0x0) returned 1
	[0163.853] SetEvent (hEvent=0xa0) returned 1
	[0163.853] GetFileType (hFile=0x33c) returned 0x1
	[0163.853] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.853] WriteFile (in: hFile=0x33c, lpBuffer=0x127d4000*, nNumberOfBytesToWrite=0xb68, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127d4000*, lpNumberOfBytesWritten=0x1242bd00*=0xb68, lpOverlapped=0x1242bd0c) returned 1
	[0163.854] GetFileType (hFile=0x33c) returned 0x1
	[0163.854] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb68, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.854] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0163.854] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0163.854] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0163.854] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103e0 | out: pbBuffer=0x124103e0) returned 1
	[0163.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.855] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0163.855] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.855] CloseHandle (hObject=0x2cc) returned 1
	[0163.855] CloseHandle (hObject=0x33c) returned 1
	[0163.855] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.858] SetEvent (hEvent=0x80) returned 1
	[0163.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0163.859] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0163.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1
	[0163.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0163.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410408 | out: pbBuffer=0x12410408) returned 1
	[0163.859] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1242bd1c*=0x652, lpOverlapped=0x0) returned 1
	[0164.725] GetFileType (hFile=0x33c) returned 0x1
	[0164.725] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.725] WriteFile (in: hFile=0x33c, lpBuffer=0x1262c000*, nNumberOfBytesToWrite=0x652, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1262c000*, lpNumberOfBytesWritten=0x1242bd00*=0x652, lpOverlapped=0x1242bd0c) returned 1
	[0164.725] GetFileType (hFile=0x33c) returned 0x1
	[0164.725] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x652, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0164.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0164.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0164.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e3a0 | out: pbBuffer=0x1251e3a0) returned 1
	[0164.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0164.726] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0164.726] WriteFile (in: hFile=0x34c, lpBuffer=0x1262a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262a500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0164.732] CloseHandle (hObject=0x34c) returned 1
	[0164.732] CloseHandle (hObject=0x33c) returned 1
	[0164.733] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0164.785] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0164.788] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0164.791] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0x2ca, buf=0x1260a000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0x2ca, lpOverlapped=0x124e2088) returned 0
	[0164.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed)) returned 1
	[0164.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0165.545] SetEvent (hEvent=0xa0) returned 1
	[0165.545] SetEvent (hEvent=0x30c) returned 1
	[0165.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0166.353] SetEvent (hEvent=0xa0) returned 1
	[0166.353] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0166.528] SetEvent (hEvent=0x318) returned 1
	[0166.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0166.866] SetEvent (hEvent=0xa0) returned 1
	[0166.866] SetEvent (hEvent=0x2f4) returned 1
	[0166.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1
	[0166.878] SetEvent (hEvent=0x30c) returned 1
	[0166.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1
	[0166.893] SetEvent (hEvent=0x2e8) returned 1
	[0166.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663)) returned 1
	[0166.931] SetEvent (hEvent=0x2f4) returned 1
	[0166.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b)) returned 1
	[0166.947] SetEvent (hEvent=0x30c) returned 1
	[0166.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c)) returned 1
	[0166.961] SetEvent (hEvent=0x2e8) returned 1
	[0166.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f90f18257cbb4d84216ac1e1f3bb2c76"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226)) returned 1
	[0166.975] SetEvent (hEvent=0x2f4) returned 1
	[0166.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0166.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0166.976] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0166.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0167.001] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1
	[0167.001] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1
	[0167.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1
	[0167.005] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1
	[0167.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1
	[0167.007] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1
	[0167.007] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1
	[0167.007] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0167.007] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0167.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0167.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0167.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.010] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0167.010] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0167.011] CloseHandle (hObject=0x34c) returned 1
	[0167.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1
	[0167.012] SetEvent (hEvent=0x30c) returned 1
	[0167.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166)) returned 1
	[0167.016] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0167.027] SetEvent (hEvent=0x318) returned 1
	[0167.027] SetEvent (hEvent=0x30c) returned 1
	[0167.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0167.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1
	[0167.092] SetEvent (hEvent=0x318) returned 1
	[0167.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\23b523c9e7746f715d33c6527c18eb9d"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124)) returned 1
	[0167.109] SetEvent (hEvent=0x2f4) returned 1
	[0167.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3130b1871a126520a8c47861efe3ed4d"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1
	[0167.133] SetEvent (hEvent=0xa0) returned 1
	[0167.133] SetEvent (hEvent=0x30c) returned 1
	[0167.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a)) returned 1
	[0167.258] SetEvent (hEvent=0xa0) returned 1
	[0167.261] SetEvent (hEvent=0x318) returned 1
	[0167.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1
	[0167.343] SetEvent (hEvent=0xa0) returned 1
	[0167.343] SetEvent (hEvent=0x2f4) returned 1
	[0167.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1
	[0167.540] SetEvent (hEvent=0x30c) returned 1
	[0167.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0167.556] SetEvent (hEvent=0xa0) returned 1
	[0167.557] SetEvent (hEvent=0x318) returned 1
	[0167.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0167.582] SetEvent (hEvent=0x2f4) returned 1
	[0167.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1
	[0167.604] SetEvent (hEvent=0x30c) returned 1
	[0167.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1
	[0167.621] SetEvent (hEvent=0x318) returned 1
	[0167.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\696f3de637e6de85b458996d49d759ad"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4)) returned 1
	[0167.659] SetEvent (hEvent=0x2f4) returned 1
	[0167.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1
	[0167.694] SetEvent (hEvent=0xa0) returned 1
	[0167.695] SetEvent (hEvent=0x30c) returned 1
	[0167.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7396c420a8e1bc1da97f1af0d10bad21"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1
	[0167.709] SetEvent (hEvent=0x318) returned 1
	[0167.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1
	[0167.728] SetEvent (hEvent=0x2f4) returned 1
	[0167.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1
	[0167.746] SetEvent (hEvent=0x30c) returned 1
	[0167.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0167.763] SetEvent (hEvent=0x318) returned 1
	[0167.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0167.780] SetEvent (hEvent=0x2f4) returned 1
	[0167.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198)) returned 1
	[0167.802] SetEvent (hEvent=0x30c) returned 1
	[0167.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0167.818] SetEvent (hEvent=0xa0) returned 1
	[0167.818] SetEvent (hEvent=0x318) returned 1
	[0167.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0167.830] SetEvent (hEvent=0x2f4) returned 1
	[0167.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0167.846] SetEvent (hEvent=0x30c) returned 1
	[0167.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0167.862] SetEvent (hEvent=0x318) returned 1
	[0167.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0167.875] SetEvent (hEvent=0x2f4) returned 1
	[0167.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0167.892] SetEvent (hEvent=0x30c) returned 1
	[0167.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0167.904] SetEvent (hEvent=0x318) returned 1
	[0167.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0167.921] SetEvent (hEvent=0x2f4) returned 1
	[0167.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0167.939] SetEvent (hEvent=0xa0) returned 1
	[0167.939] SetEvent (hEvent=0x30c) returned 1
	[0167.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0167.970] SetEvent (hEvent=0x318) returned 1
	[0167.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1
	[0167.998] SetEvent (hEvent=0x2f4) returned 1
	[0167.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188)) returned 1
	[0168.023] SetEvent (hEvent=0xa0) returned 1
	[0168.023] SetEvent (hEvent=0x30c) returned 1
	[0168.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188)) returned 1
	[0168.035] SetEvent (hEvent=0x318) returned 1
	[0168.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196)) returned 1
	[0168.077] SetEvent (hEvent=0xa0) returned 1
	[0168.077] SetEvent (hEvent=0x68) returned 1
	[0168.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1
	[0168.088] SetEvent (hEvent=0x30c) returned 1
	[0168.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0168.102] SetEvent (hEvent=0x318) returned 1
	[0168.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0168.121] SetEvent (hEvent=0x68) returned 1
	[0168.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0168.139] SetEvent (hEvent=0xa0) returned 1
	[0168.139] SetEvent (hEvent=0x30c) returned 1
	[0168.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0168.158] SetEvent (hEvent=0x318) returned 1
	[0168.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1
	[0168.181] SetEvent (hEvent=0x68) returned 1
	[0168.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec)) returned 1
	[0168.230] SetEvent (hEvent=0x30c) returned 1
	[0168.230] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1
	[0168.248] SetEvent (hEvent=0x318) returned 1
	[0168.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1
	[0168.265] SetEvent (hEvent=0xa0) returned 1
	[0168.265] SetEvent (hEvent=0x68) returned 1
	[0168.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204)) returned 1
	[0168.279] SetEvent (hEvent=0x30c) returned 1
	[0168.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204)) returned 1
	[0168.299] SetEvent (hEvent=0x80) returned 1
	[0168.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0168.320] SetEvent (hEvent=0x68) returned 1
	[0168.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1
	[0168.337] SetEvent (hEvent=0xa0) returned 1
	[0168.337] SetEvent (hEvent=0x30c) returned 1
	[0168.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1
	[0168.350] SetEvent (hEvent=0x80) returned 1
	[0168.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0168.367] SetEvent (hEvent=0x68) returned 1
	[0168.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198)) returned 1
	[0168.382] SetEvent (hEvent=0x30c) returned 1
	[0168.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4)) returned 1
	[0168.412] SetEvent (hEvent=0xa0) returned 1
	[0168.412] SetEvent (hEvent=0x80) returned 1
	[0168.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1
	[0168.429] SetEvent (hEvent=0x68) returned 1
	[0168.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1
	[0168.467] SetEvent (hEvent=0xa0) returned 1
	[0168.467] SetEvent (hEvent=0x30c) returned 1
	[0168.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f90f18257cbb4d84216ac1e1f3bb2c76"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1
	[0168.478] SetEvent (hEvent=0x80) returned 1
	[0168.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\ime12"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.485] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0168.491] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0168.858] SetEvent (hEvent=0x68) returned 1
	[0168.858] SetEvent (hEvent=0x30c) returned 1
	[0168.859] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0168.869] SetEvent (hEvent=0x318) returned 1
	[0168.869] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0168.873] SetEvent (hEvent=0x318) returned 1
	[0168.873] SetEvent (hEvent=0x80) returned 1
	[0168.873] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0168.904] SetEvent (hEvent=0x30c) returned 1
	[0168.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0LGKqF.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0lgkqf.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.905] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0168.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0LGKqF.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0lgkqf.xls"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac69a110, ftCreationTime.dwHighDateTime=0x1d5dba8, ftLastAccessTime.dwLowDateTime=0xcbc22320, ftLastAccessTime.dwHighDateTime=0x1d5e68e, ftLastWriteTime.dwLowDateTime=0xcbc22320, ftLastWriteTime.dwHighDateTime=0x1d5e68e, nFileSizeHigh=0x0, nFileSizeLow=0x14f10)) returned 1
	[0168.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0168.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0168.905] ReadFile (in: hFile=0x34c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12769d1c*=0x14f10, lpOverlapped=0x0) returned 1
	[0168.924] GetFileType (hFile=0x34c) returned 0x1
	[0168.924] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.924] WriteFile (in: hFile=0x34c, lpBuffer=0x12858000*, nNumberOfBytesToWrite=0x14f10, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12858000*, lpNumberOfBytesWritten=0x12769d00*=0x14f10, lpOverlapped=0x12769d0c) returned 1
	[0168.925] GetFileType (hFile=0x34c) returned 0x1
	[0168.925] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x14f10, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.925] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0168.925] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0168.925] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0168.925] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0168.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0LGKqF.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0lgkqf.xls"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.925] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0168.926] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.926] CloseHandle (hObject=0x2dc) returned 1
	[0168.926] CloseHandle (hObject=0x34c) returned 1
	[0168.926] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0LGKqF.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0lgkqf.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0LGKqF.xls.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0lgkqf.xls.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.180] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.180] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.181] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1
	[0169.181] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.181] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0169.183] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.184] WriteFile (in: hFile=0x34c, lpBuffer=0x12986000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12986000*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.185] CloseHandle (hObject=0x34c) returned 1
	[0169.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.186] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D5NTRC6R", cAlternateFileName="")) returned 1
	[0169.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.186] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0169.189] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0169.189] WriteFile (in: hFile=0x34c, lpBuffer=0x12987300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12987300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0169.191] CloseHandle (hObject=0x34c) returned 1
	[0169.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.241] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.241] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.242] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d40bff0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d40bff0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d40bff0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.242] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.242] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\D5NTRC6R\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\flash player\\assetcache\\d5ntrc6r\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.245] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0169.245] WriteFile (in: hFile=0x2dc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0169.246] CloseHandle (hObject=0x2dc) returned 1
	[0169.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.247] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.247] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.247] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.247] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Headlights\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\headlights\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.252] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.252] WriteFile (in: hFile=0x2dc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.253] CloseHandle (hObject=0x2dc) returned 1
	[0169.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.268] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.269] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.269] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.269] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1
	[0169.269] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.269] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.271] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.271] WriteFile (in: hFile=0x344, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.273] CloseHandle (hObject=0x344) returned 1
	[0169.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.274] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.274] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.274] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.274] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\linguistics\\dictionaries\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.276] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0169.276] WriteFile (in: hFile=0x344, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0169.278] CloseHandle (hObject=0x344) returned 1
	[0169.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.279] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.280] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.280] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.280] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\LogTransport2\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\logtransport2\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.282] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.282] WriteFile (in: hFile=0x344, lpBuffer=0x12988600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12988600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.283] CloseHandle (hObject=0x344) returned 1
	[0169.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\AqfA87t.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqfa87t.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc6b4b80, ftCreationTime.dwHighDateTime=0x1d5e20d, ftLastAccessTime.dwLowDateTime=0xc1d618e0, ftLastAccessTime.dwHighDateTime=0x1d5e0d4, ftLastWriteTime.dwLowDateTime=0xc1d618e0, ftLastWriteTime.dwHighDateTime=0x1d5e0d4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4d)) returned 1
	[0169.292] SetEvent (hEvent=0x30c) returned 1
	[0169.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Cu8ax12kkwm6Q0AqX.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cu8ax12kkwm6q0aqx.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x331a4020, ftCreationTime.dwHighDateTime=0x1d5e4f0, ftLastAccessTime.dwLowDateTime=0xa5283530, ftLastAccessTime.dwHighDateTime=0x1d5e367, ftLastWriteTime.dwLowDateTime=0xa5283530, ftLastWriteTime.dwHighDateTime=0x1d5e367, nFileSizeHigh=0x0, nFileSizeLow=0xcfb7)) returned 1
	[0169.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ER2i7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\er2i7.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefea4a50, ftCreationTime.dwHighDateTime=0x1d5e2fd, ftLastAccessTime.dwLowDateTime=0x83411b20, ftLastAccessTime.dwHighDateTime=0x1d5e589, ftLastWriteTime.dwLowDateTime=0x83411b20, ftLastWriteTime.dwHighDateTime=0x1d5e589, nFileSizeHigh=0x0, nFileSizeLow=0x11956)) returned 1
	[0169.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EjIJrM4 O-I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ejijrm4 o-i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb4e3e40, ftCreationTime.dwHighDateTime=0x1d5e0b8, ftLastAccessTime.dwLowDateTime=0xfb32b230, ftLastAccessTime.dwHighDateTime=0x1d5d84e, ftLastWriteTime.dwLowDateTime=0xfb32b230, ftLastWriteTime.dwHighDateTime=0x1d5d84e, nFileSizeHigh=0x0, nFileSizeLow=0x90bc)) returned 1
	[0169.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Fin_H7FRydfc.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fin_h7frydfc.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x819cb1a0, ftCreationTime.dwHighDateTime=0x1d5db0f, ftLastAccessTime.dwLowDateTime=0xb13544e0, ftLastAccessTime.dwHighDateTime=0x1d5e4a6, ftLastWriteTime.dwLowDateTime=0xb13544e0, ftLastWriteTime.dwHighDateTime=0x1d5e4a6, nFileSizeHigh=0x0, nFileSizeLow=0x71f)) returned 1
	[0169.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EjIJrM4 O-I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ejijrm4 o-i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0169.334] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0169.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EjIJrM4 O-I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ejijrm4 o-i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb4e3e40, ftCreationTime.dwHighDateTime=0x1d5e0b8, ftLastAccessTime.dwLowDateTime=0xfb32b230, ftLastAccessTime.dwHighDateTime=0x1d5d84e, ftLastWriteTime.dwLowDateTime=0xfb32b230, ftLastWriteTime.dwHighDateTime=0x1d5d84e, nFileSizeHigh=0x0, nFileSizeLow=0x90bc)) returned 1
	[0169.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e640 | out: pbBuffer=0x1240e640) returned 1
	[0169.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410620 | out: pbBuffer=0x12410620) returned 1
	[0169.334] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12769d1c*=0x90bc, lpOverlapped=0x0) returned 1
	[0169.364] GetFileType (hFile=0x33c) returned 0x1
	[0169.364] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.364] WriteFile (in: hFile=0x33c, lpBuffer=0x125f2000*, nNumberOfBytesToWrite=0x90bc, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x125f2000*, lpNumberOfBytesWritten=0x12769d00*=0x90bc, lpOverlapped=0x12769d0c) returned 1
	[0169.365] GetFileType (hFile=0x33c) returned 0x1
	[0169.365] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x90bc, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401001 | out: pbBuffer=0x12401001) returned 1
	[0169.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401101 | out: pbBuffer=0x12401101) returned 1
	[0169.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401201 | out: pbBuffer=0x12401201) returned 1
	[0169.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410820 | out: pbBuffer=0x12410820) returned 1
	[0169.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EjIJrM4 O-I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ejijrm4 o-i.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0169.366] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0169.366] WriteFile (in: hFile=0x1e4, lpBuffer=0x12526a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12526a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.366] CloseHandle (hObject=0x1e4) returned 1
	[0169.366] CloseHandle (hObject=0x33c) returned 1
	[0169.366] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EjIJrM4 O-I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ejijrm4 o-i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\EjIJrM4 O-I.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ejijrm4 o-i.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HjU-b.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hju-b.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf964be0, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x7bc33960, ftLastAccessTime.dwHighDateTime=0x1d5e2fe, ftLastWriteTime.dwLowDateTime=0x7bc33960, ftLastWriteTime.dwHighDateTime=0x1d5e2fe, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1
	[0169.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.376] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.376] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1
	[0169.376] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.376] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0169.378] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0169.378] WriteFile (in: hFile=0x33c, lpBuffer=0x12989900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12989900*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0169.379] CloseHandle (hObject=0x33c) returned 1
	[0169.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.381] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.381] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.381] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0169.384] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.384] WriteFile (in: hFile=0x33c, lpBuffer=0x1298ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1298ac00*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.385] CloseHandle (hObject=0x33c) returned 1
	[0169.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Ifhk7kVsEoMt3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ifhk7kvseomt3.png"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49545f40, ftCreationTime.dwHighDateTime=0x1d5e268, ftLastAccessTime.dwLowDateTime=0x8c430090, ftLastAccessTime.dwHighDateTime=0x1d5da39, ftLastWriteTime.dwLowDateTime=0x8c430090, ftLastWriteTime.dwHighDateTime=0x1d5da39, nFileSizeHigh=0x0, nFileSizeLow=0x16d24)) returned 1
	[0169.412] SetEvent (hEvent=0x30c) returned 1
	[0169.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\M2jB8tCN3ll_f-8nD6.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\m2jb8tcn3ll_f-8nd6.odp"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x307bd0d0, ftCreationTime.dwHighDateTime=0x1d5de48, ftLastAccessTime.dwLowDateTime=0x56decb50, ftLastAccessTime.dwHighDateTime=0x1d5de71, ftLastWriteTime.dwLowDateTime=0x56decb50, ftLastWriteTime.dwHighDateTime=0x1d5de71, nFileSizeHigh=0x0, nFileSizeLow=0x17523)) returned 1
	[0169.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.420] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.420] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.420] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
	[0169.420] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.420] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.422] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0169.422] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0169.423] CloseHandle (hObject=0x344) returned 1
	[0169.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.425] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.425] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1
	[0169.425] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1
	[0169.425] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.426] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.521] SetEvent (hEvent=0xa0) returned 1
	[0169.521] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.521] WriteFile (in: hFile=0x344, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.522] CloseHandle (hObject=0x344) returned 1
	[0169.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.525] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.525] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.525] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P7Y3F7QB", cAlternateFileName="")) returned 1
	[0169.525] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.525] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.527] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0169.527] WriteFile (in: hFile=0x344, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0169.528] CloseHandle (hObject=0x344) returned 1
	[0169.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.530] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.531] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1d4582b0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.531] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.531] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\P7Y3F7QB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\p7y3f7qb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.533] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0169.533] WriteFile (in: hFile=0x344, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0169.535] CloseHandle (hObject=0x344) returned 1
	[0169.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.536] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.536] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d241020, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d241020, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.536] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1
	[0169.536] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.537] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.538] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0169.539] WriteFile (in: hFile=0x344, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0169.540] CloseHandle (hObject=0x344) returned 1
	[0169.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.541] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d241020, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.541] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1
	[0169.541] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.541] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.543] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0169.543] WriteFile (in: hFile=0x344, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0169.544] CloseHandle (hObject=0x344) returned 1
	[0169.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.550] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6d9d7640, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6d9d7640, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.550] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1
	[0169.550] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.550] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.552] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0169.552] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0169.554] CloseHandle (hObject=0x344) returned 1
	[0169.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.555] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x1276b7d8 | out: lpFindFileData=0x1276b7d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.555] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b81c | out: lpFindFileData=0x1276b81c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.555] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b81c | out: lpFindFileData=0x1276b81c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1
	[0169.555] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b81c | out: lpFindFileData=0x1276b81c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.555] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b4a0 | out: lpFileInformation=0x1276b4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.557] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b6b0 | out: lpMode=0x1276b6b0) returned 0
	[0169.557] WriteFile (in: hFile=0x344, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b6b0, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x1276b6b0*=0x1180, lpOverlapped=0x0) returned 1
	[0169.558] CloseHandle (hObject=0x344) returned 1
	[0169.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), fInfoLevelId=0x0, lpFileInformation=0x1276b89c | out: lpFileInformation=0x1276b89c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d9d7640, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x1d4582b0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d4582b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1d6)) returned 1
	[0169.561] SetEvent (hEvent=0x68) returned 1
	[0169.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0169.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.561] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0169.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1
	[0169.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.562] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.568] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0169.568] WriteFile (in: hFile=0x344, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0169.569] CloseHandle (hObject=0x344) returned 1
	[0169.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.582] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.582] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.582] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7c36290, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x7c36290, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x7c36290, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.582] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.582] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.582] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\AddIns\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\addins\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.584] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.584] WriteFile (in: hFile=0x344, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.587] CloseHandle (hObject=0x344) returned 1
	[0169.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.592] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.594] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.595] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.595] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\credentials\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.604] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.604] WriteFile (in: hFile=0x344, lpBuffer=0x12625300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12625300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.605] CloseHandle (hObject=0x344) returned 1
	[0169.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.610] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.610] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0169.610] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.610] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.612] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.612] WriteFile (in: hFile=0x344, lpBuffer=0x12626600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12626600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.615] CloseHandle (hObject=0x344) returned 1
	[0169.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.617] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.617] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.617] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0169.617] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.617] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.619] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0169.619] WriteFile (in: hFile=0x344, lpBuffer=0x12627900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12627900*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0169.621] CloseHandle (hObject=0x344) returned 1
	[0169.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.622] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.766] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.767] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa1e34990, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="83AA4C~1")) returned 1
	[0169.767] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="932A2D~1")) returned 1
	[0169.767] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="FDA992~1")) returned 1
	[0169.767] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.767] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.771] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0169.771] WriteFile (in: hFile=0x344, lpBuffer=0x12628c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12628c00*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0169.773] CloseHandle (hObject=0x344) returned 1
	[0169.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa1e34990, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d)) returned 1
	[0169.775] SetEvent (hEvent=0x318) returned 1
	[0169.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\932a2db58c237abd381d22df4c63a04a_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x681f1360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x681f1360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x681f1360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x57)) returned 1
	[0169.785] SetEvent (hEvent=0x68) returned 1
	[0169.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d)) returned 1
	[0169.796] SetEvent (hEvent=0x30c) returned 1
	[0169.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.815] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.815] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.815] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0169.815] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.815] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.818] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.818] WriteFile (in: hFile=0x2dc, lpBuffer=0x127dc000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x127dc000*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.819] CloseHandle (hObject=0x2dc) returned 1
	[0169.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.820] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.821] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.821] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0169.821] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.821] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.827] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0169.827] WriteFile (in: hFile=0x2dc, lpBuffer=0x127dd300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x127dd300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0169.829] CloseHandle (hObject=0x2dc) returned 1
	[0169.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.830] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.830] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f766d30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.830] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1
	[0169.830] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.831] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.833] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0169.833] WriteFile (in: hFile=0x2dc, lpBuffer=0x127de600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x127de600*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0169.834] CloseHandle (hObject=0x2dc) returned 1
	[0169.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab)) returned 1
	[0169.836] SetEvent (hEvent=0x30c) returned 1
	[0169.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.839] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.840] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.840] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x1c1e0470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.840] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1
	[0169.840] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.840] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.840] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.840] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.845] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.845] WriteFile (in: hFile=0x2dc, lpBuffer=0x127df900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x127df900*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.846] CloseHandle (hObject=0x2dc) returned 1
	[0169.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.854] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.854] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd01394e0, ftCreationTime.dwHighDateTime=0x1d301bc, ftLastAccessTime.dwLowDateTime=0xd01394e0, ftLastAccessTime.dwHighDateTime=0x1d301bc, ftLastWriteTime.dwLowDateTime=0xd01394e0, ftLastWriteTime.dwHighDateTime=0x1d301bc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.855] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\excel\\xlstart\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.859] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0169.859] WriteFile (in: hFile=0x2dc, lpBuffer=0x127e0c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x127e0c00*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0169.861] CloseHandle (hObject=0x2dc) returned 1
	[0169.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.865] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.865] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.865] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IME12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ime12\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.867] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.867] WriteFile (in: hFile=0x2dc, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.869] CloseHandle (hObject=0x2dc) returned 1
	[0169.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.872] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.872] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp12\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.880] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.880] WriteFile (in: hFile=0x2dc, lpBuffer=0x127cb300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x127cb300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.882] CloseHandle (hObject=0x2dc) returned 1
	[0169.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.886] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.886] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.886] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.886] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp8_1\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.888] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.888] WriteFile (in: hFile=0x2dc, lpBuffer=0x127cc600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x127cc600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.889] CloseHandle (hObject=0x2dc) returned 1
	[0169.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.893] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.893] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.893] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.893] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\imjp9_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.895] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.895] WriteFile (in: hFile=0x2dc, lpBuffer=0x127cd900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x127cd900*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.897] CloseHandle (hObject=0x2dc) returned 1
	[0169.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.897] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.897] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1
	[0169.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1
	[0169.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.898] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0169.906] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0169.906] WriteFile (in: hFile=0x33c, lpBuffer=0x127cec00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x127cec00*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0169.907] CloseHandle (hObject=0x33c) returned 1
	[0169.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0169.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.907] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.908] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda554a0, ftLastAccessTime.dwHighDateTime=0x1d301bd, ftLastWriteTime.dwLowDateTime=0xbda554a0, ftLastWriteTime.dwHighDateTime=0x1d301bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.908] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4eb35ad0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0169.908] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a683760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0169.908] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4eb0f970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Launch Internet Explorer Browser.lnk", cAlternateFileName="LAUNCH~1.LNK")) returned 1
	[0169.908] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1
	[0169.908] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1
	[0169.908] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0169.909] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.909] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0169.920] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0169.920] WriteFile (in: hFile=0x33c, lpBuffer=0x1265c000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x1265c000*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0169.921] CloseHandle (hObject=0x33c) returned 1
	[0169.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a683760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x8e9)) returned 1
	[0169.925] SetEvent (hEvent=0x80) returned 1
	[0169.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Launch Internet Explorer Browser.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\launch internet explorer browser.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4eb0f970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x4eb0f970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x4eb0f970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5a7)) returned 1
	[0169.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0169.937] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0169.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df47e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df47e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a683760, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x8e9)) returned 1
	[0169.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c440 | out: pbBuffer=0x1244c440) returned 1
	[0169.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788868 | out: pbBuffer=0x12788868) returned 1
	[0169.937] ReadFile (in: hFile=0x33c, lpBuffer=0x12704000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12704000*, lpNumberOfBytesRead=0x12429d1c*=0x8e9, lpOverlapped=0x0) returned 1
	[0170.067] GetFileType (hFile=0x33c) returned 0x1
	[0170.067] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.067] WriteFile (in: hFile=0x33c, lpBuffer=0x12494900*, nNumberOfBytesToWrite=0x8e9, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12494900*, lpNumberOfBytesWritten=0x12429d00*=0x8e9, lpOverlapped=0x12429d0c) returned 1
	[0170.067] GetFileType (hFile=0x33c) returned 0x1
	[0170.067] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x8e9, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed781 | out: pbBuffer=0x124ed781) returned 1
	[0170.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed881 | out: pbBuffer=0x124ed881) returned 1
	[0170.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed981 | out: pbBuffer=0x124ed981) returned 1
	[0170.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788920 | out: pbBuffer=0x12788920) returned 1
	[0170.068] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0170.073] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0170.074] SetEvent (hEvent=0xa0) returned 1
	[0170.074] SetEvent (hEvent=0x2e8) returned 1
	[0170.074] SetEvent (hEvent=0x68) returned 1
	[0170.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.074] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0170.074] WriteFile (in: hFile=0x34c, lpBuffer=0x12818000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.074] CloseHandle (hObject=0x34c) returned 1
	[0170.075] CloseHandle (hObject=0x33c) returned 1
	[0170.075] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Google Chrome.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\google chrome.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.081] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0170.085] SetEvent (hEvent=0x68) returned 1
	[0170.085] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0170.086] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0170.086] SetEvent (hEvent=0x318) returned 1
	[0170.086] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0170.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9)) returned 1
	[0170.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491)) returned 1
	[0170.146] SetEvent (hEvent=0x30c) returned 1
	[0170.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1
	[0170.171] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0170.182] SetEvent (hEvent=0x80) returned 1
	[0170.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1
	[0170.195] SetEvent (hEvent=0x318) returned 1
	[0170.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b)) returned 1
	[0170.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b)) returned 1
	[0170.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0170.211] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0170.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b)) returned 1
	[0170.212] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4a0 | out: pbBuffer=0x1252e4a0) returned 1
	[0170.212] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744368 | out: pbBuffer=0x12744368) returned 1
	[0170.212] ReadFile (in: hFile=0x33c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x12769d1c*=0x60b, lpOverlapped=0x0) returned 1
	[0170.469] GetFileType (hFile=0x33c) returned 0x1
	[0170.469] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.469] WriteFile (in: hFile=0x33c, lpBuffer=0x12518700*, nNumberOfBytesToWrite=0x60b, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12518700*, lpNumberOfBytesWritten=0x12769d00*=0x60b, lpOverlapped=0x12769d0c) returned 1
	[0170.469] GetFileType (hFile=0x33c) returned 0x1
	[0170.469] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x60b, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0170.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0170.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0170.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744330 | out: pbBuffer=0x12744330) returned 1
	[0170.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0170.471] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0170.471] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.471] CloseHandle (hObject=0x1e4) returned 1
	[0170.476] CloseHandle (hObject=0x33c) returned 1
	[0170.481] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player (2).lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player (2).lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.500] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0170.625] SetEvent (hEvent=0x2e8) returned 1
	[0170.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0170.626] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0170.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.626] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e420 | out: pbBuffer=0x1252e420) returned 1
	[0170.626] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744348 | out: pbBuffer=0x12744348) returned 1
	[0170.626] ReadFile (in: hFile=0x344, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1242bd1c*=0x0, lpOverlapped=0x0) returned 1
	[0170.626] CloseHandle (hObject=0x344) returned 1
	[0170.626] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0171.160] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0171.218] SetEvent (hEvent=0x80) returned 1
	[0171.218] SetEvent (hEvent=0x2f4) returned 1
	[0171.218] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0171.224] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0171.224] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0171.225] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0171.225] SetEvent (hEvent=0x80) returned 1
	[0171.225] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0171.226] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0172.441] SetEvent (hEvent=0x2e8) returned 1
	[0172.441] SetEvent (hEvent=0x2f4) returned 1
	[0172.442] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0172.955] SetEvent (hEvent=0x30c) returned 1
	[0172.955] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0172.975] SetEvent (hEvent=0x318) returned 1
	[0172.975] SetEvent (hEvent=0x2f4) returned 1
	[0172.975] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0173.087] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0173.100] SetEvent (hEvent=0x68) returned 1
	[0173.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uQs_GiNMl.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uqs_ginml.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef81d40, ftCreationTime.dwHighDateTime=0x1d5dd19, ftLastAccessTime.dwLowDateTime=0xae474a00, ftLastAccessTime.dwHighDateTime=0x1d5d9a0, ftLastWriteTime.dwLowDateTime=0xae474a00, ftLastWriteTime.dwHighDateTime=0x1d5d9a0, nFileSizeHigh=0x0, nFileSizeLow=0x2092)) returned 1
	[0173.120] SetEvent (hEvent=0x2f4) returned 1
	[0173.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\w00llA4enJ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\w00lla4enj.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec53d510, ftCreationTime.dwHighDateTime=0x1d5e1a8, ftLastAccessTime.dwLowDateTime=0x1f75a50, ftLastAccessTime.dwHighDateTime=0x1d5dc80, ftLastWriteTime.dwLowDateTime=0x1f75a50, ftLastWriteTime.dwHighDateTime=0x1d5dc80, nFileSizeHigh=0x0, nFileSizeLow=0xb902)) returned 1
	[0173.147] SetEvent (hEvent=0xa0) returned 1
	[0173.147] SetEvent (hEvent=0x30c) returned 1
	[0173.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yiWBAP8BT.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yiwbap8bt.ods"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1470e70, ftCreationTime.dwHighDateTime=0x1d5ddbd, ftLastAccessTime.dwLowDateTime=0x8a082e40, ftLastAccessTime.dwHighDateTime=0x1d5e038, ftLastWriteTime.dwLowDateTime=0x8a082e40, ftLastWriteTime.dwHighDateTime=0x1d5e038, nFileSizeHigh=0x0, nFileSizeLow=0x12a70)) returned 1
	[0173.169] SetEvent (hEvent=0x318) returned 1
	[0173.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\zBhNx8pere.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zbhnx8pere.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ef0ce90, ftCreationTime.dwHighDateTime=0x1d5e1cb, ftLastAccessTime.dwLowDateTime=0xc0e4b3d0, ftLastAccessTime.dwHighDateTime=0x1d5de3e, ftLastWriteTime.dwLowDateTime=0xc0e4b3d0, ftLastWriteTime.dwHighDateTime=0x1d5de3e, nFileSizeHigh=0x0, nFileSizeLow=0x18edd)) returned 1
	[0173.185] SetEvent (hEvent=0x2f4) returned 1
	[0173.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0173.188] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0173.188] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0173.188] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0173.188] CloseHandle (hObject=0x33c) returned 1
	[0173.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0173.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0173.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0173.201] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.201] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1
	[0173.201] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
	[0173.201] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1
	[0173.201] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0x0, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1
	[0173.201] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0173.201] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0x0, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1
	[0173.201] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0x0, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1
	[0173.201] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0173.201] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0173.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0173.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0173.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.205] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0173.205] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0173.218] CloseHandle (hObject=0x33c) returned 1
	[0173.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a)) returned 1
	[0173.219] SetEvent (hEvent=0x80) returned 1
	[0173.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e)) returned 1
	[0173.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.223] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0173.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a)) returned 1
	[0173.223] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732320 | out: pbBuffer=0x12732320) returned 1
	[0173.223] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410430 | out: pbBuffer=0x12410430) returned 1
	[0173.223] ReadFile (in: hFile=0x33c, lpBuffer=0x1266e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1266e000*, lpNumberOfBytesRead=0x12769d1c*=0x49a, lpOverlapped=0x0) returned 1
	[0173.228] GetFileType (hFile=0x33c) returned 0x1
	[0173.228] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.228] WriteFile (in: hFile=0x33c, lpBuffer=0x12742a00*, nNumberOfBytesToWrite=0x49a, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12742a00*, lpNumberOfBytesWritten=0x12769d00*=0x49a, lpOverlapped=0x12769d0c) returned 1
	[0173.228] GetFileType (hFile=0x33c) returned 0x1
	[0173.228] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x49a, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0173.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0173.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0173.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410518 | out: pbBuffer=0x12410518) returned 1
	[0173.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.229] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0173.229] WriteFile (in: hFile=0x344, lpBuffer=0x12742f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12742f00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.230] CloseHandle (hObject=0x344) returned 1
	[0173.230] CloseHandle (hObject=0x33c) returned 1
	[0173.230] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.234] SetEvent (hEvent=0x80) returned 1
	[0173.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.235] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0173.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e)) returned 1
	[0173.235] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0173.235] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410530 | out: pbBuffer=0x12410530) returned 1
	[0173.236] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12769d1c*=0x10b1e, lpOverlapped=0x0) returned 1
	[0173.251] GetFileType (hFile=0x33c) returned 0x1
	[0173.251] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.251] WriteFile (in: hFile=0x33c, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0x10b1e, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x12769d00*=0x10b1e, lpOverlapped=0x12769d0c) returned 1
	[0173.251] GetFileType (hFile=0x33c) returned 0x1
	[0173.252] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x10b1e, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0173.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0173.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0173.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105e8 | out: pbBuffer=0x124105e8) returned 1
	[0173.252] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.253] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0173.253] WriteFile (in: hFile=0x34c, lpBuffer=0x12743400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12743400*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.253] CloseHandle (hObject=0x34c) returned 1
	[0173.253] CloseHandle (hObject=0x33c) returned 1
	[0173.253] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.257] SetEvent (hEvent=0x68) returned 1
	[0173.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.258] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0173.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493)) returned 1
	[0173.258] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732760 | out: pbBuffer=0x12732760) returned 1
	[0173.258] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410620 | out: pbBuffer=0x12410620) returned 1
	[0173.258] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12769d1c*=0x493, lpOverlapped=0x0) returned 1
	[0173.267] GetFileType (hFile=0x33c) returned 0x1
	[0173.267] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.267] WriteFile (in: hFile=0x33c, lpBuffer=0x12743900*, nNumberOfBytesToWrite=0x493, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12743900*, lpNumberOfBytesWritten=0x12769d00*=0x493, lpOverlapped=0x12769d0c) returned 1
	[0173.267] GetFileType (hFile=0x33c) returned 0x1
	[0173.267] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x493, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed281 | out: pbBuffer=0x124ed281) returned 1
	[0173.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed381 | out: pbBuffer=0x124ed381) returned 1
	[0173.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed481 | out: pbBuffer=0x124ed481) returned 1
	[0173.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410728 | out: pbBuffer=0x12410728) returned 1
	[0173.268] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.301] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0173.301] WriteFile (in: hFile=0x34c, lpBuffer=0x124ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x124ee000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.302] CloseHandle (hObject=0x34c) returned 1
	[0173.302] CloseHandle (hObject=0x33c) returned 1
	[0173.302] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.306] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496)) returned 1
	[0173.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732980 | out: pbBuffer=0x12732980) returned 1
	[0173.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410740 | out: pbBuffer=0x12410740) returned 1
	[0173.306] ReadFile (in: hFile=0x33c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12767d1c*=0x496, lpOverlapped=0x0) returned 1
	[0173.317] GetFileType (hFile=0x33c) returned 0x1
	[0173.317] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.317] WriteFile (in: hFile=0x33c, lpBuffer=0x124ee500*, nNumberOfBytesToWrite=0x496, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x124ee500*, lpNumberOfBytesWritten=0x12767d00*=0x496, lpOverlapped=0x12767d0c) returned 1
	[0173.318] GetFileType (hFile=0x33c) returned 0x1
	[0173.318] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x496, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed781 | out: pbBuffer=0x124ed781) returned 1
	[0173.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed881 | out: pbBuffer=0x124ed881) returned 1
	[0173.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed981 | out: pbBuffer=0x124ed981) returned 1
	[0173.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410828 | out: pbBuffer=0x12410828) returned 1
	[0173.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0173.318] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.318] WriteFile (in: hFile=0x2dc, lpBuffer=0x124eea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x124eea00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.319] CloseHandle (hObject=0x2dc) returned 1
	[0173.319] CloseHandle (hObject=0x33c) returned 1
	[0173.319] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0173.322] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x12767a44 | out: lpFindFileData=0x12767a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0173.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd235ac0, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xd235ac0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0173.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0173.322] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd235ac0, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xd235ac0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0173.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd235ac0, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xd235ac0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc5a4e0, ftCreationTime.dwHighDateTime=0x1d5e4ed, ftLastAccessTime.dwLowDateTime=0x111bdb00, ftLastAccessTime.dwHighDateTime=0x1d5db81, ftLastWriteTime.dwLowDateTime=0x111bdb00, ftLastWriteTime.dwHighDateTime=0x1d5db81, nFileSizeHigh=0x0, nFileSizeLow=0x163de, dwReserved0=0x0, dwReserved1=0x0, cFileName="1sq3HbQ0h8.m4a", cAlternateFileName="1SQ3HB~1.M4A")) returned 1
	[0173.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383af710, ftCreationTime.dwHighDateTime=0x1d5e1e0, ftLastAccessTime.dwLowDateTime=0xbb5231e0, ftLastAccessTime.dwHighDateTime=0x1d5de25, ftLastWriteTime.dwLowDateTime=0xbb5231e0, ftLastWriteTime.dwHighDateTime=0x1d5de25, nFileSizeHigh=0x0, nFileSizeLow=0x1730b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1t5qs2F8-EpJEGFJ Zb.wav", cAlternateFileName="1T5QS2~1.WAV")) returned 1
	[0173.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4e0b080, ftCreationTime.dwHighDateTime=0x1d5dbbb, ftLastAccessTime.dwLowDateTime=0xe16da5a0, ftLastAccessTime.dwHighDateTime=0x1d5dbe9, ftLastWriteTime.dwLowDateTime=0xe16da5a0, ftLastWriteTime.dwHighDateTime=0x1d5dbe9, nFileSizeHigh=0x0, nFileSizeLow=0xc74d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3p103YKBj.jpg", cAlternateFileName="3P103Y~1.JPG")) returned 1
	[0173.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3912f70, ftCreationTime.dwHighDateTime=0x1d5dc18, ftLastAccessTime.dwLowDateTime=0xf7b2d870, ftLastAccessTime.dwHighDateTime=0x1d5d889, ftLastWriteTime.dwLowDateTime=0xf7b2d870, ftLastWriteTime.dwHighDateTime=0x1d5d889, nFileSizeHigh=0x0, nFileSizeLow=0x11e75, dwReserved0=0x0, dwReserved1=0x0, cFileName="4SxZKLC2m8bd.m4a", cAlternateFileName="4SXZKL~1.M4A")) returned 1
	[0173.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6cd12a0, ftCreationTime.dwHighDateTime=0x1d5e2f2, ftLastAccessTime.dwLowDateTime=0xec21710, ftLastAccessTime.dwHighDateTime=0x1d5e546, ftLastWriteTime.dwLowDateTime=0xec21710, ftLastWriteTime.dwHighDateTime=0x1d5e546, nFileSizeHigh=0x0, nFileSizeLow=0xd5eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="4wgcKnqzp.png", cAlternateFileName="4WGCKN~1.PNG")) returned 1
	[0173.323] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36baf5a0, ftCreationTime.dwHighDateTime=0x1d5e7a5, ftLastAccessTime.dwLowDateTime=0x27a15d0, ftLastAccessTime.dwHighDateTime=0x1d5db36, ftLastWriteTime.dwLowDateTime=0x27a15d0, ftLastWriteTime.dwHighDateTime=0x1d5db36, nFileSizeHigh=0x0, nFileSizeLow=0x506a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7slhwRd1I.flv", cAlternateFileName="7SLHWR~1.FLV")) returned 1
	[0173.323] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c3b80, ftCreationTime.dwHighDateTime=0x1d5da6b, ftLastAccessTime.dwLowDateTime=0xbb2c70e0, ftLastAccessTime.dwHighDateTime=0x1d5e348, ftLastWriteTime.dwLowDateTime=0xbb2c70e0, ftLastWriteTime.dwHighDateTime=0x1d5e348, nFileSizeHigh=0x0, nFileSizeLow=0x12eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="d9M8iYC.png", cAlternateFileName="")) returned 1
	[0173.323] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0173.323] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0de1f0, ftCreationTime.dwHighDateTime=0x1d5d800, ftLastAccessTime.dwLowDateTime=0xebc31290, ftLastAccessTime.dwHighDateTime=0x1d5e5e1, ftLastWriteTime.dwLowDateTime=0xebc31290, ftLastWriteTime.dwHighDateTime=0x1d5e5e1, nFileSizeHigh=0x0, nFileSizeLow=0x6d51, dwReserved0=0x0, dwReserved1=0x0, cFileName="DUbL.avi", cAlternateFileName="")) returned 1
	[0173.323] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f72230, ftCreationTime.dwHighDateTime=0x1d5dfb4, ftLastAccessTime.dwLowDateTime=0x29528b00, ftLastAccessTime.dwHighDateTime=0x1d5dbfa, ftLastWriteTime.dwLowDateTime=0x29528b00, ftLastWriteTime.dwHighDateTime=0x1d5dbfa, nFileSizeHigh=0x0, nFileSizeLow=0x215a, dwReserved0=0x0, dwReserved1=0x0, cFileName="F_8mNJ7sy5JmvmrbmbdK.gif", cAlternateFileName="F_8MNJ~1.GIF")) returned 1
	[0173.323] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d71260, ftCreationTime.dwHighDateTime=0x1d5e7cd, ftLastAccessTime.dwLowDateTime=0xa0627c70, ftLastAccessTime.dwHighDateTime=0x1d5dce8, ftLastWriteTime.dwLowDateTime=0xa0627c70, ftLastWriteTime.dwHighDateTime=0x1d5dce8, nFileSizeHigh=0x0, nFileSizeLow=0x5f06, dwReserved0=0x0, dwReserved1=0x0, cFileName="gxHrQlTHsed.m4a", cAlternateFileName="GXHRQL~1.M4A")) returned 1
	[0173.323] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb12db0, ftCreationTime.dwHighDateTime=0x1d5daa0, ftLastAccessTime.dwLowDateTime=0x63925a20, ftLastAccessTime.dwHighDateTime=0x1d5e514, ftLastWriteTime.dwLowDateTime=0x63925a20, ftLastWriteTime.dwHighDateTime=0x1d5e514, nFileSizeHigh=0x0, nFileSizeLow=0x195f, dwReserved0=0x0, dwReserved1=0x0, cFileName="l-qGlIb2bAGgnY8.bmp", cAlternateFileName="L-QGLI~1.BMP")) returned 1
	[0173.323] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa52d740, ftCreationTime.dwHighDateTime=0x1d5dd22, ftLastAccessTime.dwLowDateTime=0x791f60e0, ftLastAccessTime.dwHighDateTime=0x1d5e6e0, ftLastWriteTime.dwLowDateTime=0x791f60e0, ftLastWriteTime.dwHighDateTime=0x1d5e6e0, nFileSizeHigh=0x0, nFileSizeLow=0x1088c, dwReserved0=0x0, dwReserved1=0x0, cFileName="lpgKJypqLWtbDF.ppt", cAlternateFileName="LPGKJY~1.PPT")) returned 1
	[0173.323] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea26c520, ftCreationTime.dwHighDateTime=0x1d5e317, ftLastAccessTime.dwLowDateTime=0xdf9ab3b0, ftLastAccessTime.dwHighDateTime=0x1d5dd44, ftLastWriteTime.dwLowDateTime=0xdf9ab3b0, ftLastWriteTime.dwHighDateTime=0x1d5dd44, nFileSizeHigh=0x0, nFileSizeLow=0x156ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="LVZE.avi", cAlternateFileName="")) returned 1
	[0173.323] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f51740, ftCreationTime.dwHighDateTime=0x1d5e2ed, ftLastAccessTime.dwLowDateTime=0xcb3a9df0, ftLastAccessTime.dwHighDateTime=0x1d5dba9, ftLastWriteTime.dwLowDateTime=0xcb3a9df0, ftLastWriteTime.dwHighDateTime=0x1d5dba9, nFileSizeHigh=0x0, nFileSizeLow=0x5916, dwReserved0=0x0, dwReserved1=0x0, cFileName="mCkyl D8.m4a", cAlternateFileName="MCKYLD~1.M4A")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd95c980, ftCreationTime.dwHighDateTime=0x1d6243f, ftLastAccessTime.dwLowDateTime=0xfe2e6000, ftLastAccessTime.dwHighDateTime=0x1d6243f, ftLastWriteTime.dwLowDateTime=0xd1734c00, ftLastWriteTime.dwHighDateTime=0x1d62431, nFileSizeHigh=0x0, nFileSizeLow=0x1cba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="mor.exe", cAlternateFileName="")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cfb140, ftCreationTime.dwHighDateTime=0x1d5e69b, ftLastAccessTime.dwLowDateTime=0x64c49000, ftLastAccessTime.dwHighDateTime=0x1d5e01b, ftLastWriteTime.dwLowDateTime=0x64c49000, ftLastWriteTime.dwHighDateTime=0x1d5e01b, nFileSizeHigh=0x0, nFileSizeLow=0x22fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nBrrxIz_IBZc4HR3prv.jpg", cAlternateFileName="NBRRXI~1.JPG")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc980b300, ftCreationTime.dwHighDateTime=0x1d5d8b6, ftLastAccessTime.dwLowDateTime=0xf8599990, ftLastAccessTime.dwHighDateTime=0x1d5e4db, ftLastWriteTime.dwLowDateTime=0xf8599990, ftLastWriteTime.dwHighDateTime=0x1d5e4db, nFileSizeHigh=0x0, nFileSizeLow=0x97a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="NNvZpT.mp3", cAlternateFileName="")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a44da0, ftCreationTime.dwHighDateTime=0x1d5dba4, ftLastAccessTime.dwLowDateTime=0xb6cb4620, ftLastAccessTime.dwHighDateTime=0x1d5e3f7, ftLastWriteTime.dwLowDateTime=0xb6cb4620, ftLastWriteTime.dwHighDateTime=0x1d5e3f7, nFileSizeHigh=0x0, nFileSizeLow=0x123db, dwReserved0=0x0, dwReserved1=0x0, cFileName="OJqu0YWzgtSqMwrpo.ods", cAlternateFileName="OJQU0Y~1.ODS")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd8086d0, ftCreationTime.dwHighDateTime=0x1d5e024, ftLastAccessTime.dwLowDateTime=0xcb11bb00, ftLastAccessTime.dwHighDateTime=0x1d5e2c1, ftLastWriteTime.dwLowDateTime=0xcb11bb00, ftLastWriteTime.dwHighDateTime=0x1d5e2c1, nFileSizeHigh=0x0, nFileSizeLow=0x13ec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="P4QbcwAnG.png", cAlternateFileName="P4QBCW~1.PNG")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76b4e10, ftCreationTime.dwHighDateTime=0x1d5df9b, ftLastAccessTime.dwLowDateTime=0x50c6bc30, ftLastAccessTime.dwHighDateTime=0x1d5dd88, ftLastWriteTime.dwLowDateTime=0x50c6bc30, ftLastWriteTime.dwHighDateTime=0x1d5dd88, nFileSizeHigh=0x0, nFileSizeLow=0xc94e, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIrTIY.mp3", cAlternateFileName="")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3160420, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0x6e8fc800, ftLastAccessTime.dwHighDateTime=0x1d5e3b5, ftLastWriteTime.dwLowDateTime=0x6e8fc800, ftLastWriteTime.dwHighDateTime=0x1d5e3b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sf2WnaG7ZcNKp", cAlternateFileName="SF2WNA~1")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x939d79d0, ftCreationTime.dwHighDateTime=0x1d5e1bc, ftLastAccessTime.dwLowDateTime=0x5134e280, ftLastAccessTime.dwHighDateTime=0x1d5db73, ftLastWriteTime.dwLowDateTime=0x5134e280, ftLastWriteTime.dwHighDateTime=0x1d5db73, nFileSizeHigh=0x0, nFileSizeLow=0x10be6, dwReserved0=0x0, dwReserved1=0x0, cFileName="uqpR.rtf", cAlternateFileName="")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c812170, ftCreationTime.dwHighDateTime=0x1d5d8ba, ftLastAccessTime.dwLowDateTime=0x9d9f3c50, ftLastAccessTime.dwHighDateTime=0x1d5dfde, ftLastWriteTime.dwLowDateTime=0x9d9f3c50, ftLastWriteTime.dwHighDateTime=0x1d5dfde, nFileSizeHigh=0x0, nFileSizeLow=0xb08, dwReserved0=0x0, dwReserved1=0x0, cFileName="XiZ8DV-XyzCo5QMw6GuJ.m4a", cAlternateFileName="XIZ8DV~1.M4A")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e759420, ftCreationTime.dwHighDateTime=0x1d5ddbf, ftLastAccessTime.dwLowDateTime=0x58bdc600, ftLastAccessTime.dwHighDateTime=0x1d5e6ec, ftLastWriteTime.dwLowDateTime=0x58bdc600, ftLastWriteTime.dwHighDateTime=0x1d5e6ec, nFileSizeHigh=0x0, nFileSizeLow=0x5b18, dwReserved0=0x0, dwReserved1=0x0, cFileName="XsVfT8IdmJzy7ojdoZ.mp3", cAlternateFileName="XSVFT8~1.MP3")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f57500, ftCreationTime.dwHighDateTime=0x1d5e386, ftLastAccessTime.dwLowDateTime=0xae2d2de0, ftLastAccessTime.dwHighDateTime=0x1d5df28, ftLastWriteTime.dwLowDateTime=0xae2d2de0, ftLastWriteTime.dwHighDateTime=0x1d5df28, nFileSizeHigh=0x0, nFileSizeLow=0x4d47, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y91lC8B.ods", cAlternateFileName="")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a28740, ftCreationTime.dwHighDateTime=0x1d5dfe8, ftLastAccessTime.dwLowDateTime=0x27ac29c0, ftLastAccessTime.dwHighDateTime=0x1d5e689, ftLastWriteTime.dwLowDateTime=0x27ac29c0, ftLastWriteTime.dwHighDateTime=0x1d5e689, nFileSizeHigh=0x0, nFileSizeLow=0x11acd, dwReserved0=0x0, dwReserved1=0x0, cFileName="zupETiL.pps", cAlternateFileName="")) returned 1
	[0173.324] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0173.324] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0173.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0173.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0173.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.342] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0173.342] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0173.343] CloseHandle (hObject=0x33c) returned 1
	[0173.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1sq3HbQ0h8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1sq3hbq0h8.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc5a4e0, ftCreationTime.dwHighDateTime=0x1d5e4ed, ftLastAccessTime.dwLowDateTime=0x111bdb00, ftLastAccessTime.dwHighDateTime=0x1d5db81, ftLastWriteTime.dwLowDateTime=0x111bdb00, ftLastWriteTime.dwHighDateTime=0x1d5db81, nFileSizeHigh=0x0, nFileSizeLow=0x163de)) returned 1
	[0173.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1t5qs2F8-EpJEGFJ Zb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1t5qs2f8-epjegfj zb.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383af710, ftCreationTime.dwHighDateTime=0x1d5e1e0, ftLastAccessTime.dwLowDateTime=0xbb5231e0, ftLastAccessTime.dwHighDateTime=0x1d5de25, ftLastWriteTime.dwLowDateTime=0xbb5231e0, ftLastWriteTime.dwHighDateTime=0x1d5de25, nFileSizeHigh=0x0, nFileSizeLow=0x1730b)) returned 1
	[0173.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3p103YKBj.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3p103ykbj.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4e0b080, ftCreationTime.dwHighDateTime=0x1d5dbbb, ftLastAccessTime.dwLowDateTime=0xe16da5a0, ftLastAccessTime.dwHighDateTime=0x1d5dbe9, ftLastWriteTime.dwLowDateTime=0xe16da5a0, ftLastWriteTime.dwHighDateTime=0x1d5dbe9, nFileSizeHigh=0x0, nFileSizeLow=0xc74d)) returned 1
	[0173.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1t5qs2F8-EpJEGFJ Zb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1t5qs2f8-epjegfj zb.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.365] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0173.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1t5qs2F8-EpJEGFJ Zb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1t5qs2f8-epjegfj zb.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x383af710, ftCreationTime.dwHighDateTime=0x1d5e1e0, ftLastAccessTime.dwLowDateTime=0xbb5231e0, ftLastAccessTime.dwHighDateTime=0x1d5de25, ftLastWriteTime.dwLowDateTime=0xbb5231e0, ftLastWriteTime.dwHighDateTime=0x1d5de25, nFileSizeHigh=0x0, nFileSizeLow=0x1730b)) returned 1
	[0173.366] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732d80 | out: pbBuffer=0x12732d80) returned 1
	[0173.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410a50 | out: pbBuffer=0x12410a50) returned 1
	[0173.367] ReadFile (in: hFile=0x34c, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x1276dd1c*=0x1730b, lpOverlapped=0x0) returned 1
	[0173.390] GetFileType (hFile=0x34c) returned 0x1
	[0173.390] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.390] WriteFile (in: hFile=0x34c, lpBuffer=0x12918000*, nNumberOfBytesToWrite=0x1730b, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12918000*, lpNumberOfBytesWritten=0x1276dd00*=0x1730b, lpOverlapped=0x1276dd0c) returned 1
	[0173.391] GetFileType (hFile=0x34c) returned 0x1
	[0173.391] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1730b, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ede01 | out: pbBuffer=0x124ede01) returned 1
	[0173.393] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124edf01 | out: pbBuffer=0x124edf01) returned 1
	[0173.393] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271c001 | out: pbBuffer=0x1271c001) returned 1
	[0173.394] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410b18 | out: pbBuffer=0x12410b18) returned 1
	[0173.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1t5qs2F8-EpJEGFJ Zb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1t5qs2f8-epjegfj zb.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.394] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0173.394] WriteFile (in: hFile=0x1e4, lpBuffer=0x124eef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x124eef00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.394] CloseHandle (hObject=0x1e4) returned 1
	[0173.397] CloseHandle (hObject=0x34c) returned 1
	[0173.398] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1t5qs2F8-EpJEGFJ Zb.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1t5qs2f8-epjegfj zb.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1t5qs2F8-EpJEGFJ Zb.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1t5qs2f8-epjegfj zb.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3p103YKBj.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3p103ykbj.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.419] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0173.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3p103YKBj.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3p103ykbj.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4e0b080, ftCreationTime.dwHighDateTime=0x1d5dbbb, ftLastAccessTime.dwLowDateTime=0xe16da5a0, ftLastAccessTime.dwHighDateTime=0x1d5dbe9, ftLastWriteTime.dwLowDateTime=0xe16da5a0, ftLastWriteTime.dwHighDateTime=0x1d5dbe9, nFileSizeHigh=0x0, nFileSizeLow=0xc74d)) returned 1
	[0173.419] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0173.419] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0173.420] ReadFile (in: hFile=0x34c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1276dd1c*=0xc74d, lpOverlapped=0x0) returned 1
	[0173.437] GetFileType (hFile=0x34c) returned 0x1
	[0173.437] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.438] WriteFile (in: hFile=0x34c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0xc74d, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1276dd00*=0xc74d, lpOverlapped=0x1276dd0c) returned 1
	[0173.438] GetFileType (hFile=0x34c) returned 0x1
	[0173.438] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xc74d, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0173.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0173.439] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0173.439] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0173.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3p103YKBj.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3p103ykbj.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0173.439] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0173.439] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.439] CloseHandle (hObject=0x2dc) returned 1
	[0173.441] CloseHandle (hObject=0x34c) returned 1
	[0173.442] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3p103YKBj.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3p103ykbj.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\3p103YKBj.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\3p103ykbj.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.592] SetEvent (hEvent=0x318) returned 1
	[0173.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7slhwRd1I.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7slhwrd1i.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.593] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0173.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7slhwRd1I.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7slhwrd1i.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36baf5a0, ftCreationTime.dwHighDateTime=0x1d5e7a5, ftLastAccessTime.dwLowDateTime=0x27a15d0, ftLastAccessTime.dwHighDateTime=0x1d5db36, ftLastWriteTime.dwLowDateTime=0x27a15d0, ftLastWriteTime.dwHighDateTime=0x1d5db36, nFileSizeHigh=0x0, nFileSizeLow=0x506a)) returned 1
	[0173.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0173.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0173.594] ReadFile (in: hFile=0x34c, lpBuffer=0x126c0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126c0000*, lpNumberOfBytesRead=0x1276dd1c*=0x506a, lpOverlapped=0x0) returned 1
	[0173.604] GetFileType (hFile=0x34c) returned 0x1
	[0173.604] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.604] WriteFile (in: hFile=0x34c, lpBuffer=0x124a1500*, nNumberOfBytesToWrite=0x506a, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x124a1500*, lpNumberOfBytesWritten=0x1276dd00*=0x506a, lpOverlapped=0x1276dd0c) returned 1
	[0173.604] GetFileType (hFile=0x34c) returned 0x1
	[0173.604] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x506a, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.604] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271c601 | out: pbBuffer=0x1271c601) returned 1
	[0173.605] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271c701 | out: pbBuffer=0x1271c701) returned 1
	[0173.605] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271c801 | out: pbBuffer=0x1271c801) returned 1
	[0173.605] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0173.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7slhwRd1I.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7slhwrd1i.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0173.605] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0173.605] WriteFile (in: hFile=0x2dc, lpBuffer=0x127ee500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.605] CloseHandle (hObject=0x2dc) returned 1
	[0173.607] CloseHandle (hObject=0x34c) returned 1
	[0173.609] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7slhwRd1I.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7slhwrd1i.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7slhwRd1I.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7slhwrd1i.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.661] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0173.671] SetEvent (hEvent=0x80) returned 1
	[0173.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LVZE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lvze.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.672] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0173.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LVZE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lvze.avi"), fInfoLevelId=0x0, lpFileInformation=0x12613ad0 | out: lpFileInformation=0x12613ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea26c520, ftCreationTime.dwHighDateTime=0x1d5e317, ftLastAccessTime.dwLowDateTime=0xdf9ab3b0, ftLastAccessTime.dwHighDateTime=0x1d5dd44, ftLastWriteTime.dwLowDateTime=0xdf9ab3b0, ftLastWriteTime.dwHighDateTime=0x1d5dd44, nFileSizeHigh=0x0, nFileSizeLow=0x156ed)) returned 1
	[0173.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c760 | out: pbBuffer=0x1244c760) returned 1
	[0173.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e748 | out: pbBuffer=0x1251e748) returned 1
	[0173.672] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0173.675] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0173.675] SetEvent (hEvent=0xa0) returned 1
	[0173.675] SetEvent (hEvent=0x80) returned 1
	[0173.676] ReadFile (in: hFile=0x34c, lpBuffer=0x12886000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12613d1c, lpOverlapped=0x0 | out: lpBuffer=0x12886000*, lpNumberOfBytesRead=0x12613d1c*=0x156ed, lpOverlapped=0x0) returned 1
	[0173.682] GetFileType (hFile=0x34c) returned 0x1
	[0173.682] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.682] WriteFile (in: hFile=0x34c, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x156ed, lpNumberOfBytesWritten=0x12613d00, lpOverlapped=0x12613d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x12613d00*=0x156ed, lpOverlapped=0x12613d0c) returned 1
	[0173.683] GetFileType (hFile=0x34c) returned 0x1
	[0173.683] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x156ed, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.683] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0173.683] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0173.683] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0173.683] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0173.683] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LVZE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lvze.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.684] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0173.684] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12613d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12613d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.684] CloseHandle (hObject=0x344) returned 1
	[0173.687] CloseHandle (hObject=0x34c) returned 1
	[0173.692] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LVZE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lvze.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LVZE.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lvze.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.732] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0173.741] SetEvent (hEvent=0x2e8) returned 1
	[0173.741] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P4QbcwAnG.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p4qbcwang.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.742] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P4QbcwAnG.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p4qbcwang.png"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd8086d0, ftCreationTime.dwHighDateTime=0x1d5e024, ftLastAccessTime.dwLowDateTime=0xcb11bb00, ftLastAccessTime.dwHighDateTime=0x1d5e2c1, ftLastWriteTime.dwLowDateTime=0xcb11bb00, ftLastWriteTime.dwHighDateTime=0x1d5e2c1, nFileSizeHigh=0x0, nFileSizeLow=0x13ec5)) returned 1
	[0173.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0173.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0173.743] ReadFile (in: hFile=0x34c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0x13ec5, lpOverlapped=0x0) returned 1
	[0173.748] GetFileType (hFile=0x34c) returned 0x1
	[0173.748] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.748] WriteFile (in: hFile=0x34c, lpBuffer=0x1286c000*, nNumberOfBytesToWrite=0x13ec5, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1286c000*, lpNumberOfBytesWritten=0x1242bd00*=0x13ec5, lpOverlapped=0x1242bd0c) returned 1
	[0173.748] GetFileType (hFile=0x34c) returned 0x1
	[0173.748] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x13ec5, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.748] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0173.749] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0173.749] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0173.749] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0173.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P4QbcwAnG.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p4qbcwang.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.749] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.749] WriteFile (in: hFile=0x1e4, lpBuffer=0x124b2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x124b2000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.750] CloseHandle (hObject=0x1e4) returned 1
	[0173.752] CloseHandle (hObject=0x34c) returned 1
	[0173.754] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P4QbcwAnG.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p4qbcwang.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P4QbcwAnG.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p4qbcwang.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6ZX6_am.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6zx6_am.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.820] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6ZX6_am.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6zx6_am.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe97708a0, ftCreationTime.dwHighDateTime=0x1d5e3d1, ftLastAccessTime.dwLowDateTime=0x63b1a020, ftLastAccessTime.dwHighDateTime=0x1d5e06d, ftLastWriteTime.dwLowDateTime=0x63b1a020, ftLastWriteTime.dwHighDateTime=0x1d5e06d, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1
	[0173.821] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0173.821] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0173.821] ReadFile (in: hFile=0x34c, lpBuffer=0x126e2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126e2000*, lpNumberOfBytesRead=0x1242bd1c*=0x18000, lpOverlapped=0x0) returned 1
	[0173.836] GetFileType (hFile=0x34c) returned 0x1
	[0173.836] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.836] WriteFile (in: hFile=0x34c, lpBuffer=0x12702000*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12702000*, lpNumberOfBytesWritten=0x1242bd00*=0x18000, lpOverlapped=0x1242bd0c) returned 1
	[0173.837] GetFileType (hFile=0x34c) returned 0x1
	[0173.837] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x18000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0173.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0173.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0173.838] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0173.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6ZX6_am.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6zx6_am.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.838] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.839] WriteFile (in: hFile=0x33c, lpBuffer=0x124b2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x124b2500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.839] CloseHandle (hObject=0x33c) returned 1
	[0173.839] CloseHandle (hObject=0x34c) returned 1
	[0173.839] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6ZX6_am.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6zx6_am.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6ZX6_am.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6zx6_am.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.953] SetEvent (hEvent=0x30c) returned 1
	[0173.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\D9TMeEzKV.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\d9tmeezkv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.955] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\D9TMeEzKV.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\d9tmeezkv.ppt"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6befea60, ftCreationTime.dwHighDateTime=0x1d5e6d7, ftLastAccessTime.dwLowDateTime=0x98aad6f0, ftLastAccessTime.dwHighDateTime=0x1d5dcd7, ftLastWriteTime.dwLowDateTime=0x98aad6f0, ftLastWriteTime.dwHighDateTime=0x1d5dcd7, nFileSizeHigh=0x0, nFileSizeLow=0x8159)) returned 1
	[0173.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0173.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0173.955] ReadFile (in: hFile=0x34c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0x8159, lpOverlapped=0x0) returned 1
	[0173.973] GetFileType (hFile=0x34c) returned 0x1
	[0173.973] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.973] WriteFile (in: hFile=0x34c, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x8159, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x1242bd00*=0x8159, lpOverlapped=0x1242bd0c) returned 1
	[0173.973] GetFileType (hFile=0x34c) returned 0x1
	[0173.973] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x8159, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.973] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0173.973] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0173.974] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0173.974] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5e0 | out: pbBuffer=0x1251e5e0) returned 1
	[0173.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\D9TMeEzKV.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\d9tmeezkv.ppt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0173.974] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.974] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.974] CloseHandle (hObject=0x2dc) returned 1
	[0173.975] CloseHandle (hObject=0x34c) returned 1
	[0173.976] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\D9TMeEzKV.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\d9tmeezkv.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\D9TMeEzKV.ppt.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\d9tmeezkv.ppt.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\I_1KbfM.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\i_1kbfm.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0174.060] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\I_1KbfM.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\i_1kbfm.csv"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3de2e0, ftCreationTime.dwHighDateTime=0x1d5d9bf, ftLastAccessTime.dwLowDateTime=0x9e5f3160, ftLastAccessTime.dwHighDateTime=0x1d5da82, ftLastWriteTime.dwLowDateTime=0x9e5f3160, ftLastWriteTime.dwHighDateTime=0x1d5da82, nFileSizeHigh=0x0, nFileSizeLow=0x7f6)) returned 1
	[0174.060] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0174.060] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0174.060] ReadFile (in: hFile=0x1e4, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1260fd1c*=0x7f6, lpOverlapped=0x0) returned 1
	[0174.066] GetFileType (hFile=0x1e4) returned 0x1
	[0174.066] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.066] WriteFile (in: hFile=0x1e4, lpBuffer=0x12614000*, nNumberOfBytesToWrite=0x7f6, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x12614000*, lpNumberOfBytesWritten=0x1260fd00*=0x7f6, lpOverlapped=0x1260fd0c) returned 1
	[0174.066] GetFileType (hFile=0x1e4) returned 0x1
	[0174.066] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x7f6, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.066] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0174.067] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0174.067] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0174.067] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410430 | out: pbBuffer=0x12410430) returned 1
	[0174.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\I_1KbfM.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\i_1kbfm.csv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.067] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.067] WriteFile (in: hFile=0x344, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.067] CloseHandle (hObject=0x344) returned 1
	[0174.201] CloseHandle (hObject=0x1e4) returned 1
	[0174.205] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\I_1KbfM.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\i_1kbfm.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\I_1KbfM.csv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\i_1kbfm.csv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.276] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0174.279] SetEvent (hEvent=0x2f4) returned 1
	[0174.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\bCxV.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\bcxv.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0174.281] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\bCxV.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\bcxv.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1534c580, ftCreationTime.dwHighDateTime=0x1d5dcbc, ftLastAccessTime.dwLowDateTime=0x29ebe420, ftLastAccessTime.dwHighDateTime=0x1d5daa2, ftLastWriteTime.dwLowDateTime=0x29ebe420, ftLastWriteTime.dwHighDateTime=0x1d5daa2, nFileSizeHigh=0x0, nFileSizeLow=0x4f6e)) returned 1
	[0174.281] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0174.281] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744010 | out: pbBuffer=0x12744010) returned 1
	[0174.281] ReadFile (in: hFile=0x1e4, lpBuffer=0x126c2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126c2000*, lpNumberOfBytesRead=0x1276dd1c*=0x4f6e, lpOverlapped=0x0) returned 1
	[0174.285] GetFileType (hFile=0x1e4) returned 0x1
	[0174.285] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.285] WriteFile (in: hFile=0x1e4, lpBuffer=0x12702000*, nNumberOfBytesToWrite=0x4f6e, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12702000*, lpNumberOfBytesWritten=0x1276dd00*=0x4f6e, lpOverlapped=0x1276dd0c) returned 1
	[0174.285] GetFileType (hFile=0x1e4) returned 0x1
	[0174.285] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x4f6e, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434401 | out: pbBuffer=0x12434401) returned 1
	[0174.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434501 | out: pbBuffer=0x12434501) returned 1
	[0174.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434601 | out: pbBuffer=0x12434601) returned 1
	[0174.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d8 | out: pbBuffer=0x127440d8) returned 1
	[0174.286] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\bCxV.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\bcxv.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.286] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.286] WriteFile (in: hFile=0x34c, lpBuffer=0x12722000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12722000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.286] CloseHandle (hObject=0x34c) returned 1
	[0174.288] CloseHandle (hObject=0x1e4) returned 1
	[0174.289] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\bCxV.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\bcxv.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\bCxV.gif.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\bcxv.gif.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.324] SwitchToThread () returned 1
	[0174.333] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0174.463] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0174.481] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0174.499] SetEvent (hEvent=0x80) returned 1
	[0174.499] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0174.860] SetEvent (hEvent=0x80) returned 1
	[0174.860] SetEvent (hEvent=0x30c) returned 1
	[0174.861] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0174.864] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0175.011] SetEvent (hEvent=0x2f4) returned 1
	[0175.011] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0175.012] SetEvent (hEvent=0x2f4) returned 1
	[0175.012] SetEvent (hEvent=0x30c) returned 1
	[0175.012] SwitchToThread () returned 1
	[0175.013] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0175.017] SetEvent (hEvent=0x30c) returned 1
	[0175.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0175.018] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x1242ba44 | out: lpFindFileData=0x1242ba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0175.018] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0176.125] SetEvent (hEvent=0x80) returned 1
	[0176.125] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0176.852] SetEvent (hEvent=0x2e8) returned 1
	[0176.852] SetEvent (hEvent=0x30c) returned 1
	[0176.852] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0176.855] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0176.864] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0177.156] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0177.157] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0177.159] SetEvent (hEvent=0x318) returned 1
	[0177.159] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0177.160] SetEvent (hEvent=0x318) returned 1
	[0177.160] SetEvent (hEvent=0x30c) returned 1
	[0177.160] SwitchToThread () returned 1
	[0177.161] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0177.163] SetEvent (hEvent=0x30c) returned 1
	[0177.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\szmk5T.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\szmk5t.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0177.164] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0177.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\szmk5T.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\szmk5t.csv"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca14c5b0, ftCreationTime.dwHighDateTime=0x1d5e106, ftLastAccessTime.dwLowDateTime=0x8b399a00, ftLastAccessTime.dwHighDateTime=0x1d5e304, ftLastWriteTime.dwLowDateTime=0x8b399a00, ftLastWriteTime.dwHighDateTime=0x1d5e304, nFileSizeHigh=0x0, nFileSizeLow=0xa655)) returned 1
	[0177.164] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0177.164] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0177.164] ReadFile (in: hFile=0x1e4, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0xa655, lpOverlapped=0x0) returned 1
	[0177.169] GetFileType (hFile=0x1e4) returned 0x1
	[0177.169] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.169] WriteFile (in: hFile=0x1e4, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0xa655, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x1242bd00*=0xa655, lpOverlapped=0x1242bd0c) returned 1
	[0177.169] GetFileType (hFile=0x1e4) returned 0x1
	[0177.169] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0xa655, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.169] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0177.169] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0177.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0177.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0177.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\szmk5T.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\szmk5t.csv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0177.170] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0177.170] WriteFile (in: hFile=0x2dc, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0177.170] CloseHandle (hObject=0x2dc) returned 1
	[0177.171] CloseHandle (hObject=0x1e4) returned 1
	[0177.173] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\szmk5T.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\szmk5t.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\szmk5T.csv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\szmk5t.csv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0177.318] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0177.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0177.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732460 | out: pbBuffer=0x12732460) returned 1
	[0177.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0177.318] ReadFile (in: hFile=0x344, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1242bd1c*=0xe2, lpOverlapped=0x0) returned 1
	[0177.320] GetFileType (hFile=0x344) returned 0x1
	[0177.320] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.321] WriteFile (in: hFile=0x344, lpBuffer=0x127d6000*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127d6000*, lpNumberOfBytesWritten=0x1242bd00*=0xe2, lpOverlapped=0x1242bd0c) returned 1
	[0177.322] GetFileType (hFile=0x344) returned 0x1
	[0177.322] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0177.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0177.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0177.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0177.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0177.323] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0177.323] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0177.323] CloseHandle (hObject=0x1e4) returned 1
	[0177.324] CloseHandle (hObject=0x344) returned 1
	[0177.324] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.541] SetEvent (hEvent=0xa0) returned 1
	[0177.542] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0178.076] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0178.079] SetEvent (hEvent=0x2f4) returned 1
	[0178.079] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0178.080] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0178.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0178.080] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e500 | out: pbBuffer=0x1252e500) returned 1
	[0178.080] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744590 | out: pbBuffer=0x12744590) returned 1
	[0178.081] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0178.081] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb28, ulCount=0x10, ulNumEntriesRemoved=0x325ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb28, ulNumEntriesRemoved=0x325ffb0c) returned 0
	[0178.081] SetEvent (hEvent=0x2f4) returned 1
	[0178.082] ReadFile (in: hFile=0x344, lpBuffer=0x1295a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1295a000*, lpNumberOfBytesRead=0x124f5d1c*=0x85, lpOverlapped=0x0) returned 1
	[0178.084] GetFileType (hFile=0x344) returned 0x1
	[0178.084] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0178.084] WriteFile (in: hFile=0x344, lpBuffer=0x1260ed80*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260ed80*, lpNumberOfBytesWritten=0x124f5d00*=0x85, lpOverlapped=0x124f5d0c) returned 1
	[0178.085] GetFileType (hFile=0x344) returned 0x1
	[0178.085] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0178.085] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb01 | out: pbBuffer=0x124ecb01) returned 1
	[0178.085] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc01 | out: pbBuffer=0x124ecc01) returned 1
	[0178.085] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd01 | out: pbBuffer=0x124ecd01) returned 1
	[0178.085] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744648 | out: pbBuffer=0x12744648) returned 1
	[0178.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0178.086] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0178.086] WriteFile (in: hFile=0x33c, lpBuffer=0x127d2a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d2a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0178.086] CloseHandle (hObject=0x33c) returned 1
	[0178.117] SetEvent (hEvent=0xa0) returned 1
	[0178.117] CloseHandle (hObject=0x344) returned 1
	[0178.118] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0178.288] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0178.301] SetEvent (hEvent=0x318) returned 1
	[0178.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0178.303] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0178.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0178.303] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e280 | out: pbBuffer=0x1252e280) returned 1
	[0178.303] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744190 | out: pbBuffer=0x12744190) returned 1
	[0178.303] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f3d1c*=0x85, lpOverlapped=0x0) returned 1
	[0178.305] GetFileType (hFile=0x33c) returned 0x1
	[0178.305] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0178.305] WriteFile (in: hFile=0x33c, lpBuffer=0x1262a7e0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1262a7e0*, lpNumberOfBytesWritten=0x124f3d00*=0x85, lpOverlapped=0x124f3d0c) returned 1
	[0178.305] GetFileType (hFile=0x33c) returned 0x1
	[0178.305] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0178.305] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0178.305] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0178.305] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0178.305] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744398 | out: pbBuffer=0x12744398) returned 1
	[0178.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0178.306] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0178.306] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0178.306] CloseHandle (hObject=0x2dc) returned 1
	[0179.755] SetEvent (hEvent=0xa0) returned 1
	[0179.755] CloseHandle (hObject=0x33c) returned 1
	[0179.763] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0180.791] SetEvent (hEvent=0x2e8) returned 1
	[0180.791] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0180.889] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0180.889] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0180.929] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0180.929] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0180.929] SetEvent (hEvent=0x80) returned 1
	[0180.929] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x102
	[0181.190] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0181.191] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0181.416] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0182.512] SetEvent (hEvent=0x318) returned 1
	[0182.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\local settings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0182.513] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x1242ba44 | out: lpFindFileData=0x1242ba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0182.513] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0182.839] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0182.968] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0183.074] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0183.088] SwitchToThread () returned 1
	[0183.093] SetEvent (hEvent=0x80) returned 1
	[0183.093] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0183.102] SetEvent (hEvent=0x30c) returned 1
	[0183.102] SetEvent (hEvent=0x68) returned 1
	[0183.102] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0183.670] SetEvent (hEvent=0x2f4) returned 1
	[0183.670] SetEvent (hEvent=0x68) returned 1
	[0183.670] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0184.885] SwitchToThread () returned 1
	[0184.967] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0185.113] SetEvent (hEvent=0x318) returned 1
	[0185.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0185.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0185.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0185.118] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf\\*", lpFindFileData=0x12769a44 | out: lpFindFileData=0x12769a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0185.118] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0185.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\LWmU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\lwmu.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0185.477] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0185.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\LWmU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\lwmu.png"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e766950, ftCreationTime.dwHighDateTime=0x1d5dc10, ftLastAccessTime.dwLowDateTime=0x27332ed0, ftLastAccessTime.dwHighDateTime=0x1d5dc39, ftLastWriteTime.dwLowDateTime=0x27332ed0, ftLastWriteTime.dwHighDateTime=0x1d5dc39, nFileSizeHigh=0x0, nFileSizeLow=0x2d16)) returned 1
	[0185.477] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0185.477] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410048 | out: pbBuffer=0x12410048) returned 1
	[0185.477] ReadFile (in: hFile=0x344, lpBuffer=0x12706000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12706000*, lpNumberOfBytesRead=0x12769d1c*=0x2d16, lpOverlapped=0x0) returned 1
	[0185.607] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0185.897] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0186.113] SetEvent (hEvent=0x2f4) returned 1
	[0186.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\whCheRSH3O8nQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\whchersh3o8nq.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0f5540, ftCreationTime.dwHighDateTime=0x1d5db65, ftLastAccessTime.dwLowDateTime=0xd8db0510, ftLastAccessTime.dwHighDateTime=0x1d5e7ef, ftLastWriteTime.dwLowDateTime=0xd8db0510, ftLastWriteTime.dwHighDateTime=0x1d5e7ef, nFileSizeHigh=0x0, nFileSizeLow=0x16c7b)) returned 1
	[0186.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\zs2ZOx tk3_Sr7MqXp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\zs2zox tk3_sr7mqxp.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909fd7b0, ftCreationTime.dwHighDateTime=0x1d5e260, ftLastAccessTime.dwLowDateTime=0xe32038b0, ftLastAccessTime.dwHighDateTime=0x1d5e4de, ftLastWriteTime.dwLowDateTime=0xe32038b0, ftLastWriteTime.dwHighDateTime=0x1d5e4de, nFileSizeHigh=0x0, nFileSizeLow=0xfc78)) returned 1
	[0186.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\whCheRSH3O8nQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\whchersh3o8nq.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.124] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\whCheRSH3O8nQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\whchersh3o8nq.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca0f5540, ftCreationTime.dwHighDateTime=0x1d5db65, ftLastAccessTime.dwLowDateTime=0xd8db0510, ftLastAccessTime.dwHighDateTime=0x1d5e7ef, ftLastWriteTime.dwLowDateTime=0xd8db0510, ftLastWriteTime.dwHighDateTime=0x1d5e7ef, nFileSizeHigh=0x0, nFileSizeLow=0x16c7b)) returned 1
	[0186.124] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0186.124] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0186.124] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1242bd1c*=0x16c7b, lpOverlapped=0x0) returned 1
	[0186.169] GetFileType (hFile=0x33c) returned 0x1
	[0186.169] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.169] WriteFile (in: hFile=0x33c, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0x16c7b, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x1242bd00*=0x16c7b, lpOverlapped=0x1242bd0c) returned 1
	[0186.170] GetFileType (hFile=0x33c) returned 0x1
	[0186.170] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x16c7b, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0186.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0186.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0186.171] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0186.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\whCheRSH3O8nQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\whchersh3o8nq.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.171] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.171] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.171] CloseHandle (hObject=0x1e4) returned 1
	[0186.208] CloseHandle (hObject=0x33c) returned 1
	[0186.272] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\whCheRSH3O8nQ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\whchersh3o8nq.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\whCheRSH3O8nQ.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\whchersh3o8nq.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.307] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0186.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OmRMKwrtkfriC1zpJ5Qk.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\omrmkwrtkfric1zpj5qk.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef51a40, ftCreationTime.dwHighDateTime=0x1d5df19, ftLastAccessTime.dwLowDateTime=0x82ad8180, ftLastAccessTime.dwHighDateTime=0x1d5e377, ftLastWriteTime.dwLowDateTime=0x82ad8180, ftLastWriteTime.dwHighDateTime=0x1d5e377, nFileSizeHigh=0x0, nFileSizeLow=0x13226)) returned 1
	[0186.318] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0186.327] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0186.335] SetEvent (hEvent=0x30c) returned 1
	[0186.335] SetEvent (hEvent=0x68) returned 1
	[0186.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\D_dPNp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d_dpnp.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.336] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\D_dPNp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d_dpnp.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9e90c00, ftCreationTime.dwHighDateTime=0x1d5d832, ftLastAccessTime.dwLowDateTime=0xa6ff8680, ftLastAccessTime.dwHighDateTime=0x1d5e315, ftLastWriteTime.dwLowDateTime=0xa6ff8680, ftLastWriteTime.dwHighDateTime=0x1d5e315, nFileSizeHigh=0x0, nFileSizeLow=0x10369)) returned 1
	[0186.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0186.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0186.336] ReadFile (in: hFile=0x34c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12727d1c*=0x10369, lpOverlapped=0x0) returned 1
	[0186.352] GetFileType (hFile=0x34c) returned 0x1
	[0186.352] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.352] WriteFile (in: hFile=0x34c, lpBuffer=0x12858000*, nNumberOfBytesToWrite=0x10369, lpNumberOfBytesWritten=0x12727d00, lpOverlapped=0x12727d0c | out: lpBuffer=0x12858000*, lpNumberOfBytesWritten=0x12727d00*=0x10369, lpOverlapped=0x12727d0c) returned 1
	[0186.353] GetFileType (hFile=0x34c) returned 0x1
	[0186.353] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x10369, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0186.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0186.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0186.354] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0186.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\D_dPNp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d_dpnp.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.354] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.354] WriteFile (in: hFile=0x1e4, lpBuffer=0x124b8000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12727d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b8000*, lpNumberOfBytesWritten=0x12727d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.354] CloseHandle (hObject=0x1e4) returned 1
	[0186.361] CloseHandle (hObject=0x34c) returned 1
	[0186.363] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\D_dPNp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d_dpnp.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\D_dPNp.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d_dpnp.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.394] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0186.401] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0186.411] SetEvent (hEvent=0x68) returned 1
	[0186.411] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0186.417] SetEvent (hEvent=0x2f4) returned 1
	[0186.417] SetEvent (hEvent=0x80) returned 1
	[0186.417] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0186.418] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x325ffb30, ulCount=0x10, ulNumEntriesRemoved=0x325ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x325ffb30, ulNumEntriesRemoved=0x325ffb14) returned 0
	[0186.418] SetEvent (hEvent=0x318) returned 1
	[0186.419] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0x1) returned 0x0
	[0186.420] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0186.543] SetEvent (hEvent=0x68) returned 1
	[0186.543] SetEvent (hEvent=0x2f4) returned 1
	[0186.543] SetEvent (hEvent=0x2e8) returned 1
	[0186.543] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.374] SetEvent (hEvent=0x30c) returned 1
	[0190.374] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.375] SetEvent (hEvent=0x30c) returned 1
	[0190.375] SetEvent (hEvent=0x80) returned 1
	[0190.375] SwitchToThread () returned 1
	[0190.376] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.386] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.440] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.454] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.466] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.477] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.497] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.520] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.548] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.584] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.590] SetEvent (hEvent=0x320) returned 1
	[0190.591] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.593] SetEvent (hEvent=0x320) returned 1
	[0190.593] SetEvent (hEvent=0x80) returned 1
	[0190.593] SetEvent (hEvent=0x318) returned 1
	[0190.593] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0190.664] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0191.035] SwitchToThread () returned 1
	[0191.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.037] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.038] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0191.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e820 | out: pbBuffer=0x1252e820) returned 1
	[0191.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251eda8 | out: pbBuffer=0x1251eda8) returned 1
	[0191.038] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x125e5d1c*=0x85, lpOverlapped=0x0) returned 1
	[0191.040] GetFileType (hFile=0x33c) returned 0x1
	[0191.040] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.041] WriteFile (in: hFile=0x33c, lpBuffer=0x1264a990*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x1264a990*, lpNumberOfBytesWritten=0x125e5d00*=0x85, lpOverlapped=0x125e5d0c) returned 1
	[0191.041] GetFileType (hFile=0x33c) returned 0x1
	[0191.041] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0191.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0191.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d01 | out: pbBuffer=0x12434d01) returned 1
	[0191.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251eed0 | out: pbBuffer=0x1251eed0) returned 1
	[0191.041] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0191.041] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0191.041] WriteFile (in: hFile=0x34c, lpBuffer=0x12618a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12618a00*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.042] CloseHandle (hObject=0x34c) returned 1
	[0191.042] CloseHandle (hObject=0x33c) returned 1
	[0191.042] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.044] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.045] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0191.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.045] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252ea40 | out: pbBuffer=0x1252ea40) returned 1
	[0191.045] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ef08 | out: pbBuffer=0x1251ef08) returned 1
	[0191.045] ReadFile (in: hFile=0x33c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x125e5d1c*=0x85, lpOverlapped=0x0) returned 1
	[0191.047] GetFileType (hFile=0x33c) returned 0x1
	[0191.047] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.047] WriteFile (in: hFile=0x33c, lpBuffer=0x1264b170*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x1264b170*, lpNumberOfBytesWritten=0x125e5d00*=0x85, lpOverlapped=0x125e5d0c) returned 1
	[0191.047] GetFileType (hFile=0x33c) returned 0x1
	[0191.047] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.047] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f01 | out: pbBuffer=0x12434f01) returned 1
	[0191.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435001 | out: pbBuffer=0x12435001) returned 1
	[0191.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435101 | out: pbBuffer=0x12435101) returned 1
	[0191.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251efc0 | out: pbBuffer=0x1251efc0) returned 1
	[0191.048] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0191.048] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0191.048] WriteFile (in: hFile=0x34c, lpBuffer=0x12618f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12618f00*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.048] CloseHandle (hObject=0x34c) returned 1
	[0191.049] CloseHandle (hObject=0x33c) returned 1
	[0191.207] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.212] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0191.228] SwitchToThread () returned 1
	[0191.267] SwitchToThread () returned 1
	[0191.284] SetEvent (hEvent=0x2e8) returned 1
	[0191.284] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.285] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0191.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0191.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0191.285] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x125e5d1c*=0x85, lpOverlapped=0x0) returned 1
	[0191.287] GetFileType (hFile=0x33c) returned 0x1
	[0191.287] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.287] WriteFile (in: hFile=0x33c, lpBuffer=0x1262e120*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x1262e120*, lpNumberOfBytesWritten=0x125e5d00*=0x85, lpOverlapped=0x125e5d0c) returned 1
	[0191.287] GetFileType (hFile=0x33c) returned 0x1
	[0191.287] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0191.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0191.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0191.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0191.287] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0191.288] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0191.288] WriteFile (in: hFile=0x34c, lpBuffer=0x12628500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628500*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.288] CloseHandle (hObject=0x34c) returned 1
	[0191.288] CloseHandle (hObject=0x33c) returned 1
	[0191.288] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.290] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.290] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0191.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0191.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0191.290] ReadFile (in: hFile=0x33c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x125e5d1c*=0x85, lpOverlapped=0x0) returned 1
	[0191.292] GetFileType (hFile=0x33c) returned 0x1
	[0191.292] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.292] WriteFile (in: hFile=0x33c, lpBuffer=0x1262e870*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x1262e870*, lpNumberOfBytesWritten=0x125e5d00*=0x85, lpOverlapped=0x125e5d0c) returned 1
	[0191.292] GetFileType (hFile=0x33c) returned 0x1
	[0191.292] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400801 | out: pbBuffer=0x12400801) returned 1
	[0191.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400901 | out: pbBuffer=0x12400901) returned 1
	[0191.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0191.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0191.293] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0191.293] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0191.293] WriteFile (in: hFile=0x34c, lpBuffer=0x12628a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628a00*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.293] CloseHandle (hObject=0x34c) returned 1
	[0191.293] CloseHandle (hObject=0x33c) returned 1
	[0191.293] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1
	[0191.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live" (normalized: "c:\\users\\default\\favorites\\windows live"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0191.296] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live" (normalized: "c:\\users\\default\\favorites\\windows live"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0191.296] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0191.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1
	[0191.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1
	[0191.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1
	[0191.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1
	[0191.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0191.320] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0191.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0191.322] SetEvent (hEvent=0x2e8) returned 1
	[0191.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links" (normalized: "c:\\users\\default\\links"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0191.323] CreateFileW (lpFileName="C:\\Users\\Default\\Links" (normalized: "c:\\users\\default\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0191.323] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0191.329] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0191.563] SetEvent (hEvent=0x2e8) returned 1
	[0191.563] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.563] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0191.563] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0191.563] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0191.563] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1
	[0191.563] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0191.563] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0191.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\links\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0191.565] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\links\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0191.566] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\links\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.567] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0191.567] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0191.584] CloseHandle (hObject=0x33c) returned 1
	[0191.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3)) returned 1
	[0191.585] SetEvent (hEvent=0x318) returned 1
	[0191.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0191.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b)) returned 1
	[0191.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\desktop.ini" (normalized: "c:\\users\\default\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1
	[0191.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Local Settings" (normalized: "c:\\users\\default\\local settings"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0191.588] CreateFileW (lpFileName="C:\\Users\\Default\\Local Settings" (normalized: "c:\\users\\default\\local settings"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0191.588] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0191.588] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0191.588] CloseHandle (hObject=0x33c) returned 1
	[0191.588] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\desktop.ini" (normalized: "c:\\users\\default\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.589] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0191.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\desktop.ini" (normalized: "c:\\users\\default\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1
	[0191.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c080 | out: pbBuffer=0x1244c080) returned 1
	[0191.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788080 | out: pbBuffer=0x12788080) returned 1
	[0191.590] ReadFile (in: hFile=0x33c, lpBuffer=0x12924000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12924000*, lpNumberOfBytesRead=0x12769d1c*=0x244, lpOverlapped=0x0) returned 1
	[0191.591] GetFileType (hFile=0x33c) returned 0x1
	[0191.591] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.591] WriteFile (in: hFile=0x33c, lpBuffer=0x127ae000*, nNumberOfBytesToWrite=0x244, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x127ae000*, lpNumberOfBytesWritten=0x12769d00*=0x244, lpOverlapped=0x12769d0c) returned 1
	[0191.591] GetFileType (hFile=0x33c) returned 0x1
	[0191.591] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x244, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.591] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0191.592] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0191.592] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0191.592] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788138 | out: pbBuffer=0x12788138) returned 1
	[0191.592] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\desktop.ini" (normalized: "c:\\users\\default\\links\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0191.592] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0191.592] WriteFile (in: hFile=0x344, lpBuffer=0x1245e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245e000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.592] CloseHandle (hObject=0x344) returned 1
	[0191.593] CloseHandle (hObject=0x33c) returned 1
	[0191.593] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Links\\desktop.ini" (normalized: "c:\\users\\default\\links\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Links\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\links\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.596] CreateFileW (lpFileName="C:\\Users\\Default\\Local Settings" (normalized: "c:\\users\\default\\local settings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0191.597] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x12769a44 | out: lpFindFileData=0x12769a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Music" (normalized: "c:\\users\\default\\music"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0191.598] CreateFileW (lpFileName="C:\\Users\\Default\\Music" (normalized: "c:\\users\\default\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0191.598] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0191.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0191.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0191.598] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0191.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\music\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0191.598] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\music\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0191.598] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\music\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.600] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0191.600] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0191.603] CloseHandle (hObject=0x33c) returned 1
	[0191.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Music\\desktop.ini" (normalized: "c:\\users\\default\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0191.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\My Documents" (normalized: "c:\\users\\default\\my documents"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0191.605] CreateFileW (lpFileName="C:\\Users\\Default\\My Documents" (normalized: "c:\\users\\default\\my documents"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0191.605] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0191.605] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0191.605] CloseHandle (hObject=0x33c) returned 1
	[0191.605] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\desktop.ini" (normalized: "c:\\users\\default\\music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.606] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0191.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Music\\desktop.ini" (normalized: "c:\\users\\default\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0191.606] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c300 | out: pbBuffer=0x1244c300) returned 1
	[0191.606] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0191.606] VirtualAlloc (lpAddress=0x12994000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x12994000
	[0191.723] SetEvent (hEvent=0x2e8) returned 1
	[0191.723] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0191.762] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0191.763] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0191.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1d3)) returned 1
	[0191.763] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c320 | out: pbBuffer=0x1244c320) returned 1
	[0191.763] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0191.763] ReadFile (in: hFile=0x344, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12429d1c*=0x1d3, lpOverlapped=0x0) returned 1
	[0191.764] GetFileType (hFile=0x344) returned 0x1
	[0191.764] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.764] WriteFile (in: hFile=0x344, lpBuffer=0x124c81e0*, nNumberOfBytesToWrite=0x1d3, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124c81e0*, lpNumberOfBytesWritten=0x12429d00*=0x1d3, lpOverlapped=0x12429d0c) returned 1
	[0191.764] GetFileType (hFile=0x344) returned 0x1
	[0191.764] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1d3, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.765] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8401 | out: pbBuffer=0x127e8401) returned 1
	[0191.765] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8501 | out: pbBuffer=0x127e8501) returned 1
	[0191.765] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0191.765] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0191.765] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0191.765] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0191.765] WriteFile (in: hFile=0x2dc, lpBuffer=0x1245e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245e500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.765] CloseHandle (hObject=0x2dc) returned 1
	[0191.765] CloseHandle (hObject=0x344) returned 1
	[0191.766] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Desktop.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\links\\desktop.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.799] CreateFileW (lpFileName="C:\\Users\\Default\\My Documents" (normalized: "c:\\users\\default\\my documents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0191.799] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0191.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000)) returned 1
	[0191.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1
	[0191.801] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0191.802] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0191.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000)) returned 1
	[0191.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c5a0 | out: pbBuffer=0x1244c5a0) returned 1
	[0191.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0191.802] ReadFile (in: hFile=0x344, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0191.872] GetFileType (hFile=0x344) returned 0x1
	[0191.872] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.872] WriteFile (in: hFile=0x344, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0191.873] GetFileType (hFile=0x344) returned 0x1
	[0191.873] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.873] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0191.873] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8801 | out: pbBuffer=0x127e8801) returned 1
	[0191.873] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8901 | out: pbBuffer=0x127e8901) returned 1
	[0191.873] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788348 | out: pbBuffer=0x12788348) returned 1
	[0191.873] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0191.874] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0191.874] WriteFile (in: hFile=0x1e4, lpBuffer=0x1245ea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245ea00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.875] CloseHandle (hObject=0x1e4) returned 1
	[0191.875] CloseHandle (hObject=0x344) returned 1
	[0191.875] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\ntuser.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.877] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0191.877] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0191.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0191.878] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c7c0 | out: pbBuffer=0x1244c7c0) returned 1
	[0191.878] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788370 | out: pbBuffer=0x12788370) returned 1
	[0191.878] ReadFile (in: hFile=0x344, lpBuffer=0x1283c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1283c000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0191.878] CloseHandle (hObject=0x344) returned 1
	[0191.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0191.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0191.879] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0191.880] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0191.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0191.880] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c7e0 | out: pbBuffer=0x1244c7e0) returned 1
	[0191.880] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788380 | out: pbBuffer=0x12788380) returned 1
	[0191.880] ReadFile (in: hFile=0x344, lpBuffer=0x1287c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1287c000*, lpNumberOfBytesRead=0x12429d1c*=0x10000, lpOverlapped=0x0) returned 1
	[0191.884] GetFileType (hFile=0x344) returned 0x1
	[0191.884] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.884] WriteFile (in: hFile=0x344, lpBuffer=0x1271c000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1271c000*, lpNumberOfBytesWritten=0x12429d00*=0x10000, lpOverlapped=0x12429d0c) returned 1
	[0191.885] GetFileType (hFile=0x344) returned 0x1
	[0191.885] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.886] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a01 | out: pbBuffer=0x127e8a01) returned 1
	[0191.886] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0191.886] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0191.886] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788438 | out: pbBuffer=0x12788438) returned 1
	[0191.886] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0191.886] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0191.886] WriteFile (in: hFile=0x1e4, lpBuffer=0x1245ef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245ef00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.886] CloseHandle (hObject=0x1e4) returned 1
	[0191.887] CloseHandle (hObject=0x344) returned 1
	[0191.887] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.959] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0192.633] SetEvent (hEvent=0x318) returned 1
	[0192.633] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0192.680] SetEvent (hEvent=0x68) returned 1
	[0192.681] SetEvent (hEvent=0x320) returned 1
	[0192.681] SetEvent (hEvent=0x2e8) returned 1
	[0192.681] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0194.711] SetEvent (hEvent=0x320) returned 1
	[0194.711] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0195.318] SetEvent (hEvent=0x318) returned 1
	[0195.318] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0195.583] SetEvent (hEvent=0x320) returned 1
	[0195.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV" (normalized: "c:\\users\\public\\recorded tv"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0195.585] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV" (normalized: "c:\\users\\public\\recorded tv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0195.585] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0195.585] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0195.585] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0195.585] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Media", cAlternateFileName="SAMPLE~1")) returned 1
	[0195.585] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0195.585] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0195.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\recorded tv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0195.585] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\recorded tv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0195.585] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\recorded tv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0195.587] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0195.587] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0195.588] CloseHandle (hObject=0x2cc) returned 1
	[0195.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media" (normalized: "c:\\users\\public\\recorded tv\\sample media"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0195.589] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media" (normalized: "c:\\users\\public\\recorded tv\\sample media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0195.589] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0195.589] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0195.589] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0195.589] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000, dwReserved0=0x0, dwReserved1=0x0, cFileName="win7_scenic-demoshort_raw.wtv", cAlternateFileName="WIN7_S~1.WTV")) returned 1
	[0195.589] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0195.590] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0195.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\recorded tv\\sample media\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0195.590] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\recorded tv\\sample media\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0195.590] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\recorded tv\\sample media\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0195.596] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0195.596] WriteFile (in: hFile=0x344, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0195.597] CloseHandle (hObject=0x344) returned 1
	[0195.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab)) returned 1
	[0195.597] SetEvent (hEvent=0x320) returned 1
	[0195.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000)) returned 1
	[0195.598] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0195.599] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0195.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xab)) returned 1
	[0195.599] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c0c0 | out: pbBuffer=0x1244c0c0) returned 1
	[0195.599] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0195.599] ReadFile (in: hFile=0x344, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x125e5d1c*=0xab, lpOverlapped=0x0) returned 1
	[0195.600] GetFileType (hFile=0x344) returned 0x1
	[0195.600] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0195.600] WriteFile (in: hFile=0x344, lpBuffer=0x124b4210*, nNumberOfBytesToWrite=0xab, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x124b4210*, lpNumberOfBytesWritten=0x125e5d00*=0xab, lpOverlapped=0x125e5d0c) returned 1
	[0195.601] GetFileType (hFile=0x344) returned 0x1
	[0195.601] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xab, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0195.601] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434401 | out: pbBuffer=0x12434401) returned 1
	[0195.601] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434501 | out: pbBuffer=0x12434501) returned 1
	[0195.601] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434601 | out: pbBuffer=0x12434601) returned 1
	[0195.601] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0195.601] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0195.601] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0195.601] WriteFile (in: hFile=0x2cc, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0195.602] CloseHandle (hObject=0x2cc) returned 1
	[0195.607] CloseHandle (hObject=0x344) returned 1
	[0195.607] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\recorded tv\\sample media\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0195.612] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0195.613] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0195.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x8a1f1b86, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x8a1f1b86, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x940000)) returned 1
	[0195.613] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c2e0 | out: pbBuffer=0x1244c2e0) returned 1
	[0195.613] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0195.613] ReadFile (in: hFile=0x344, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x125e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0195.931] SetEvent (hEvent=0xa0) returned 1
	[0195.932] GetFileType (hFile=0x344) returned 0x1
	[0195.932] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0195.932] WriteFile (in: hFile=0x344, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x125e5d00*=0x20000, lpOverlapped=0x125e5d0c) returned 1
	[0195.932] GetFileType (hFile=0x344) returned 0x1
	[0195.932] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0195.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0195.933] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434901 | out: pbBuffer=0x12434901) returned 1
	[0195.933] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0195.933] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0195.933] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0195.933] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0195.933] WriteFile (in: hFile=0x2cc, lpBuffer=0x127aa500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127aa500*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0195.934] CloseHandle (hObject=0x2cc) returned 1
	[0196.283] CloseHandle (hObject=0x344) returned 1
	[0196.283] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv"), lpNewFileName="C:\\Users\\Public\\Recorded TV\\Sample Media\\win7_scenic-demoshort_raw.wtv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\recorded tv\\sample media\\win7_scenic-demoshort_raw.wtv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0196.405] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) returned 0x0
	[0196.634] SetEvent (hEvent=0x68) returned 1
	[0196.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0196.637] WaitForSingleObject (hHandle=0x70, dwMilliseconds=0xffffffff) 

Thread:
	id = 4
	os_tid = 0xae8

	[0047.470] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x326fff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x326fff38*=0x74) returned 1
	[0047.470] VirtualQuery (in: lpAddress=0x326fff48, lpBuffer=0x326fff48, dwLength=0x1c | out: lpBuffer=0x326fff48*(BaseAddress=0x326ff000, AllocationBase=0x32600000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0047.470] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x78
	[0047.470] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0047.806] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0049.493] SwitchToThread () returned 1
	[0049.526] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0050.088] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0051.920] SetEvent (hEvent=0x80) returned 1
	[0051.921] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x752a) returned 0x102
	[0083.924] SetEvent (hEvent=0xa0) returned 1
	[0083.924] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xe6d4) returned 0x0
	[0085.590] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x2710) returned 0x0
	[0109.300] SetEvent (hEvent=0x68) returned 1
	[0109.300] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x15740) returned 0x0
	[0131.640] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0x2700) returned 0x102
	[0142.035] SetEvent (hEvent=0x2f4) returned 1
	[0142.035] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xe21d) returned 0x102
	[0206.217] SetEvent (hEvent=0xa0) returned 1
	[0206.218] SetEvent (hEvent=0x2e8) returned 1
	[0206.220] CancelIoEx (hFile=0x2f8, lpOverlapped=0x12510c14) returned 1
	[0206.221] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) returned 0x0
	[0209.609] WaitForSingleObject (hHandle=0x78, dwMilliseconds=0xffffffff) 

Thread:
	id = 5
	os_tid = 0xae4

	[0047.470] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x327fff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x327fff38*=0x7c) returned 1
	[0047.470] VirtualQuery (in: lpAddress=0x327fff48, lpBuffer=0x327fff48, dwLength=0x1c | out: lpBuffer=0x327fff48*(BaseAddress=0x327ff000, AllocationBase=0x32700000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0047.471] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x80
	[0047.471] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0047.484] SetEvent (hEvent=0x70) returned 1
	[0047.484] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0049.822] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0051.921] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0051.931] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.724] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.733] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0082.762] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffad4, ulCount=0x10, ulNumEntriesRemoved=0x327ffab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffad4, ulNumEntriesRemoved=0x327ffab8) returned 0
	[0082.764] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffad4, ulCount=0x10, ulNumEntriesRemoved=0x327ffab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x327ffad4, ulNumEntriesRemoved=0x327ffab8) returned 1
	[0082.791] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2088, lpcbTransfer=0x327ffab4, fWait=0, lpdwFlags=0x327ffac4 | out: lpcbTransfer=0x327ffab4, lpdwFlags=0x327ffac4) returned 1
	[0082.792] SetEvent (hEvent=0xa0) returned 1
	[0082.792] setsockopt (s=0x108, level=65535, optname=28688, optval="\x08\x01", optlen=4) returned 0
	[0082.792] SetEvent (hEvent=0x70) returned 1
	[0082.792] GetProcAddress (hModule=0x77230000, lpProcName="getsockname") returned 0x772330af
	[0082.792] getsockname (in: s=0x108, name=0x1242f890, namelen=0x1242f88c | out: name=0x1242f890*(sa_family=2, sin_port=0xc006, sin_addr="192.168.0.109"), namelen=0x1242f88c) returned 0
	[0082.793] GetProcAddress (hModule=0x77230000, lpProcName="getpeername") returned 0x77237147
	[0082.793] getpeername (in: s=0x108, name=0x1242f890, namelen=0x1242f88c | out: name=0x1242f890*(sa_family=2, sin_port=0x1bb, sin_addr="149.154.167.220"), namelen=0x1242f88c) returned 0
	[0082.795] setsockopt (s=0x108, level=6, optname=1, optval="\x01", optlen=4) returned 0
	[0082.796] setsockopt (s=0x108, level=65535, optname=8, optval="\x01", optlen=4) returned 0
	[0082.796] WSAIoctl (in: s=0x108, dwIoControlCode=0x98000004, lpvInBuffer=0x1242fb80, cbInBuffer=0xc, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x1242fb78, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x1242fb78, lpOverlapped=0x0) returned 0
	[0082.796] LoadLibraryW (lpLibFileName="advapi32.dll") returned 0x77710000
	[0082.797] GetProcAddress (hModule=0x77710000, lpProcName="CryptAcquireContextW") returned 0x7771df14
	[0082.803] CryptAcquireContextW (in: phProv=0x12410054, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000040 | out: phProv=0x12410054*=0xaadff0) returned 1
	[0085.578] SetEvent (hEvent=0xa0) returned 1
	[0085.578] GetProcAddress (hModule=0x77710000, lpProcName="CryptGenRandom") returned 0x7771dfc8
	[0085.579] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1241c75e | out: pbBuffer=0x1241c75e) returned 1
	[0085.579] SetEvent (hEvent=0x78) returned 1
	[0085.579] SetEvent (hEvent=0x68) returned 1
	[0085.579] GetEnvironmentVariableW (in: lpName="GODEBUG", lpBuffer=0x1248ab60, nSize=0x64 | out: lpBuffer="") returned 0x0
	[0085.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e680 | out: pbBuffer=0x1240e680) returned 1
	[0085.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e6a0 | out: pbBuffer=0x1240e6a0) returned 1
	[0085.582] GetProcAddress (hModule=0x77230000, lpProcName="WSASend") returned 0x77234406
	[0085.582] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0xee, buf=0x124fa000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0xee, lpOverlapped=0x124e2088) returned 0
	[0085.591] GetProcAddress (hModule=0x77230000, lpProcName="WSARecv") returned 0x77237089
	[0085.591] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x205, buf=0x124fc000*)), lpNumberOfBytesRecvd=0x124e2034*=0x0, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0
	[0085.592] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0086.704] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffad4, ulCount=0x10, ulNumEntriesRemoved=0x327ffab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffad4, ulNumEntriesRemoved=0x327ffab8) returned 0
	[0086.704] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffad4, ulCount=0x10, ulNumEntriesRemoved=0x327ffab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x327ffad4, ulNumEntriesRemoved=0x327ffab8) returned 1
	[0106.100] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x327ffab4, fWait=0, lpdwFlags=0x327ffac4 | out: lpcbTransfer=0x327ffab4, lpdwFlags=0x327ffac4) returned 1
	[0106.100] SetEvent (hEvent=0x70) returned 1
	[0106.103] SetEvent (hEvent=0xa0) returned 1
	[0106.103] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x33, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0106.104] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0xb5, buf=0x124fa000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0xb5, lpOverlapped=0x124e2088) returned 0
	[0106.105] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffad4, ulCount=0x10, ulNumEntriesRemoved=0x327ffab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffad4, ulNumEntriesRemoved=0x327ffab8) returned 0
	[0106.105] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffad4, ulCount=0x10, ulNumEntriesRemoved=0x327ffab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x327ffad4, ulNumEntriesRemoved=0x327ffab8) returned 1
	[0106.136] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x327ffab4, fWait=0, lpdwFlags=0x327ffac4 | out: lpcbTransfer=0x327ffab4, lpdwFlags=0x327ffac4) returned 1
	[0106.137] SetEvent (hEvent=0x70) returned 1
	[0106.137] SetEvent (hEvent=0xa0) returned 1
	[0106.137] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x26b, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0106.138] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0x87, buf=0x124fa000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0x87, lpOverlapped=0x124e2088) returned 0
	[0106.138] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x15f90) returned 0x0
	[0106.539] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x7523) returned 0x0
	[0121.173] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.206] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.206] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.206] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1
	[0121.207] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0121.207] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0121.207] ReadFile (in: hFile=0x328, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x126e5d1c*=0x333, lpOverlapped=0x0) returned 1
	[0121.214] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.219] GetFileType (hFile=0x328) returned 0x1
	[0121.219] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.220] WriteFile (in: hFile=0x328, lpBuffer=0x12534000*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12534000*, lpNumberOfBytesWritten=0x126e5d00*=0x333, lpOverlapped=0x126e5d0c) returned 1
	[0121.220] GetFileType (hFile=0x328) returned 0x1
	[0121.220] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x333, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0121.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0121.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0121.221] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0121.221] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.221] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.221] WriteFile (in: hFile=0x338, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.221] CloseHandle (hObject=0x338) returned 1
	[0121.223] CloseHandle (hObject=0x328) returned 1
	[0121.223] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.249] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.252] SetEvent (hEvent=0x70) returned 1
	[0121.253] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.253] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.253] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), fInfoLevelId=0x0, lpFileInformation=0x126e3ad0 | out: lpFileInformation=0x126e3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0)) returned 1
	[0121.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0121.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0121.253] ReadFile (in: hFile=0x338, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x126e3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.258] GetFileType (hFile=0x338) returned 0x1
	[0121.258] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.258] WriteFile (in: hFile=0x338, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e3d00, lpOverlapped=0x126e3d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x126e3d00*=0x20000, lpOverlapped=0x126e3d0c) returned 1
	[0121.259] GetFileType (hFile=0x338) returned 0x1
	[0121.259] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.259] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0121.259] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0121.259] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0121.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441a0 | out: pbBuffer=0x127441a0) returned 1
	[0121.260] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.260] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.260] WriteFile (in: hFile=0x328, lpBuffer=0x1263a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a500*, lpNumberOfBytesWritten=0x126e3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.265] CloseHandle (hObject=0x328) returned 1
	[0121.266] CloseHandle (hObject=0x338) returned 1
	[0121.266] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwtrig20.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwtrig20.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.290] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.291] SetEvent (hEvent=0x70) returned 1
	[0121.291] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.291] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.291] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b)) returned 1
	[0121.291] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127326a0 | out: pbBuffer=0x127326a0) returned 1
	[0121.291] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744298 | out: pbBuffer=0x12744298) returned 1
	[0121.292] ReadFile (in: hFile=0x338, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x126e7d1c*=0x6a3b, lpOverlapped=0x0) returned 1
	[0121.294] GetFileType (hFile=0x338) returned 0x1
	[0121.294] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.294] WriteFile (in: hFile=0x338, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x6a3b, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x126e7d00*=0x6a3b, lpOverlapped=0x126e7d0c) returned 1
	[0121.295] GetFileType (hFile=0x338) returned 0x1
	[0121.295] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x6a3b, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0121.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0121.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0121.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744350 | out: pbBuffer=0x12744350) returned 1
	[0121.296] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.296] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.296] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263b400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263b400*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.296] CloseHandle (hObject=0x2cc) returned 1
	[0121.296] CloseHandle (hObject=0x338) returned 1
	[0121.297] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\pss10r.chm.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\pss10r.chm.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.331] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0121.332] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0121.332] SetEvent (hEvent=0x30c) returned 1
	[0121.332] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0121.333] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.333] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.333] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa623330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x266a00)) returned 1
	[0121.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0121.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0121.334] ReadFile (in: hFile=0x2cc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.373] GetFileType (hFile=0x2cc) returned 0x1
	[0121.373] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.373] WriteFile (in: hFile=0x2cc, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0121.374] GetFileType (hFile=0x2cc) returned 0x1
	[0121.374] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0121.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0121.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0121.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0121.375] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.375] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.375] WriteFile (in: hFile=0x32c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.397] CloseHandle (hObject=0x32c) returned 1
	[0121.398] CloseHandle (hObject=0x2cc) returned 1
	[0121.398] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.399] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1
	[0121.399] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1
	[0121.400] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.400] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.400] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1
	[0121.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eac0 | out: pbBuffer=0x1240eac0) returned 1
	[0121.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0121.400] ReadFile (in: hFile=0x2cc, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f3d1c*=0x333, lpOverlapped=0x0) returned 1
	[0121.431] GetFileType (hFile=0x2cc) returned 0x1
	[0121.432] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.432] WriteFile (in: hFile=0x2cc, lpBuffer=0x1298c000*, nNumberOfBytesToWrite=0x333, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1298c000*, lpNumberOfBytesWritten=0x124f3d00*=0x333, lpOverlapped=0x124f3d0c) returned 1
	[0121.432] GetFileType (hFile=0x2cc) returned 0x1
	[0121.432] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x333, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0121.433] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0121.433] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0121.433] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410590 | out: pbBuffer=0x12410590) returned 1
	[0121.433] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0121.433] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.433] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.434] CloseHandle (hObject=0x33c) returned 1
	[0121.434] CloseHandle (hObject=0x2cc) returned 1
	[0121.434] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.445] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.467] SetEvent (hEvent=0x2e8) returned 1
	[0121.600] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.600] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.600] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0121.600] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0121.600] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0121.600] ReadFile (in: hFile=0x2cc, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.614] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.621] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.642] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.642] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.642] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00)) returned 1
	[0121.642] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0121.642] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0121.642] ReadFile (in: hFile=0x328, lpBuffer=0x127ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.664] GetFileType (hFile=0x328) returned 0x1
	[0121.664] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.664] WriteFile (in: hFile=0x328, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0121.665] GetFileType (hFile=0x328) returned 0x1
	[0121.665] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.665] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0121.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0121.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0121.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0121.666] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.666] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.666] WriteFile (in: hFile=0x32c, lpBuffer=0x12608000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12608000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.670] CloseHandle (hObject=0x32c) returned 1
	[0121.677] CloseHandle (hObject=0x328) returned 1
	[0121.680] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.711] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.724] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.738] SetEvent (hEvent=0x30c) returned 1
	[0121.738] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.742] SetEvent (hEvent=0x68) returned 1
	[0121.742] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0121.746] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0121.746] SetEvent (hEvent=0x68) returned 1
	[0121.746] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0121.747] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.751] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.765] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.819] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.842] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.890] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.890] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.890] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0121.890] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c300 | out: pbBuffer=0x1244c300) returned 1
	[0121.890] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881a8 | out: pbBuffer=0x127881a8) returned 1
	[0121.890] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0121.890] SetEvent (hEvent=0x318) returned 1
	[0121.891] ReadFile (in: hFile=0x32c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.899] GetFileType (hFile=0x32c) returned 0x1
	[0121.899] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.899] WriteFile (in: hFile=0x32c, lpBuffer=0x1259a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1259a000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0121.900] GetFileType (hFile=0x32c) returned 0x1
	[0121.900] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.900] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0121.900] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0121.901] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0121.901] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0121.901] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.901] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.901] WriteFile (in: hFile=0x340, lpBuffer=0x125fe500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.905] CloseHandle (hObject=0x340) returned 1
	[0121.906] CloseHandle (hObject=0x32c) returned 1
	[0121.907] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.934] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.935] SetEvent (hEvent=0x320) returned 1
	[0121.935] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.935] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.936] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915)) returned 1
	[0121.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732080 | out: pbBuffer=0x12732080) returned 1
	[0121.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744010 | out: pbBuffer=0x12744010) returned 1
	[0121.936] ReadFile (in: hFile=0x340, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x126e5d1c*=0x1915, lpOverlapped=0x0) returned 1
	[0121.949] GetFileType (hFile=0x340) returned 0x1
	[0121.949] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.949] WriteFile (in: hFile=0x340, lpBuffer=0x124ff980*, nNumberOfBytesToWrite=0x1915, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x124ff980*, lpNumberOfBytesWritten=0x126e5d00*=0x1915, lpOverlapped=0x126e5d0c) returned 1
	[0121.949] GetFileType (hFile=0x340) returned 0x1
	[0121.950] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x1915, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0121.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0121.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0121.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d8 | out: pbBuffer=0x127440d8) returned 1
	[0121.950] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.951] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.951] WriteFile (in: hFile=0x32c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.951] CloseHandle (hObject=0x32c) returned 1
	[0121.951] CloseHandle (hObject=0x340) returned 1
	[0121.951] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.960] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0121.961] SetEvent (hEvent=0x70) returned 1
	[0121.961] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.961] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.961] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0121.962] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322a0 | out: pbBuffer=0x127322a0) returned 1
	[0121.962] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f0 | out: pbBuffer=0x127440f0) returned 1
	[0121.962] ReadFile (in: hFile=0x340, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.060] GetFileType (hFile=0x340) returned 0x1
	[0122.060] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.060] WriteFile (in: hFile=0x340, lpBuffer=0x12898000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12898000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0122.061] GetFileType (hFile=0x340) returned 0x1
	[0122.061] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.061] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0122.061] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0122.061] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0122.062] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744288 | out: pbBuffer=0x12744288) returned 1
	[0122.062] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0122.062] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0122.062] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.082] CloseHandle (hObject=0x2cc) returned 1
	[0122.082] CloseHandle (hObject=0x340) returned 1
	[0122.082] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.137] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.145] SetEvent (hEvent=0x2e8) returned 1
	[0122.146] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0122.146] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.160] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.185] SetEvent (hEvent=0x320) returned 1
	[0122.185] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.191] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.206] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.235] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.258] GetFileType (hFile=0x2fc) returned 0x1
	[0122.258] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.258] WriteFile (in: hFile=0x2fc, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0122.260] GetFileType (hFile=0x2fc) returned 0x1
	[0122.260] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0122.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0122.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0122.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e200 | out: pbBuffer=0x1251e200) returned 1
	[0122.261] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0122.261] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.261] WriteFile (in: hFile=0x2cc, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.262] CloseHandle (hObject=0x2cc) returned 1
	[0122.262] CloseHandle (hObject=0x2fc) returned 1
	[0122.263] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\ose.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\ose.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.264] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.265] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.265] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0122.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322a0 | out: pbBuffer=0x127322a0) returned 1
	[0122.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e378 | out: pbBuffer=0x1251e378) returned 1
	[0122.265] ReadFile (in: hFile=0x2fc, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.298] GetFileType (hFile=0x2fc) returned 0x1
	[0122.298] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.298] WriteFile (in: hFile=0x2fc, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0122.299] GetFileType (hFile=0x2fc) returned 0x1
	[0122.299] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0122.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0122.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0122.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e6e0 | out: pbBuffer=0x1251e6e0) returned 1
	[0122.299] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.300] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.300] WriteFile (in: hFile=0x338, lpBuffer=0x125fe500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.314] CloseHandle (hObject=0x338) returned 1
	[0122.326] CloseHandle (hObject=0x2fc) returned 1
	[0122.333] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.464] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0122.464] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.464] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4)) returned 1
	[0122.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0122.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744288 | out: pbBuffer=0x12744288) returned 1
	[0122.465] ReadFile (in: hFile=0x340, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f3d1c*=0x4, lpOverlapped=0x0) returned 1
	[0122.466] GetFileType (hFile=0x340) returned 0x1
	[0122.466] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.466] WriteFile (in: hFile=0x340, lpBuffer=0x12744290*, nNumberOfBytesToWrite=0x4, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12744290*, lpNumberOfBytesWritten=0x124f3d00*=0x4, lpOverlapped=0x124f3d0c) returned 1
	[0122.466] GetFileType (hFile=0x340) returned 0x1
	[0122.466] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x4, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0122.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0122.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e81 | out: pbBuffer=0x127e8e81) returned 1
	[0122.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127443e0 | out: pbBuffer=0x127443e0) returned 1
	[0122.467] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.467] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.467] WriteFile (in: hFile=0x2fc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.468] CloseHandle (hObject=0x2fc) returned 1
	[0122.468] CloseHandle (hObject=0x340) returned 1
	[0122.468] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), lpNewFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.469] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310)) returned 1
	[0122.469] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto" (normalized: "c:\\programdata\\microsoft\\crypto"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.470] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto" (normalized: "c:\\programdata\\microsoft\\crypto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.470] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1
	[0122.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1
	[0122.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0122.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.470] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.470] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.470] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.470] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0122.471] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0122.471] WriteFile (in: hFile=0x340, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0122.472] CloseHandle (hObject=0x340) returned 1
	[0122.472] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS" (normalized: "c:\\programdata\\microsoft\\crypto\\dss"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.473] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS" (normalized: "c:\\programdata\\microsoft\\crypto\\dss"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.473] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.473] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd943744, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.473] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0122.473] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.473] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.473] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.473] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.474] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.483] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.493] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0122.493] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.510] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.550] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.625] SetEvent (hEvent=0x318) returned 1
	[0122.625] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.625] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.625] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.643] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.680] SetEvent (hEvent=0x318) returned 1
	[0122.680] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.680] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.680] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.680] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.680] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.681] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.681] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.681] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico\\*", lpFindFileData=0x126e7a44 | out: lpFindFileData=0x126e7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.681] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.687] SetEvent (hEvent=0x318) returned 1
	[0122.687] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.687] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.687] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.687] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.687] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0122.708] SetEvent (hEvent=0x318) returned 1
	[0122.708] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.708] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.708] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.708] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico\\*", lpFindFileData=0x126e7a44 | out: lpFindFileData=0x126e7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.708] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.708] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.708] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0123.104] SetEvent (hEvent=0x70) returned 1
	[0123.104] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0123.104] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0123.104] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlui.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108)) returned 1
	[0123.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0123.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788068 | out: pbBuffer=0x12788068) returned 1
	[0123.105] ReadFile (in: hFile=0x2fc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0123.241] GetFileType (hFile=0x2fc) returned 0x1
	[0123.241] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.241] WriteFile (in: hFile=0x2fc, lpBuffer=0x12858000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x12858000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0123.243] GetFileType (hFile=0x2fc) returned 0x1
	[0123.243] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435581 | out: pbBuffer=0x12435581) returned 1
	[0123.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435681 | out: pbBuffer=0x12435681) returned 1
	[0123.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435781 | out: pbBuffer=0x12435781) returned 1
	[0123.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124109c8 | out: pbBuffer=0x124109c8) returned 1
	[0123.243] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlui.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.244] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0123.244] WriteFile (in: hFile=0x338, lpBuffer=0x125ec000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ec000*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.244] CloseHandle (hObject=0x338) returned 1
	[0123.244] CloseHandle (hObject=0x2fc) returned 1
	[0123.244] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlui.dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlui.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.245] SetEvent (hEvent=0x2e8) returned 1
	[0123.245] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0123.245] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0123.245] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1
	[0123.245] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252ecc0 | out: pbBuffer=0x1252ecc0) returned 1
	[0123.245] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124109e0 | out: pbBuffer=0x124109e0) returned 1
	[0123.245] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0123.246] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0123.246] SetEvent (hEvent=0x2e8) returned 1
	[0123.246] ReadFile (in: hFile=0x2fc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0123.265] GetFileType (hFile=0x2fc) returned 0x1
	[0123.265] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.265] WriteFile (in: hFile=0x2fc, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0123.265] GetFileType (hFile=0x2fc) returned 0x1
	[0123.265] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0123.266] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434301 | out: pbBuffer=0x12434301) returned 1
	[0123.266] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434401 | out: pbBuffer=0x12434401) returned 1
	[0123.266] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0123.266] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.266] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0123.266] WriteFile (in: hFile=0x338, lpBuffer=0x12456000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12456000*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.269] CloseHandle (hObject=0x338) returned 1
	[0123.297] SetEvent (hEvent=0xa0) returned 1
	[0123.297] CloseHandle (hObject=0x2fc) returned 1
	[0123.297] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.300] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0123.325] SetEvent (hEvent=0x68) returned 1
	[0123.325] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0123.326] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.326] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536)) returned 1
	[0123.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0123.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0123.326] ReadFile (in: hFile=0x2cc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x126e7d1c*=0x1536, lpOverlapped=0x0) returned 1
	[0123.343] SetEvent (hEvent=0xa0) returned 1
	[0123.343] GetFileType (hFile=0x2cc) returned 0x1
	[0123.343] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.344] WriteFile (in: hFile=0x2cc, lpBuffer=0x12507800*, nNumberOfBytesToWrite=0x1536, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12507800*, lpNumberOfBytesWritten=0x126e7d00*=0x1536, lpOverlapped=0x126e7d0c) returned 1
	[0123.344] GetFileType (hFile=0x2cc) returned 0x1
	[0123.344] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x1536, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.344] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0123.344] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0123.344] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0123.345] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e710 | out: pbBuffer=0x1251e710) returned 1
	[0123.345] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.345] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.345] WriteFile (in: hFile=0x338, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.345] CloseHandle (hObject=0x338) returned 1
	[0123.345] CloseHandle (hObject=0x2cc) returned 1
	[0123.346] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.346] SetEvent (hEvent=0x2e8) returned 1
	[0123.346] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0123.346] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.346] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e)) returned 1
	[0123.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c460 | out: pbBuffer=0x1244c460) returned 1
	[0123.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e778 | out: pbBuffer=0x1251e778) returned 1
	[0123.347] ReadFile (in: hFile=0x2cc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0123.356] GetFileType (hFile=0x2cc) returned 0x1
	[0123.356] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.357] WriteFile (in: hFile=0x2cc, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0123.358] GetFileType (hFile=0x2cc) returned 0x1
	[0123.358] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0123.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0123.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0123.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e9b0 | out: pbBuffer=0x1251e9b0) returned 1
	[0123.359] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0123.359] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.359] WriteFile (in: hFile=0x2fc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.373] CloseHandle (hObject=0x2fc) returned 1
	[0123.373] CloseHandle (hObject=0x2cc) returned 1
	[0123.373] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.374] SetEvent (hEvent=0x68) returned 1
	[0123.374] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0123.374] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.375] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1
	[0123.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c880 | out: pbBuffer=0x1244c880) returned 1
	[0123.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e9e8 | out: pbBuffer=0x1251e9e8) returned 1
	[0123.375] ReadFile (in: hFile=0x2cc, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x126e7d1c*=0x627e, lpOverlapped=0x0) returned 1
	[0123.381] GetFileType (hFile=0x2cc) returned 0x1
	[0123.381] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.381] WriteFile (in: hFile=0x2cc, lpBuffer=0x12612a80*, nNumberOfBytesToWrite=0x627e, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12612a80*, lpNumberOfBytesWritten=0x126e7d00*=0x627e, lpOverlapped=0x126e7d0c) returned 1
	[0123.382] GetFileType (hFile=0x2cc) returned 0x1
	[0123.382] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x627e, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.382] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed401 | out: pbBuffer=0x124ed401) returned 1
	[0123.382] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed501 | out: pbBuffer=0x124ed501) returned 1
	[0123.382] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed601 | out: pbBuffer=0x124ed601) returned 1
	[0123.382] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251eb00 | out: pbBuffer=0x1251eb00) returned 1
	[0123.382] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.382] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0123.382] WriteFile (in: hFile=0x338, lpBuffer=0x124b4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b4000*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.382] CloseHandle (hObject=0x338) returned 1
	[0123.383] CloseHandle (hObject=0x2cc) returned 1
	[0123.383] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointPortalSite.ico.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\sharepointportalsite.ico.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.389] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0123.536] SetEvent (hEvent=0x68) returned 1
	[0123.536] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0123.537] SetEvent (hEvent=0x318) returned 1
	[0123.537] SetEvent (hEvent=0x2e8) returned 1
	[0123.537] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0123.539] SetEvent (hEvent=0x318) returned 1
	[0123.539] SetEvent (hEvent=0x70) returned 1
	[0123.539] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.271] SetEvent (hEvent=0x68) returned 1
	[0124.271] SetEvent (hEvent=0x318) returned 1
	[0124.271] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.274] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.323] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.449] SetEvent (hEvent=0x30c) returned 1
	[0124.449] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.449] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.449] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160)) returned 1
	[0124.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732080 | out: pbBuffer=0x12732080) returned 1
	[0124.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788028 | out: pbBuffer=0x12788028) returned 1
	[0124.449] ReadFile (in: hFile=0x2fc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.463] GetFileType (hFile=0x2fc) returned 0x1
	[0124.463] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.463] WriteFile (in: hFile=0x2fc, lpBuffer=0x12898000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12898000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0124.463] GetFileType (hFile=0x2fc) returned 0x1
	[0124.463] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0124.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0124.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0124.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880e0 | out: pbBuffer=0x127880e0) returned 1
	[0124.464] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.464] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.464] WriteFile (in: hFile=0x32c, lpBuffer=0x126e0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x126e0000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.467] CloseHandle (hObject=0x32c) returned 1
	[0124.468] CloseHandle (hObject=0x2fc) returned 1
	[0124.470] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.480] SwitchToThread () returned 1
	[0124.512] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.538] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.546] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.556] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.590] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.605] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.629] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.640] SetEvent (hEvent=0x2e4) returned 1
	[0124.640] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.644] SetEvent (hEvent=0x30c) returned 1
	[0124.647] SetEvent (hEvent=0x68) returned 1
	[0124.647] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0124.660] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.660] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0124.662] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.662] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0124.662] SetEvent (hEvent=0x30c) returned 1
	[0124.662] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0124.663] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.755] SetEvent (hEvent=0x70) returned 1
	[0124.755] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.858] SetEvent (hEvent=0x318) returned 1
	[0124.859] SetEvent (hEvent=0x68) returned 1
	[0124.859] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0124.870] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.871] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0124.871] SetEvent (hEvent=0x68) returned 1
	[0124.871] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0124.877] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60)) returned 1
	[0124.879] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60)) returned 1
	[0124.879] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.880] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.880] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57655500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x57655500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x87f60)) returned 1
	[0124.880] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0124.880] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0124.880] ReadFile (in: hFile=0x340, lpBuffer=0x12886000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12886000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.906] GetFileType (hFile=0x340) returned 0x1
	[0124.906] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.906] WriteFile (in: hFile=0x340, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0124.907] GetFileType (hFile=0x340) returned 0x1
	[0124.907] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0124.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0124.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0124.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0124.908] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0124.908] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.908] WriteFile (in: hFile=0x2cc, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.922] CloseHandle (hObject=0x2cc) returned 1
	[0124.922] CloseHandle (hObject=0x340) returned 1
	[0124.923] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.923] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960)) returned 1
	[0124.924] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960)) returned 1
	[0124.924] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1789a00, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa1789a00, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x24360)) returned 1
	[0124.924] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.924] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.924] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x70273800, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x70273800, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x73960)) returned 1
	[0124.924] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732300 | out: pbBuffer=0x12732300) returned 1
	[0124.924] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788108 | out: pbBuffer=0x12788108) returned 1
	[0124.925] ReadFile (in: hFile=0x340, lpBuffer=0x12942000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12942000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.934] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.952] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0124.968] GetFileType (hFile=0x2cc) returned 0x1
	[0124.968] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.968] WriteFile (in: hFile=0x2cc, lpBuffer=0x1286a000*, nNumberOfBytesToWrite=0x6960, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x1286a000*, lpNumberOfBytesWritten=0x126ebd00*=0x6960, lpOverlapped=0x126ebd0c) returned 1
	[0124.968] GetFileType (hFile=0x2cc) returned 0x1
	[0124.968] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x6960, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0124.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0124.969] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0124.969] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0124.969] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0124.969] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.969] WriteFile (in: hFile=0x328, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.969] CloseHandle (hObject=0x328) returned 1
	[0124.969] CloseHandle (hObject=0x2cc) returned 1
	[0124.970] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.970] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0124.971] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.971] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x23960)) returned 1
	[0124.971] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322c0 | out: pbBuffer=0x127322c0) returned 1
	[0124.971] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0124.971] ReadFile (in: hFile=0x2cc, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.988] GetFileType (hFile=0x2cc) returned 0x1
	[0124.988] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.988] WriteFile (in: hFile=0x2cc, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0124.989] GetFileType (hFile=0x2cc) returned 0x1
	[0124.989] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.990] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0124.990] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0124.990] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0124.990] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0124.990] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.990] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.991] WriteFile (in: hFile=0x32c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.991] CloseHandle (hObject=0x32c) returned 1
	[0124.991] CloseHandle (hObject=0x2cc) returned 1
	[0124.991] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.992] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.014] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.014] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.015] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.015] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0125.015] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokens.dat", cAlternateFileName="")) returned 1
	[0125.015] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.015] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.015] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.015] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.015] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.022] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.022] WriteFile (in: hFile=0x338, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.023] CloseHandle (hObject=0x338) returned 1
	[0125.023] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.025] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.025] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.026] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ab1ae70, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x9de525d0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.026] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache.dat", cAlternateFileName="")) returned 1
	[0125.026] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.026] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.026] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.026] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.026] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.026] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.026] WriteFile (in: hFile=0x2fc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.028] CloseHandle (hObject=0x2fc) returned 1
	[0125.028] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270)) returned 1
	[0125.029] SetEvent (hEvent=0x30c) returned 1
	[0125.029] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5)) returned 1
	[0125.032] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0125.043] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0125.338] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0125.345] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0125.352] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0125.361] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0125.368] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0125.376] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0125.380] SetEvent (hEvent=0x30c) returned 1
	[0125.380] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0125.385] SetEvent (hEvent=0x70) returned 1
	[0125.385] SetEvent (hEvent=0x318) returned 1
	[0125.385] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0125.386] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0125.386] SetEvent (hEvent=0x318) returned 1
	[0125.386] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0125.388] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0125.540] SetEvent (hEvent=0x68) returned 1
	[0125.540] SetEvent (hEvent=0x70) returned 1
	[0125.540] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0128.851] SetEvent (hEvent=0x70) returned 1
	[0128.851] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0128.931] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0128.963] SetEvent (hEvent=0x318) returned 1
	[0128.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b)) returned 1
	[0128.964] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0128.985] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0129.046] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0129.243] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0129.267] SetEvent (hEvent=0x2e8) returned 1
	[0129.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0129.267] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d44890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e260 | out: pbBuffer=0x1252e260) returned 1
	[0129.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788108 | out: pbBuffer=0x12788108) returned 1
	[0129.268] ReadFile (in: hFile=0x2cc, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1277dd1c*=0x0, lpOverlapped=0x0) returned 1
	[0129.268] CloseHandle (hObject=0x2cc) returned 1
	[0129.268] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0129.339] SetEvent (hEvent=0x318) returned 1
	[0129.339] SetEvent (hEvent=0x2e8) returned 1
	[0129.339] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0129.341] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0129.554] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0129.558] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0129.927] SetEvent (hEvent=0x2e8) returned 1
	[0129.927] SetEvent (hEvent=0x2e4) returned 1
	[0129.927] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.046] SetEvent (hEvent=0x30c) returned 1
	[0130.046] SetEvent (hEvent=0x2e4) returned 1
	[0130.047] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.683] SetEvent (hEvent=0x2e4) returned 1
	[0130.683] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.685] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.693] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.713] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.726] SetEvent (hEvent=0x2e4) returned 1
	[0130.726] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.727] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a33)) returned 1
	[0130.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c8e0 | out: pbBuffer=0x1244c8e0) returned 1
	[0130.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0130.727] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x1242bd1c*=0x1a33, lpOverlapped=0x0) returned 1
	[0130.733] GetFileType (hFile=0x33c) returned 0x1
	[0130.733] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.733] WriteFile (in: hFile=0x33c, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x1a33, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x1242bd00*=0x1a33, lpOverlapped=0x1242bd0c) returned 1
	[0130.733] GetFileType (hFile=0x33c) returned 0x1
	[0130.733] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1a33, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.733] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0130.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0130.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0130.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410598 | out: pbBuffer=0x12410598) returned 1
	[0130.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0130.734] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.734] WriteFile (in: hFile=0x328, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.734] CloseHandle (hObject=0x328) returned 1
	[0130.735] CloseHandle (hObject=0x33c) returned 1
	[0130.735] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.736] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.779] SetEvent (hEvent=0x70) returned 1
	[0130.779] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.780] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1
	[0130.780] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb00 | out: pbBuffer=0x1244cb00) returned 1
	[0130.780] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0130.780] ReadFile (in: hFile=0x340, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1242bd1c*=0x109, lpOverlapped=0x0) returned 1
	[0130.781] GetFileType (hFile=0x340) returned 0x1
	[0130.782] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.782] WriteFile (in: hFile=0x340, lpBuffer=0x1271e480*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1271e480*, lpNumberOfBytesWritten=0x1242bd00*=0x109, lpOverlapped=0x1242bd0c) returned 1
	[0130.782] GetFileType (hFile=0x340) returned 0x1
	[0130.782] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.782] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0130.782] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0130.782] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0130.783] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106b8 | out: pbBuffer=0x124106b8) returned 1
	[0130.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.783] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.783] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.783] CloseHandle (hObject=0x33c) returned 1
	[0130.783] CloseHandle (hObject=0x340) returned 1
	[0130.783] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.784] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1
	[0130.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd20 | out: pbBuffer=0x1244cd20) returned 1
	[0130.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106e0 | out: pbBuffer=0x124106e0) returned 1
	[0130.785] ReadFile (in: hFile=0x340, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f5d1c*=0x103, lpOverlapped=0x0) returned 1
	[0130.786] GetFileType (hFile=0x340) returned 0x1
	[0130.786] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.786] WriteFile (in: hFile=0x340, lpBuffer=0x1271f320*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1271f320*, lpNumberOfBytesWritten=0x124f5d00*=0x103, lpOverlapped=0x124f5d0c) returned 1
	[0130.786] GetFileType (hFile=0x340) returned 0x1
	[0130.786] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0130.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0130.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0130.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107c8 | out: pbBuffer=0x124107c8) returned 1
	[0130.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.787] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.787] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.788] CloseHandle (hObject=0x33c) returned 1
	[0130.788] CloseHandle (hObject=0x340) returned 1
	[0130.788] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.789] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.800] SetEvent (hEvent=0x2e4) returned 1
	[0130.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.800] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1
	[0130.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cf40 | out: pbBuffer=0x1244cf40) returned 1
	[0130.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124107f0 | out: pbBuffer=0x124107f0) returned 1
	[0130.801] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0130.802] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0130.802] SetEvent (hEvent=0xa0) returned 1
	[0130.802] SetEvent (hEvent=0x2e4) returned 1
	[0130.803] ReadFile (in: hFile=0x340, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f5d1c*=0x100, lpOverlapped=0x0) returned 1
	[0130.804] GetFileType (hFile=0x340) returned 0x1
	[0130.804] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.804] WriteFile (in: hFile=0x340, lpBuffer=0x12774000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12774000*, lpNumberOfBytesWritten=0x124f5d00*=0x100, lpOverlapped=0x124f5d0c) returned 1
	[0130.807] GetFileType (hFile=0x340) returned 0x1
	[0130.807] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec501 | out: pbBuffer=0x124ec501) returned 1
	[0130.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec601 | out: pbBuffer=0x124ec601) returned 1
	[0130.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0130.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ecf0 | out: pbBuffer=0x1251ecf0) returned 1
	[0130.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.808] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.808] WriteFile (in: hFile=0x33c, lpBuffer=0x128ce000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x128ce000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.853] CloseHandle (hObject=0x33c) returned 1
	[0130.853] CloseHandle (hObject=0x340) returned 1
	[0130.856] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.865] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.872] SetEvent (hEvent=0x318) returned 1
	[0130.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.872] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1
	[0130.872] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0130.872] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788020 | out: pbBuffer=0x12788020) returned 1
	[0130.873] ReadFile (in: hFile=0x340, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f3d1c*=0xf9, lpOverlapped=0x0) returned 1
	[0130.874] GetFileType (hFile=0x340) returned 0x1
	[0130.874] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.874] WriteFile (in: hFile=0x340, lpBuffer=0x128c7300*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x128c7300*, lpNumberOfBytesWritten=0x124f3d00*=0xf9, lpOverlapped=0x124f3d0c) returned 1
	[0130.876] GetFileType (hFile=0x340) returned 0x1
	[0130.876] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0130.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0130.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0130.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0130.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.877] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.878] WriteFile (in: hFile=0x338, lpBuffer=0x128ce500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x128ce500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.880] CloseHandle (hObject=0x338) returned 1
	[0130.881] CloseHandle (hObject=0x340) returned 1
	[0130.882] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.890] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.895] SetEvent (hEvent=0x318) returned 1
	[0130.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.895] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1
	[0130.896] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6c0 | out: pbBuffer=0x1244c6c0) returned 1
	[0130.896] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f0 | out: pbBuffer=0x127880f0) returned 1
	[0130.896] ReadFile (in: hFile=0x2fc, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f5d1c*=0x103, lpOverlapped=0x0) returned 1
	[0130.898] GetFileType (hFile=0x2fc) returned 0x1
	[0130.898] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.898] WriteFile (in: hFile=0x2fc, lpBuffer=0x12618d80*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12618d80*, lpNumberOfBytesWritten=0x124f5d00*=0x103, lpOverlapped=0x124f5d0c) returned 1
	[0130.900] GetFileType (hFile=0x2fc) returned 0x1
	[0130.900] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x103, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.900] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0130.900] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0130.900] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0130.901] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a8 | out: pbBuffer=0x127881a8) returned 1
	[0130.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.901] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.901] WriteFile (in: hFile=0x338, lpBuffer=0x128cea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x128cea00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.935] CloseHandle (hObject=0x338) returned 1
	[0130.935] CloseHandle (hObject=0x2fc) returned 1
	[0130.936] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.945] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.949] SetEvent (hEvent=0x318) returned 1
	[0130.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.950] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1
	[0130.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0130.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410430 | out: pbBuffer=0x12410430) returned 1
	[0130.950] ReadFile (in: hFile=0x340, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0xfb, lpOverlapped=0x0) returned 1
	[0130.952] GetFileType (hFile=0x340) returned 0x1
	[0130.952] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.952] WriteFile (in: hFile=0x340, lpBuffer=0x12526000*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12526000*, lpNumberOfBytesWritten=0x124f3d00*=0xfb, lpOverlapped=0x124f3d0c) returned 1
	[0130.954] GetFileType (hFile=0x340) returned 0x1
	[0130.954] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xfb, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec101 | out: pbBuffer=0x124ec101) returned 1
	[0130.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0130.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0130.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410508 | out: pbBuffer=0x12410508) returned 1
	[0130.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.955] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.955] WriteFile (in: hFile=0x338, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.958] CloseHandle (hObject=0x338) returned 1
	[0130.958] CloseHandle (hObject=0x340) returned 1
	[0130.959] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.967] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.975] SetEvent (hEvent=0x318) returned 1
	[0130.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.975] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1
	[0130.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eac0 | out: pbBuffer=0x1240eac0) returned 1
	[0130.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410540 | out: pbBuffer=0x12410540) returned 1
	[0130.976] ReadFile (in: hFile=0x2fc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x101, lpOverlapped=0x0) returned 1
	[0130.977] GetFileType (hFile=0x2fc) returned 0x1
	[0130.977] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.977] WriteFile (in: hFile=0x2fc, lpBuffer=0x12741c20*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12741c20*, lpNumberOfBytesWritten=0x124f5d00*=0x101, lpOverlapped=0x124f5d0c) returned 1
	[0130.980] GetFileType (hFile=0x2fc) returned 0x1
	[0130.980] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x101, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0130.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0130.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0130.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410628 | out: pbBuffer=0x12410628) returned 1
	[0130.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.981] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.981] WriteFile (in: hFile=0x340, lpBuffer=0x127ce500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ce500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.984] CloseHandle (hObject=0x340) returned 1
	[0130.984] CloseHandle (hObject=0x2fc) returned 1
	[0130.985] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.991] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0130.998] SetEvent (hEvent=0x318) returned 1
	[0130.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.998] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1
	[0130.998] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240efa0 | out: pbBuffer=0x1240efa0) returned 1
	[0130.998] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410640 | out: pbBuffer=0x12410640) returned 1
	[0130.998] ReadFile (in: hFile=0x338, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f3d1c*=0xfc, lpOverlapped=0x0) returned 1
	[0131.000] GetFileType (hFile=0x338) returned 0x1
	[0131.000] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.000] WriteFile (in: hFile=0x338, lpBuffer=0x125dc100*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125dc100*, lpNumberOfBytesWritten=0x124f3d00*=0xfc, lpOverlapped=0x124f3d0c) returned 1
	[0131.002] GetFileType (hFile=0x338) returned 0x1
	[0131.002] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0131.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0131.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0131.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410748 | out: pbBuffer=0x12410748) returned 1
	[0131.003] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0131.003] SetEvent (hEvent=0x318) returned 1
	[0131.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.004] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.004] WriteFile (in: hFile=0x2fc, lpBuffer=0x127cea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127cea00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.008] CloseHandle (hObject=0x2fc) returned 1
	[0131.008] CloseHandle (hObject=0x338) returned 1
	[0131.010] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.018] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.024] SetEvent (hEvent=0x68) returned 1
	[0131.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.024] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159)) returned 1
	[0131.024] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0131.024] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e010 | out: pbBuffer=0x1251e010) returned 1
	[0131.024] ReadFile (in: hFile=0x340, lpBuffer=0x1289e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x1289e000*, lpNumberOfBytesRead=0x12605d1c*=0x159, lpOverlapped=0x0) returned 1
	[0131.026] GetFileType (hFile=0x340) returned 0x1
	[0131.026] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.026] WriteFile (in: hFile=0x340, lpBuffer=0x12606000*, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x12606000*, lpNumberOfBytesWritten=0x12605d00*=0x159, lpOverlapped=0x12605d0c) returned 1
	[0131.028] GetFileType (hFile=0x340) returned 0x1
	[0131.028] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x159, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.028] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec101 | out: pbBuffer=0x124ec101) returned 1
	[0131.028] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0131.029] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0131.029] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e9e8 | out: pbBuffer=0x1251e9e8) returned 1
	[0131.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.029] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.029] WriteFile (in: hFile=0x2fc, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.031] CloseHandle (hObject=0x2fc) returned 1
	[0131.031] CloseHandle (hObject=0x340) returned 1
	[0131.033] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.041] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.045] SetEvent (hEvent=0x68) returned 1
	[0131.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.046] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0131.046] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e260 | out: pbBuffer=0x1252e260) returned 1
	[0131.046] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ea10 | out: pbBuffer=0x1251ea10) returned 1
	[0131.046] ReadFile (in: hFile=0x338, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f3d1c*=0x108, lpOverlapped=0x0) returned 1
	[0131.048] GetFileType (hFile=0x338) returned 0x1
	[0131.048] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.048] WriteFile (in: hFile=0x338, lpBuffer=0x1261ed80*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1261ed80*, lpNumberOfBytesWritten=0x124f3d00*=0x108, lpOverlapped=0x124f3d0c) returned 1
	[0131.050] GetFileType (hFile=0x338) returned 0x1
	[0131.050] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.050] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0131.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0131.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0131.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251eb18 | out: pbBuffer=0x1251eb18) returned 1
	[0131.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.051] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.051] WriteFile (in: hFile=0x2fc, lpBuffer=0x127ce500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ce500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.055] CloseHandle (hObject=0x2fc) returned 1
	[0131.055] CloseHandle (hObject=0x338) returned 1
	[0131.056] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.064] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.070] SetEvent (hEvent=0x68) returned 1
	[0131.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.070] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1
	[0131.070] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4a0 | out: pbBuffer=0x1252e4a0) returned 1
	[0131.070] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251eb30 | out: pbBuffer=0x1251eb30) returned 1
	[0131.070] ReadFile (in: hFile=0x340, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12605d1c*=0x102, lpOverlapped=0x0) returned 1
	[0131.072] GetFileType (hFile=0x340) returned 0x1
	[0131.072] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.072] WriteFile (in: hFile=0x340, lpBuffer=0x1261fc20*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x1261fc20*, lpNumberOfBytesWritten=0x12605d00*=0x102, lpOverlapped=0x12605d0c) returned 1
	[0131.074] GetFileType (hFile=0x340) returned 0x1
	[0131.074] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x102, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.074] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0131.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0131.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0131.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ebe8 | out: pbBuffer=0x1251ebe8) returned 1
	[0131.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.075] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.075] WriteFile (in: hFile=0x2fc, lpBuffer=0x127cef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x127cef00*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.078] CloseHandle (hObject=0x2fc) returned 1
	[0131.078] CloseHandle (hObject=0x340) returned 1
	[0131.079] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.087] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.092] SetEvent (hEvent=0x68) returned 1
	[0131.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.093] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0131.093] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6c0 | out: pbBuffer=0x1252e6c0) returned 1
	[0131.093] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ec10 | out: pbBuffer=0x1251ec10) returned 1
	[0131.093] ReadFile (in: hFile=0x338, lpBuffer=0x128c6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x128c6000*, lpNumberOfBytesRead=0x124f3d1c*=0x119, lpOverlapped=0x0) returned 1
	[0131.095] GetFileType (hFile=0x338) returned 0x1
	[0131.095] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.095] WriteFile (in: hFile=0x338, lpBuffer=0x1245eb40*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1245eb40*, lpNumberOfBytesWritten=0x124f3d00*=0x119, lpOverlapped=0x124f3d0c) returned 1
	[0131.097] GetFileType (hFile=0x338) returned 0x1
	[0131.097] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x119, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.097] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0131.097] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0131.097] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0131.097] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ecc8 | out: pbBuffer=0x1251ecc8) returned 1
	[0131.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.097] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.098] WriteFile (in: hFile=0x2fc, lpBuffer=0x127cf400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127cf400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.100] CloseHandle (hObject=0x2fc) returned 1
	[0131.100] CloseHandle (hObject=0x338) returned 1
	[0131.103] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.112] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.116] SetEvent (hEvent=0x68) returned 1
	[0131.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.117] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1
	[0131.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8e0 | out: pbBuffer=0x1252e8e0) returned 1
	[0131.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ecf0 | out: pbBuffer=0x1251ecf0) returned 1
	[0131.117] ReadFile (in: hFile=0x340, lpBuffer=0x12946000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x12946000*, lpNumberOfBytesRead=0x12605d1c*=0x102, lpOverlapped=0x0) returned 1
	[0131.118] GetFileType (hFile=0x340) returned 0x1
	[0131.118] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.118] WriteFile (in: hFile=0x340, lpBuffer=0x1245f9e0*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x1245f9e0*, lpNumberOfBytesWritten=0x12605d00*=0x102, lpOverlapped=0x12605d0c) returned 1
	[0131.120] GetFileType (hFile=0x340) returned 0x1
	[0131.120] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x102, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.120] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0131.121] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0131.121] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0131.121] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251edf8 | out: pbBuffer=0x1251edf8) returned 1
	[0131.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.121] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.121] WriteFile (in: hFile=0x2fc, lpBuffer=0x127cf900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x127cf900*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.123] CloseHandle (hObject=0x2fc) returned 1
	[0131.124] CloseHandle (hObject=0x340) returned 1
	[0131.125] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.133] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.136] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.143] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.164] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.173] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.185] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.195] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.206] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.216] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.229] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.238] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.289] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.306] SetEvent (hEvent=0x68) returned 1
	[0131.306] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.310] SetEvent (hEvent=0x318) returned 1
	[0131.310] SetEvent (hEvent=0x2e8) returned 1
	[0131.310] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.313] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.313] SetEvent (hEvent=0x318) returned 1
	[0131.313] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.315] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.324] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.330] SetEvent (hEvent=0x318) returned 1
	[0131.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.330] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e)) returned 1
	[0131.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c620 | out: pbBuffer=0x1244c620) returned 1
	[0131.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0131.331] ReadFile (in: hFile=0x338, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1242bd1c*=0x10e, lpOverlapped=0x0) returned 1
	[0131.332] GetFileType (hFile=0x338) returned 0x1
	[0131.332] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.332] WriteFile (in: hFile=0x338, lpBuffer=0x1273a000*, nNumberOfBytesToWrite=0x10e, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1273a000*, lpNumberOfBytesWritten=0x1242bd00*=0x10e, lpOverlapped=0x1242bd0c) returned 1
	[0131.334] GetFileType (hFile=0x338) returned 0x1
	[0131.334] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x10e, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0131.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0131.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0131.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0131.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.335] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.335] WriteFile (in: hFile=0x2fc, lpBuffer=0x12728500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12728500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.337] CloseHandle (hObject=0x2fc) returned 1
	[0131.338] CloseHandle (hObject=0x338) returned 1
	[0131.339] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\tr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.347] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.353] SetEvent (hEvent=0x318) returned 1
	[0131.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.353] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x117)) returned 1
	[0131.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c8c0 | out: pbBuffer=0x1244c8c0) returned 1
	[0131.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0131.353] ReadFile (in: hFile=0x340, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x12605d1c*=0x117, lpOverlapped=0x0) returned 1
	[0131.355] GetFileType (hFile=0x340) returned 0x1
	[0131.355] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.355] WriteFile (in: hFile=0x340, lpBuffer=0x1273aea0*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x1273aea0*, lpNumberOfBytesWritten=0x12605d00*=0x117, lpOverlapped=0x12605d0c) returned 1
	[0131.357] GetFileType (hFile=0x340) returned 0x1
	[0131.357] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x117, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0131.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0131.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0131.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0131.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.358] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.358] WriteFile (in: hFile=0x2fc, lpBuffer=0x12728a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x12728a00*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.360] CloseHandle (hObject=0x2fc) returned 1
	[0131.361] CloseHandle (hObject=0x340) returned 1
	[0131.363] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\vi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.372] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.420] SetEvent (hEvent=0x318) returned 1
	[0131.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.421] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10b)) returned 1
	[0131.421] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cae0 | out: pbBuffer=0x1244cae0) returned 1
	[0131.421] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0131.421] ReadFile (in: hFile=0x338, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x1242bd1c*=0x10b, lpOverlapped=0x0) returned 1
	[0131.422] GetFileType (hFile=0x338) returned 0x1
	[0131.422] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.423] WriteFile (in: hFile=0x338, lpBuffer=0x1273bd40*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1273bd40*, lpNumberOfBytesWritten=0x1242bd00*=0x10b, lpOverlapped=0x1242bd0c) returned 1
	[0131.425] GetFileType (hFile=0x338) returned 0x1
	[0131.425] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x10b, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.425] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0131.425] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0131.425] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0131.425] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0131.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.426] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.426] WriteFile (in: hFile=0x2fc, lpBuffer=0x12728f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12728f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.428] CloseHandle (hObject=0x2fc) returned 1
	[0131.428] CloseHandle (hObject=0x338) returned 1
	[0131.430] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_TW\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\zh_tw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.441] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0131.442] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0134.583] SetEvent (hEvent=0x2f4) returned 1
	[0134.583] SetEvent (hEvent=0x70) returned 1
	[0134.583] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0134.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.695] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x12721ad0 | out: lpFileInformation=0x12721ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x862fc2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1
	[0134.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0134.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0134.695] ReadFile (in: hFile=0x2cc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12721d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12721d1c*=0x1378, lpOverlapped=0x0) returned 1
	[0134.698] GetFileType (hFile=0x2cc) returned 0x1
	[0134.698] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.698] WriteFile (in: hFile=0x2cc, lpBuffer=0x1250d500*, nNumberOfBytesToWrite=0x1378, lpNumberOfBytesWritten=0x12721d00, lpOverlapped=0x12721d0c | out: lpBuffer=0x1250d500*, lpNumberOfBytesWritten=0x12721d00*=0x1378, lpOverlapped=0x12721d0c) returned 1
	[0134.698] GetFileType (hFile=0x2cc) returned 0x1
	[0134.698] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x1378, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0134.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0134.699] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0134.699] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0134.699] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.699] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.699] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12721d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12721d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.699] CloseHandle (hObject=0x344) returned 1
	[0134.699] CloseHandle (hObject=0x2cc) returned 1
	[0134.700] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\128.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.701] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0134.731] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0134.748] SetEvent (hEvent=0x320) returned 1
	[0134.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.750] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.750] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.750] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.750] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.750] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.751] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.752] WriteFile (in: hFile=0x33c, lpBuffer=0x12762000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12762000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.753] CloseHandle (hObject=0x33c) returned 1
	[0134.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114)) returned 1
	[0134.755] SetEvent (hEvent=0x320) returned 1
	[0134.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.756] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.756] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfaef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85dfaef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.756] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.756] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.756] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.758] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.758] WriteFile (in: hFile=0x33c, lpBuffer=0x12763300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12763300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.759] CloseHandle (hObject=0x33c) returned 1
	[0134.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b)) returned 1
	[0134.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.760] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12721ad0 | out: lpFileInformation=0x12721ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x114)) returned 1
	[0134.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0134.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410588 | out: pbBuffer=0x12410588) returned 1
	[0134.761] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0134.761] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0134.761] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0134.762] SetEvent (hEvent=0xa0) returned 1
	[0134.762] SetEvent (hEvent=0x320) returned 1
	[0134.762] ReadFile (in: hFile=0x33c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12721d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12721d1c*=0x114, lpOverlapped=0x0) returned 1
	[0134.764] GetFileType (hFile=0x33c) returned 0x1
	[0134.764] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.764] WriteFile (in: hFile=0x33c, lpBuffer=0x128bcfc0*, nNumberOfBytesToWrite=0x114, lpNumberOfBytesWritten=0x12721d00, lpOverlapped=0x12721d0c | out: lpBuffer=0x128bcfc0*, lpNumberOfBytesWritten=0x12721d00*=0x114, lpOverlapped=0x12721d0c) returned 1
	[0134.764] GetFileType (hFile=0x33c) returned 0x1
	[0134.764] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x114, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.764] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0134.764] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0134.764] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0134.765] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410670 | out: pbBuffer=0x12410670) returned 1
	[0134.765] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.765] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.765] WriteFile (in: hFile=0x344, lpBuffer=0x1277aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12721d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277aa00*, lpNumberOfBytesWritten=0x12721d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.765] CloseHandle (hObject=0x344) returned 1
	[0134.765] CloseHandle (hObject=0x33c) returned 1
	[0134.765] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bg\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.767] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12721ad0 | out: lpFileInformation=0x12721ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dfaef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85dfbe90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14b)) returned 1
	[0134.767] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0134.767] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106b8 | out: pbBuffer=0x124106b8) returned 1
	[0134.767] ReadFile (in: hFile=0x33c, lpBuffer=0x128e2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12721d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e2000*, lpNumberOfBytesRead=0x12721d1c*=0x14b, lpOverlapped=0x0) returned 1
	[0134.768] GetFileType (hFile=0x33c) returned 0x1
	[0134.768] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.768] WriteFile (in: hFile=0x33c, lpBuffer=0x1247c580*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x12721d00, lpOverlapped=0x12721d0c | out: lpBuffer=0x1247c580*, lpNumberOfBytesWritten=0x12721d00*=0x14b, lpOverlapped=0x12721d0c) returned 1
	[0134.768] GetFileType (hFile=0x33c) returned 0x1
	[0134.768] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x14b, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.768] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0134.769] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0134.769] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0134.769] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107b0 | out: pbBuffer=0x124107b0) returned 1
	[0134.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.769] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.769] WriteFile (in: hFile=0x344, lpBuffer=0x1277af00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12721d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277af00*, lpNumberOfBytesWritten=0x12721d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.769] CloseHandle (hObject=0x344) returned 1
	[0134.769] CloseHandle (hObject=0x33c) returned 1
	[0134.769] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\bn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.770] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0134.771] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0134.772] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0134.772] SetEvent (hEvent=0x70) returned 1
	[0134.772] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0134.787] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0134.892] SetEvent (hEvent=0x68) returned 1
	[0134.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.893] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1
	[0134.893] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0134.893] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0134.893] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0134.896] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0134.896] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0134.896] SetEvent (hEvent=0xa0) returned 1
	[0134.896] SetEvent (hEvent=0x68) returned 1
	[0134.896] ReadFile (in: hFile=0x33c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f5d1c*=0xe3, lpOverlapped=0x0) returned 1
	[0134.898] GetFileType (hFile=0x33c) returned 0x1
	[0134.898] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.898] WriteFile (in: hFile=0x33c, lpBuffer=0x128b8000*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x128b8000*, lpNumberOfBytesWritten=0x124f5d00*=0xe3, lpOverlapped=0x124f5d0c) returned 1
	[0134.906] GetFileType (hFile=0x33c) returned 0x1
	[0134.906] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xe3, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0134.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0134.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0134.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0134.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.907] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.907] WriteFile (in: hFile=0x2cc, lpBuffer=0x12982000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12982000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.907] CloseHandle (hObject=0x2cc) returned 1
	[0134.907] CloseHandle (hObject=0x33c) returned 1
	[0134.908] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es_419\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.910] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0134.912] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0134.912] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0134.912] SetEvent (hEvent=0x70) returned 1
	[0134.912] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0134.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.914] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1
	[0134.914] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0134.914] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0134.915] ReadFile (in: hFile=0x340, lpBuffer=0x128be000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128be000*, lpNumberOfBytesRead=0x124f5d1c*=0xd4, lpOverlapped=0x0) returned 1
	[0134.917] GetFileType (hFile=0x340) returned 0x1
	[0134.917] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.917] WriteFile (in: hFile=0x340, lpBuffer=0x12614000*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12614000*, lpNumberOfBytesWritten=0x124f5d00*=0xd4, lpOverlapped=0x124f5d0c) returned 1
	[0134.917] GetFileType (hFile=0x340) returned 0x1
	[0134.917] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xd4, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.918] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0134.918] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0134.918] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0134.918] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744670 | out: pbBuffer=0x12744670) returned 1
	[0134.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0134.918] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.918] WriteFile (in: hFile=0x32c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.919] CloseHandle (hObject=0x32c) returned 1
	[0134.919] CloseHandle (hObject=0x340) returned 1
	[0134.919] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\et\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.920] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0134.952] SetEvent (hEvent=0x2f4) returned 1
	[0134.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.952] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0134.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb7)) returned 1
	[0134.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0134.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744688 | out: pbBuffer=0x12744688) returned 1
	[0134.953] ReadFile (in: hFile=0x340, lpBuffer=0x1291e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1291e000*, lpNumberOfBytesRead=0x12429d1c*=0xb7, lpOverlapped=0x0) returned 1
	[0134.954] GetFileType (hFile=0x340) returned 0x1
	[0134.954] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.954] WriteFile (in: hFile=0x340, lpBuffer=0x127dc180*, nNumberOfBytesToWrite=0xb7, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127dc180*, lpNumberOfBytesWritten=0x12429d00*=0xb7, lpOverlapped=0x12429d0c) returned 1
	[0134.955] GetFileType (hFile=0x340) returned 0x1
	[0134.955] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xb7, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0134.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0134.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0134.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744970 | out: pbBuffer=0x12744970) returned 1
	[0134.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0134.956] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0134.956] WriteFile (in: hFile=0x32c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.956] CloseHandle (hObject=0x32c) returned 1
	[0134.956] CloseHandle (hObject=0x340) returned 1
	[0134.956] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.958] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc7)) returned 1
	[0134.958] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0134.958] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744988 | out: pbBuffer=0x12744988) returned 1
	[0134.958] ReadFile (in: hFile=0x340, lpBuffer=0x1295e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1295e000*, lpNumberOfBytesRead=0x124f5d1c*=0xc7, lpOverlapped=0x0) returned 1
	[0134.960] GetFileType (hFile=0x340) returned 0x1
	[0134.960] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.960] WriteFile (in: hFile=0x340, lpBuffer=0x12784000*, nNumberOfBytesToWrite=0xc7, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12784000*, lpNumberOfBytesWritten=0x124f5d00*=0xc7, lpOverlapped=0x124f5d0c) returned 1
	[0134.961] GetFileType (hFile=0x340) returned 0x1
	[0134.961] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xc7, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.961] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0134.961] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0134.961] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0134.961] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744a40 | out: pbBuffer=0x12744a40) returned 1
	[0134.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0134.962] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.962] WriteFile (in: hFile=0x32c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.972] CloseHandle (hObject=0x32c) returned 1
	[0134.972] CloseHandle (hObject=0x340) returned 1
	[0134.973] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fil\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.974] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0134.985] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.020] SetEvent (hEvent=0x68) returned 1
	[0135.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.020] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1
	[0135.020] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0135.021] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744a58 | out: pbBuffer=0x12744a58) returned 1
	[0135.021] ReadFile (in: hFile=0x340, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f5d1c*=0x13e, lpOverlapped=0x0) returned 1
	[0135.022] GetFileType (hFile=0x340) returned 0x1
	[0135.022] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.022] WriteFile (in: hFile=0x340, lpBuffer=0x1244b180*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1244b180*, lpNumberOfBytesWritten=0x124f5d00*=0x13e, lpOverlapped=0x124f5d0c) returned 1
	[0135.022] GetFileType (hFile=0x340) returned 0x1
	[0135.022] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x13e, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0135.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0135.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0135.023] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744b10 | out: pbBuffer=0x12744b10) returned 1
	[0135.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.023] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.023] WriteFile (in: hFile=0x32c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.023] CloseHandle (hObject=0x32c) returned 1
	[0135.023] CloseHandle (hObject=0x340) returned 1
	[0135.023] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.025] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0135.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1271fad0 | out: lpFileInformation=0x1271fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8)) returned 1
	[0135.025] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8c0 | out: pbBuffer=0x1252e8c0) returned 1
	[0135.025] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744b28 | out: pbBuffer=0x12744b28) returned 1
	[0135.025] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0135.026] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.026] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0135.026] SetEvent (hEvent=0xa0) returned 1
	[0135.026] SetEvent (hEvent=0x68) returned 1
	[0135.027] ReadFile (in: hFile=0x340, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1271fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1271fd1c*=0xc8, lpOverlapped=0x0) returned 1
	[0135.028] GetFileType (hFile=0x340) returned 0x1
	[0135.028] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.028] WriteFile (in: hFile=0x340, lpBuffer=0x127840d0*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0x1271fd00, lpOverlapped=0x1271fd0c | out: lpBuffer=0x127840d0*, lpNumberOfBytesWritten=0x1271fd00*=0xc8, lpOverlapped=0x1271fd0c) returned 1
	[0135.028] GetFileType (hFile=0x340) returned 0x1
	[0135.028] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xc8, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.028] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0135.028] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0135.029] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0135.029] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744be0 | out: pbBuffer=0x12744be0) returned 1
	[0135.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.029] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0135.029] WriteFile (in: hFile=0x32c, lpBuffer=0x12774000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1271fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12774000*, lpNumberOfBytesWritten=0x1271fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.029] CloseHandle (hObject=0x32c) returned 1
	[0135.029] CloseHandle (hObject=0x340) returned 1
	[0135.029] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.030] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0135.031] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0135.031] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0135.031] SetEvent (hEvent=0x70) returned 1
	[0135.031] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0135.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.038] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e95b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e95b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1
	[0135.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0135.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0135.039] ReadFile (in: hFile=0x340, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x1242bd1c*=0xc6, lpOverlapped=0x0) returned 1
	[0135.041] GetFileType (hFile=0x340) returned 0x1
	[0135.041] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.041] WriteFile (in: hFile=0x340, lpBuffer=0x12784000*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12784000*, lpNumberOfBytesWritten=0x1242bd00*=0xc6, lpOverlapped=0x1242bd0c) returned 1
	[0135.041] GetFileType (hFile=0x340) returned 0x1
	[0135.041] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xc6, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0135.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0135.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0135.042] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0135.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.042] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.042] WriteFile (in: hFile=0x32c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.042] CloseHandle (hObject=0x32c) returned 1
	[0135.042] CloseHandle (hObject=0x340) returned 1
	[0135.042] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.043] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x299)) returned 1
	[0135.043] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0135.043] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0135.044] ReadFile (in: hFile=0x340, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x299, lpOverlapped=0x0) returned 1
	[0135.053] GetFileType (hFile=0x340) returned 0x1
	[0135.053] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.053] WriteFile (in: hFile=0x340, lpBuffer=0x125fa2c0*, nNumberOfBytesToWrite=0x299, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125fa2c0*, lpNumberOfBytesWritten=0x12429d00*=0x299, lpOverlapped=0x12429d0c) returned 1
	[0135.053] GetFileType (hFile=0x340) returned 0x1
	[0135.053] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x299, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.053] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0135.053] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0135.053] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0135.053] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0135.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.054] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.054] WriteFile (in: hFile=0x32c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.054] CloseHandle (hObject=0x32c) returned 1
	[0135.054] CloseHandle (hObject=0x340) returned 1
	[0135.054] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\hy\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.055] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.055] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1
	[0135.055] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0135.055] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0135.055] ReadFile (in: hFile=0x340, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f1d1c*=0xbb, lpOverlapped=0x0) returned 1
	[0135.056] GetFileType (hFile=0x340) returned 0x1
	[0135.056] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.057] WriteFile (in: hFile=0x340, lpBuffer=0x127dc180*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127dc180*, lpNumberOfBytesWritten=0x124f1d00*=0xbb, lpOverlapped=0x124f1d0c) returned 1
	[0135.057] GetFileType (hFile=0x340) returned 0x1
	[0135.057] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xbb, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.057] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0135.057] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0135.057] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0135.057] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0135.057] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.057] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.057] WriteFile (in: hFile=0x32c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.058] CloseHandle (hObject=0x32c) returned 1
	[0135.058] CloseHandle (hObject=0x340) returned 1
	[0135.058] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\id\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.059] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1
	[0135.059] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732760 | out: pbBuffer=0x12732760) returned 1
	[0135.059] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0135.060] ReadFile (in: hFile=0x340, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f3d1c*=0xb2, lpOverlapped=0x0) returned 1
	[0135.061] GetFileType (hFile=0x340) returned 0x1
	[0135.061] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.061] WriteFile (in: hFile=0x340, lpBuffer=0x127dc300*, nNumberOfBytesToWrite=0xb2, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127dc300*, lpNumberOfBytesWritten=0x124f3d00*=0xb2, lpOverlapped=0x124f3d0c) returned 1
	[0135.061] GetFileType (hFile=0x340) returned 0x1
	[0135.061] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xb2, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.061] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0135.061] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0135.062] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0135.062] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106e0 | out: pbBuffer=0x124106e0) returned 1
	[0135.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.062] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.062] WriteFile (in: hFile=0x32c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.062] CloseHandle (hObject=0x32c) returned 1
	[0135.062] CloseHandle (hObject=0x340) returned 1
	[0135.062] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\is\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.063] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.067] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.075] SetEvent (hEvent=0x68) returned 1
	[0135.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.075] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1
	[0135.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732980 | out: pbBuffer=0x12732980) returned 1
	[0135.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106f8 | out: pbBuffer=0x124106f8) returned 1
	[0135.075] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12429d1c*=0x16a, lpOverlapped=0x0) returned 1
	[0135.077] GetFileType (hFile=0x33c) returned 0x1
	[0135.077] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.077] WriteFile (in: hFile=0x33c, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x12429d00*=0x16a, lpOverlapped=0x12429d0c) returned 1
	[0135.078] GetFileType (hFile=0x33c) returned 0x1
	[0135.078] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x16a, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.078] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0135.078] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0135.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e81 | out: pbBuffer=0x127e8e81) returned 1
	[0135.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410800 | out: pbBuffer=0x12410800) returned 1
	[0135.079] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.079] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.079] WriteFile (in: hFile=0x340, lpBuffer=0x1261a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261a000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.081] CloseHandle (hObject=0x340) returned 1
	[0135.081] CloseHandle (hObject=0x33c) returned 1
	[0135.082] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\iw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.089] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.100] SetEvent (hEvent=0x68) returned 1
	[0135.100] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.101] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x165)) returned 1
	[0135.101] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732ba0 | out: pbBuffer=0x12732ba0) returned 1
	[0135.101] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410818 | out: pbBuffer=0x12410818) returned 1
	[0135.101] ReadFile (in: hFile=0x32c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0x165, lpOverlapped=0x0) returned 1
	[0135.102] GetFileType (hFile=0x32c) returned 0x1
	[0135.102] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.102] WriteFile (in: hFile=0x32c, lpBuffer=0x124f8480*, nNumberOfBytesToWrite=0x165, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124f8480*, lpNumberOfBytesWritten=0x124f3d00*=0x165, lpOverlapped=0x124f3d0c) returned 1
	[0135.104] GetFileType (hFile=0x32c) returned 0x1
	[0135.104] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x165, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8f81 | out: pbBuffer=0x127e8f81) returned 1
	[0135.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9081 | out: pbBuffer=0x127e9081) returned 1
	[0135.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9181 | out: pbBuffer=0x127e9181) returned 1
	[0135.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410960 | out: pbBuffer=0x12410960) returned 1
	[0135.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.104] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.104] WriteFile (in: hFile=0x33c, lpBuffer=0x1261a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261a500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.106] CloseHandle (hObject=0x33c) returned 1
	[0135.106] CloseHandle (hObject=0x32c) returned 1
	[0135.107] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ka\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.114] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.119] SetEvent (hEvent=0x68) returned 1
	[0135.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.120] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x147)) returned 1
	[0135.120] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732dc0 | out: pbBuffer=0x12732dc0) returned 1
	[0135.120] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410978 | out: pbBuffer=0x12410978) returned 1
	[0135.120] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0135.121] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0135.121] SetEvent (hEvent=0xa0) returned 1
	[0135.121] SetEvent (hEvent=0x68) returned 1
	[0135.121] ReadFile (in: hFile=0x33c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x12429d1c*=0x147, lpOverlapped=0x0) returned 1
	[0135.123] GetFileType (hFile=0x33c) returned 0x1
	[0135.123] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.123] WriteFile (in: hFile=0x33c, lpBuffer=0x1247c580*, nNumberOfBytesToWrite=0x147, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1247c580*, lpNumberOfBytesWritten=0x12429d00*=0x147, lpOverlapped=0x12429d0c) returned 1
	[0135.125] GetFileType (hFile=0x33c) returned 0x1
	[0135.125] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x147, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.125] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0135.125] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0135.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0135.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e9e0 | out: pbBuffer=0x1251e9e0) returned 1
	[0135.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.126] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.126] WriteFile (in: hFile=0x340, lpBuffer=0x1272c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1272c000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.126] CloseHandle (hObject=0x340) returned 1
	[0135.126] CloseHandle (hObject=0x33c) returned 1
	[0135.126] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\kn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.127] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.128] SetEvent (hEvent=0x2f4) returned 1
	[0135.128] SetEvent (hEvent=0x70) returned 1
	[0135.128] WriteFile (in: hFile=0x32c, lpBuffer=0x12625300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12625300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.129] CloseHandle (hObject=0x32c) returned 1
	[0135.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0135.131] SetEvent (hEvent=0x70) returned 1
	[0135.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.132] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.132] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.132] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.132] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.132] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.133] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.133] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.134] CloseHandle (hObject=0x32c) returned 1
	[0135.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lo\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c2)) returned 1
	[0135.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.135] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.135] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.135] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.135] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.135] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.136] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.136] WriteFile (in: hFile=0x32c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.137] CloseHandle (hObject=0x32c) returned 1
	[0135.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0135.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.149] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.149] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.149] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.149] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.149] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.150] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.150] WriteFile (in: hFile=0x32c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.152] CloseHandle (hObject=0x32c) returned 1
	[0135.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1
	[0135.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.152] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.152] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.152] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.152] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.153] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.153] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.153] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.153] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.162] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.162] WriteFile (in: hFile=0x32c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.163] CloseHandle (hObject=0x32c) returned 1
	[0135.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x183)) returned 1
	[0135.165] SetEvent (hEvent=0x70) returned 1
	[0135.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.165] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.165] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f07fa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f07fa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.165] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.165] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.165] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.165] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.166] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.166] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.191] CloseHandle (hObject=0x32c) returned 1
	[0135.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1
	[0135.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.192] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.192] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.192] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.192] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.192] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.193] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.193] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.195] CloseHandle (hObject=0x32c) returned 1
	[0135.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c)) returned 1
	[0135.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.207] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.207] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.207] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.207] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.208] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.216] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.216] WriteFile (in: hFile=0x348, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.221] CloseHandle (hObject=0x348) returned 1
	[0135.223] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1
	[0135.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.225] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.225] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2e100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f2e100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.225] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.225] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.225] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.233] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.233] WriteFile (in: hFile=0x348, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.238] SetEvent (hEvent=0xa0) returned 1
	[0135.238] CloseHandle (hObject=0x348) returned 1
	[0135.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b)) returned 1
	[0135.240] SetEvent (hEvent=0x320) returned 1
	[0135.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.245] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.245] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.245] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.245] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.245] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.249] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.249] WriteFile (in: hFile=0x348, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.252] CloseHandle (hObject=0x348) returned 1
	[0135.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb1)) returned 1
	[0135.253] SetEvent (hEvent=0x2e8) returned 1
	[0135.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.253] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.254] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.254] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.254] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.254] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.255] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.259] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.259] WriteFile (in: hFile=0x34c, lpBuffer=0x12626600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12626600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.262] CloseHandle (hObject=0x34c) returned 1
	[0135.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96)) returned 1
	[0135.264] SetEvent (hEvent=0x320) returned 1
	[0135.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.267] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.275] SetEvent (hEvent=0x320) returned 1
	[0135.276] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.338] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.356] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.366] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.409] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.418] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.427] SetEvent (hEvent=0x70) returned 1
	[0135.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.428] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1
	[0135.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0135.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0135.428] ReadFile (in: hFile=0x34c, lpBuffer=0x12938000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12938000*, lpNumberOfBytesRead=0x124f5d1c*=0x115, lpOverlapped=0x0) returned 1
	[0135.430] GetFileType (hFile=0x34c) returned 0x1
	[0135.430] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.430] WriteFile (in: hFile=0x34c, lpBuffer=0x124ac000*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124ac000*, lpNumberOfBytesWritten=0x124f5d00*=0x115, lpOverlapped=0x124f5d0c) returned 1
	[0135.430] GetFileType (hFile=0x34c) returned 0x1
	[0135.430] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.430] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0135.430] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0135.430] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0135.430] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744670 | out: pbBuffer=0x12744670) returned 1
	[0135.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.431] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.431] WriteFile (in: hFile=0x348, lpBuffer=0x12606000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12606000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.431] CloseHandle (hObject=0x348) returned 1
	[0135.431] CloseHandle (hObject=0x34c) returned 1
	[0135.431] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.432] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1
	[0135.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0135.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744698 | out: pbBuffer=0x12744698) returned 1
	[0135.433] ReadFile (in: hFile=0x34c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0x125, lpOverlapped=0x0) returned 1
	[0135.434] GetFileType (hFile=0x34c) returned 0x1
	[0135.434] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.434] WriteFile (in: hFile=0x34c, lpBuffer=0x1248c780*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1248c780*, lpNumberOfBytesWritten=0x124f3d00*=0x125, lpOverlapped=0x124f3d0c) returned 1
	[0135.434] GetFileType (hFile=0x34c) returned 0x1
	[0135.434] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x125, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.434] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0135.434] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0135.434] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0135.434] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744980 | out: pbBuffer=0x12744980) returned 1
	[0135.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.435] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.435] WriteFile (in: hFile=0x348, lpBuffer=0x12606500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12606500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.435] CloseHandle (hObject=0x348) returned 1
	[0135.435] CloseHandle (hObject=0x34c) returned 1
	[0135.435] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.436] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.459] SetEvent (hEvent=0x320) returned 1
	[0135.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.460] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177)) returned 1
	[0135.460] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0135.460] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744998 | out: pbBuffer=0x12744998) returned 1
	[0135.460] ReadFile (in: hFile=0x348, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f5d1c*=0x177, lpOverlapped=0x0) returned 1
	[0135.461] GetFileType (hFile=0x348) returned 0x1
	[0135.462] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.462] WriteFile (in: hFile=0x348, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x177, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x124f5d00*=0x177, lpOverlapped=0x124f5d0c) returned 1
	[0135.462] GetFileType (hFile=0x348) returned 0x1
	[0135.462] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x177, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0135.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0135.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0135.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744a50 | out: pbBuffer=0x12744a50) returned 1
	[0135.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.463] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.463] WriteFile (in: hFile=0x32c, lpBuffer=0x12606a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12606a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.463] CloseHandle (hObject=0x32c) returned 1
	[0135.463] CloseHandle (hObject=0x348) returned 1
	[0135.463] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.464] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0135.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0135.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744a68 | out: pbBuffer=0x12744a68) returned 1
	[0135.465] ReadFile (in: hFile=0x348, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f3d1c*=0xdd, lpOverlapped=0x0) returned 1
	[0135.466] GetFileType (hFile=0x348) returned 0x1
	[0135.466] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.467] WriteFile (in: hFile=0x348, lpBuffer=0x124b87e0*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124b87e0*, lpNumberOfBytesWritten=0x124f3d00*=0xdd, lpOverlapped=0x124f3d0c) returned 1
	[0135.467] GetFileType (hFile=0x348) returned 0x1
	[0135.467] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0xdd, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0135.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0135.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0135.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744b20 | out: pbBuffer=0x12744b20) returned 1
	[0135.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.468] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.468] WriteFile (in: hFile=0x32c, lpBuffer=0x12606f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12606f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.468] CloseHandle (hObject=0x32c) returned 1
	[0135.468] CloseHandle (hObject=0x348) returned 1
	[0135.468] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.469] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.553] SetEvent (hEvent=0x70) returned 1
	[0135.553] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.559] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.565] SetEvent (hEvent=0x70) returned 1
	[0135.565] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.566] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8636e710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf3)) returned 1
	[0135.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0135.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0135.566] ReadFile (in: hFile=0x34c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12429d1c*=0xaf3, lpOverlapped=0x0) returned 1
	[0135.571] GetFileType (hFile=0x34c) returned 0x1
	[0135.571] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.571] WriteFile (in: hFile=0x34c, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0xaf3, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x12429d00*=0xaf3, lpOverlapped=0x12429d0c) returned 1
	[0135.571] GetFileType (hFile=0x34c) returned 0x1
	[0135.571] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xaf3, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.571] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0135.572] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0135.572] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0135.572] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0135.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.572] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.572] WriteFile (in: hFile=0x32c, lpBuffer=0x12740000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12740000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.572] CloseHandle (hObject=0x32c) returned 1
	[0135.572] CloseHandle (hObject=0x34c) returned 1
	[0135.572] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.574] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.596] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103)) returned 1
	[0135.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0135.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0135.597] ReadFile (in: hFile=0x344, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1242bd1c*=0x1103, lpOverlapped=0x0) returned 1
	[0135.608] GetFileType (hFile=0x344) returned 0x1
	[0135.608] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.608] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1103, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1242bd00*=0x1103, lpOverlapped=0x1242bd0c) returned 1
	[0135.704] GetFileType (hFile=0x344) returned 0x1
	[0135.704] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1103, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0135.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0135.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0135.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0135.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.705] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.705] WriteFile (in: hFile=0x2cc, lpBuffer=0x12740500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12740500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.706] CloseHandle (hObject=0x2cc) returned 1
	[0135.707] CloseHandle (hObject=0x344) returned 1
	[0135.707] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.752] SetEvent (hEvent=0x68) returned 1
	[0135.752] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0135.754] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0135.754] SetEvent (hEvent=0x68) returned 1
	[0135.754] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0135.759] GetFileType (hFile=0x32c) returned 0x1
	[0135.759] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x127d5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.759] WriteFile (in: hFile=0x32c, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x376, lpNumberOfBytesWritten=0x127d5d00, lpOverlapped=0x127d5d0c | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x127d5d00*=0x376, lpOverlapped=0x127d5d0c) returned 1
	[0135.759] GetFileType (hFile=0x32c) returned 0x1
	[0135.759] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x376, lpNewFilePointer=0x0, dwMoveMethod=0x127d5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0135.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0135.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0135.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0135.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.760] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x127d5d0c | out: lpMode=0x127d5d0c) returned 0
	[0135.760] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x127d5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x127d5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.760] CloseHandle (hObject=0x2cc) returned 1
	[0135.760] CloseHandle (hObject=0x32c) returned 1
	[0135.760] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.761] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.796] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826c7190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x36b)) returned 1
	[0135.796] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0135.796] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0135.797] ReadFile (in: hFile=0x344, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12429d1c*=0x36b, lpOverlapped=0x0) returned 1
	[0135.813] GetFileType (hFile=0x344) returned 0x1
	[0135.813] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.813] WriteFile (in: hFile=0x344, lpBuffer=0x127d6000*, nNumberOfBytesToWrite=0x36b, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127d6000*, lpNumberOfBytesWritten=0x12429d00*=0x36b, lpOverlapped=0x12429d0c) returned 1
	[0135.814] GetFileType (hFile=0x344) returned 0x1
	[0135.814] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x36b, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.814] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0135.814] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0135.814] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0135.814] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0135.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.815] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.815] WriteFile (in: hFile=0x2cc, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.815] CloseHandle (hObject=0x2cc) returned 1
	[0135.815] CloseHandle (hObject=0x344) returned 1
	[0135.815] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\el\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.816] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.832] SetEvent (hEvent=0x68) returned 1
	[0135.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.833] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b)) returned 1
	[0135.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0135.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103f8 | out: pbBuffer=0x124103f8) returned 1
	[0135.833] ReadFile (in: hFile=0x344, lpBuffer=0x12938000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12938000*, lpNumberOfBytesRead=0x124f1d1c*=0x29b, lpOverlapped=0x0) returned 1
	[0135.840] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.845] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.846] SetEvent (hEvent=0x2e8) returned 1
	[0135.846] SetEvent (hEvent=0x68) returned 1
	[0135.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.846] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.846] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.846] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.846] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.846] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.847] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.847] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.848] CloseHandle (hObject=0x32c) returned 1
	[0135.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1)) returned 1
	[0135.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.849] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.849] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.849] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.849] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.850] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.850] WriteFile (in: hFile=0x32c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.851] CloseHandle (hObject=0x32c) returned 1
	[0135.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82717aa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b4)) returned 1
	[0135.868] SetEvent (hEvent=0x68) returned 1
	[0135.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.869] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.869] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.869] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.869] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.869] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.870] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.870] WriteFile (in: hFile=0x32c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.871] CloseHandle (hObject=0x32c) returned 1
	[0135.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4)) returned 1
	[0135.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.872] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.872] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.873] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.874] WriteFile (in: hFile=0x32c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.875] CloseHandle (hObject=0x32c) returned 1
	[0135.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad)) returned 1
	[0135.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.883] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.883] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.883] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.883] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.883] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.884] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.885] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.886] CloseHandle (hObject=0x2cc) returned 1
	[0135.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279)) returned 1
	[0135.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.887] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.887] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.887] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.887] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.887] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.888] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.888] WriteFile (in: hFile=0x2cc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.890] CloseHandle (hObject=0x2cc) returned 1
	[0135.890] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6)) returned 1
	[0135.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.898] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.899] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.899] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.899] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.900] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.900] WriteFile (in: hFile=0x34c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.901] CloseHandle (hObject=0x34c) returned 1
	[0135.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1
	[0135.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.901] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8274d600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274fd10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c6)) returned 1
	[0135.902] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0135.902] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e6c0 | out: pbBuffer=0x1251e6c0) returned 1
	[0135.902] ReadFile (in: hFile=0x34c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1242bd1c*=0x2c6, lpOverlapped=0x0) returned 1
	[0135.927] GetFileType (hFile=0x34c) returned 0x1
	[0135.927] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.927] WriteFile (in: hFile=0x34c, lpBuffer=0x125ec000*, nNumberOfBytesToWrite=0x2c6, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125ec000*, lpNumberOfBytesWritten=0x1242bd00*=0x2c6, lpOverlapped=0x1242bd0c) returned 1
	[0135.927] GetFileType (hFile=0x34c) returned 0x1
	[0135.927] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x2c6, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.928] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0135.928] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0135.928] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0135.928] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e778 | out: pbBuffer=0x1251e778) returned 1
	[0135.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.929] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.929] WriteFile (in: hFile=0x344, lpBuffer=0x12636000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12636000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.929] CloseHandle (hObject=0x344) returned 1
	[0135.929] CloseHandle (hObject=0x34c) returned 1
	[0135.929] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.932] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.960] SetEvent (hEvent=0x68) returned 1
	[0135.960] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.963] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1
	[0135.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f480 | out: pbBuffer=0x1240f480) returned 1
	[0135.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124108f0 | out: pbBuffer=0x124108f0) returned 1
	[0135.964] ReadFile (in: hFile=0x34c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f1d1c*=0x2ae, lpOverlapped=0x0) returned 1
	[0135.967] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.969] SetEvent (hEvent=0x70) returned 1
	[0135.969] GetFileType (hFile=0x34c) returned 0x1
	[0135.969] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.969] WriteFile (in: hFile=0x34c, lpBuffer=0x125ba580*, nNumberOfBytesToWrite=0x2ae, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x125ba580*, lpNumberOfBytesWritten=0x124f1d00*=0x2ae, lpOverlapped=0x124f1d0c) returned 1
	[0135.969] GetFileType (hFile=0x34c) returned 0x1
	[0135.969] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x2ae, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.969] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0135.969] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0135.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0135.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0135.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.970] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.970] WriteFile (in: hFile=0x344, lpBuffer=0x1297ef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1297ef00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.970] CloseHandle (hObject=0x344) returned 1
	[0135.970] CloseHandle (hObject=0x34c) returned 1
	[0135.971] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.972] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0135.972] SetEvent (hEvent=0x70) returned 1
	[0135.972] SetEvent (hEvent=0x68) returned 1
	[0135.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.973] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x127cfd0c | out: lpMode=0x127cfd0c) returned 0
	[0135.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127cfad0 | out: lpFileInformation=0x127cfad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d)) returned 1
	[0135.973] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0135.973] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0135.973] ReadFile (in: hFile=0x34c, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x127cfd1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x127cfd1c*=0x29d, lpOverlapped=0x0) returned 1
	[0135.982] GetFileType (hFile=0x34c) returned 0x1
	[0135.982] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x127cfce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.982] WriteFile (in: hFile=0x34c, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x29d, lpNumberOfBytesWritten=0x127cfd00, lpOverlapped=0x127cfd0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x127cfd00*=0x29d, lpOverlapped=0x127cfd0c) returned 1
	[0135.982] GetFileType (hFile=0x34c) returned 0x1
	[0135.982] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x29d, lpNewFilePointer=0x0, dwMoveMethod=0x127cfce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0135.983] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0135.983] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0135.983] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0135.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.983] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x127cfd0c | out: lpMode=0x127cfd0c) returned 0
	[0135.983] WriteFile (in: hFile=0x32c, lpBuffer=0x125e4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x127cfd0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4000*, lpNumberOfBytesWritten=0x127cfd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.984] CloseHandle (hObject=0x32c) returned 1
	[0135.984] CloseHandle (hObject=0x34c) returned 1
	[0135.984] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.985] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.004] SetEvent (hEvent=0x68) returned 1
	[0136.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.005] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8278a690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x284)) returned 1
	[0136.005] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0136.005] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443b8 | out: pbBuffer=0x127443b8) returned 1
	[0136.005] ReadFile (in: hFile=0x32c, lpBuffer=0x12918000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12918000*, lpNumberOfBytesRead=0x12429d1c*=0x284, lpOverlapped=0x0) returned 1
	[0136.024] GetFileType (hFile=0x32c) returned 0x1
	[0136.025] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.025] WriteFile (in: hFile=0x32c, lpBuffer=0x12778580*, nNumberOfBytesToWrite=0x284, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12778580*, lpNumberOfBytesWritten=0x12429d00*=0x284, lpOverlapped=0x12429d0c) returned 1
	[0136.025] GetFileType (hFile=0x32c) returned 0x1
	[0136.025] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x284, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.025] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0136.025] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0136.026] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0136.026] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744530 | out: pbBuffer=0x12744530) returned 1
	[0136.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.026] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.026] WriteFile (in: hFile=0x33c, lpBuffer=0x125e4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.026] CloseHandle (hObject=0x33c) returned 1
	[0136.026] CloseHandle (hObject=0x32c) returned 1
	[0136.026] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nb\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.028] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827af080, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x295)) returned 1
	[0136.028] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c920 | out: pbBuffer=0x1244c920) returned 1
	[0136.028] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744548 | out: pbBuffer=0x12744548) returned 1
	[0136.028] ReadFile (in: hFile=0x32c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12429d1c*=0x295, lpOverlapped=0x0) returned 1
	[0136.055] GetFileType (hFile=0x32c) returned 0x1
	[0136.055] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.055] WriteFile (in: hFile=0x32c, lpBuffer=0x12778b00*, nNumberOfBytesToWrite=0x295, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12778b00*, lpNumberOfBytesWritten=0x12429d00*=0x295, lpOverlapped=0x12429d0c) returned 1
	[0136.055] GetFileType (hFile=0x32c) returned 0x1
	[0136.055] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x295, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.055] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0136.055] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0136.056] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0136.056] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744660 | out: pbBuffer=0x12744660) returned 1
	[0136.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.056] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.056] WriteFile (in: hFile=0x344, lpBuffer=0x125e4a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.056] CloseHandle (hObject=0x344) returned 1
	[0136.056] CloseHandle (hObject=0x32c) returned 1
	[0136.057] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_PT\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\pt_pt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.058] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.072] SetEvent (hEvent=0x70) returned 1
	[0136.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.074] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827b65b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c)) returned 1
	[0136.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb40 | out: pbBuffer=0x1244cb40) returned 1
	[0136.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744728 | out: pbBuffer=0x12744728) returned 1
	[0136.075] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0136.137] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0136.137] SetEvent (hEvent=0xa0) returned 1
	[0136.137] SetEvent (hEvent=0x70) returned 1
	[0136.137] SetEvent (hEvent=0x68) returned 1
	[0136.137] ReadFile (in: hFile=0x32c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1242bd1c*=0x29c, lpOverlapped=0x0) returned 1
	[0136.191] GetFileType (hFile=0x32c) returned 0x1
	[0136.191] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.191] WriteFile (in: hFile=0x32c, lpBuffer=0x12779080*, nNumberOfBytesToWrite=0x29c, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12779080*, lpNumberOfBytesWritten=0x1242bd00*=0x29c, lpOverlapped=0x1242bd0c) returned 1
	[0136.192] GetFileType (hFile=0x32c) returned 0x1
	[0136.192] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x29c, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.192] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0136.192] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0136.192] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0136.193] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744980 | out: pbBuffer=0x12744980) returned 1
	[0136.193] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.193] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.193] WriteFile (in: hFile=0x344, lpBuffer=0x125e4f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.193] CloseHandle (hObject=0x344) returned 1
	[0136.193] CloseHandle (hObject=0x32c) returned 1
	[0136.194] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.195] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0136.253] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.253] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0136.257] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0136.257] SetEvent (hEvent=0x2e8) returned 1
	[0136.257] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0136.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.261] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.261] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.261] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827fab70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fd280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.261] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.261] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.262] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.262] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.264] CloseHandle (hObject=0x344) returned 1
	[0136.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827fab70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fd280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1
	[0136.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.265] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.265] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.265] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.265] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.265] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.265] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.267] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.267] WriteFile (in: hFile=0x344, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.268] CloseHandle (hObject=0x344) returned 1
	[0136.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8280e3f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82821c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1
	[0136.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.277] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.277] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.277] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.277] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.277] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.278] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.278] WriteFile (in: hFile=0x2cc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.281] CloseHandle (hObject=0x2cc) returned 1
	[0136.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828306d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8283ca20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x289)) returned 1
	[0136.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.282] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.282] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.282] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.282] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.282] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.283] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.283] WriteFile (in: hFile=0x2cc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.285] CloseHandle (hObject=0x2cc) returned 1
	[0136.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828529b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x44b)) returned 1
	[0136.299] SetEvent (hEvent=0x2e8) returned 1
	[0136.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.299] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.299] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.300] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.300] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.300] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.301] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.301] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.303] CloseHandle (hObject=0x32c) returned 1
	[0136.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82866230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28a)) returned 1
	[0136.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.304] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.304] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.304] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.304] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.304] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.305] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.305] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.307] CloseHandle (hObject=0x32c) returned 1
	[0136.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8286d760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x315)) returned 1
	[0136.333] SetEvent (hEvent=0x2e8) returned 1
	[0136.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.333] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.334] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.335] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.335] WriteFile (in: hFile=0x32c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.337] CloseHandle (hObject=0x32c) returned 1
	[0136.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82874c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1
	[0136.350] SetEvent (hEvent=0x2e8) returned 1
	[0136.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.350] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.350] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.351] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.351] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.352] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.352] WriteFile (in: hFile=0x344, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.353] CloseHandle (hObject=0x344) returned 1
	[0136.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8287e8d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x253)) returned 1
	[0136.361] SetEvent (hEvent=0x2e8) returned 1
	[0136.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.362] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.362] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.362] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.362] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.362] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.364] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.364] WriteFile (in: hFile=0x344, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.366] CloseHandle (hObject=0x344) returned 1
	[0136.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1
	[0136.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.376] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.376] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.376] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0136.376] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.376] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.388] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0136.388] WriteFile (in: hFile=0x32c, lpBuffer=0x12611300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12611300*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0136.390] CloseHandle (hObject=0x32c) returned 1
	[0136.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828e9f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb7bfbc00, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x2dfa)) returned 1
	[0136.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_background.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82888510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8288ac20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e)) returned 1
	[0136.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x3b059)) returned 1
	[0136.394] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.400] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.416] SetEvent (hEvent=0x2e8) returned 1
	[0136.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.416] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.417] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.417] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.css", cAlternateFileName="CRAW_W~1.CSS")) returned 1
	[0136.417] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.417] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.418] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0136.418] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0136.444] CloseHandle (hObject=0x32c) returned 1
	[0136.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\css\\craw_window.css"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82899680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaae46e00, ftLastWriteTime.dwHighDateTime=0x1cec2fb, nFileSizeHigh=0x0, nFileSizeLow=0x6cd)) returned 1
	[0136.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.445] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.445] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.445] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.html", cAlternateFileName="CRAW_W~1.HTM")) returned 1
	[0136.445] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.445] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.447] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0136.447] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0136.448] CloseHandle (hObject=0x32c) returned 1
	[0136.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a)) returned 1
	[0136.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.468] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="flapper.gif", cAlternateFileName="")) returned 1
	[0136.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
	[0136.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
	[0136.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button.png", cAlternateFileName="TOPBAR~1.PNG")) returned 1
	[0136.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_close.png", cAlternateFileName="TOPBAR~2.PNG")) returned 1
	[0136.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_hover.png", cAlternateFileName="TOPBAR~3.PNG")) returned 1
	[0136.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_maximize.png", cAlternateFileName="TOPBAR~4.PNG")) returned 1
	[0136.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="topbar_floating_button_pressed.png", cAlternateFileName="TOF9E1~1.PNG")) returned 1
	[0136.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.487] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.490] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0136.490] WriteFile (in: hFile=0x32c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0136.491] CloseHandle (hObject=0x32c) returned 1
	[0136.491] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc)) returned 1
	[0136.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109)) returned 1
	[0136.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c)) returned 1
	[0136.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1
	[0136.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.505] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828c7cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x22c)) returned 1
	[0136.505] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127320a0 | out: pbBuffer=0x127320a0) returned 1
	[0136.505] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f0 | out: pbBuffer=0x127880f0) returned 1
	[0136.505] ReadFile (in: hFile=0x2cc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f5d1c*=0x22c, lpOverlapped=0x0) returned 1
	[0136.506] GetFileType (hFile=0x2cc) returned 0x1
	[0136.507] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.507] WriteFile (in: hFile=0x2cc, lpBuffer=0x1244b440*, nNumberOfBytesToWrite=0x22c, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1244b440*, lpNumberOfBytesWritten=0x124f5d00*=0x22c, lpOverlapped=0x124f5d0c) returned 1
	[0136.507] GetFileType (hFile=0x2cc) returned 0x1
	[0136.507] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x22c, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.507] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0136.507] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0136.507] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0136.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a8 | out: pbBuffer=0x127881a8) returned 1
	[0136.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0136.508] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.508] WriteFile (in: hFile=0x100, lpBuffer=0x12768000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.508] CloseHandle (hObject=0x100) returned 1
	[0136.508] CloseHandle (hObject=0x2cc) returned 1
	[0136.509] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_16.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.510] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ccad0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ccad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1
	[0136.511] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322e0 | out: pbBuffer=0x127322e0) returned 1
	[0136.511] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0136.511] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0136.513] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0136.513] SetEvent (hEvent=0xa0) returned 1
	[0136.513] SetEvent (hEvent=0x68) returned 1
	[0136.513] ReadFile (in: hFile=0x2cc, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f5d1c*=0xa0, lpOverlapped=0x0) returned 1
	[0136.515] GetFileType (hFile=0x2cc) returned 0x1
	[0136.515] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.515] WriteFile (in: hFile=0x2cc, lpBuffer=0x124faf00*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124faf00*, lpNumberOfBytesWritten=0x124f5d00*=0xa0, lpOverlapped=0x124f5d0c) returned 1
	[0136.515] GetFileType (hFile=0x2cc) returned 0x1
	[0136.515] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.515] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0136.516] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0136.516] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0136.516] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788278 | out: pbBuffer=0x12788278) returned 1
	[0136.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x100
	[0136.516] GetConsoleMode (in: hConsoleHandle=0x100, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.516] WriteFile (in: hFile=0x100, lpBuffer=0x12768500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.517] CloseHandle (hObject=0x100) returned 1
	[0136.517] CloseHandle (hObject=0x2cc) returned 1
	[0136.517] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.518] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0136.520] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0136.548] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.548] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0136.548] SetEvent (hEvent=0x2e4) returned 1
	[0136.548] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0136.557] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.557] SwitchToThread () returned 1
	[0136.573] SetEvent (hEvent=0x68) returned 1
	[0136.574] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.574] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1
	[0136.574] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0136.574] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0136.575] ReadFile (in: hFile=0x32c, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f1d1c*=0xa0, lpOverlapped=0x0) returned 1
	[0136.576] GetFileType (hFile=0x32c) returned 0x1
	[0136.576] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.576] WriteFile (in: hFile=0x32c, lpBuffer=0x124fa000*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124fa000*, lpNumberOfBytesWritten=0x124f1d00*=0xa0, lpOverlapped=0x124f1d0c) returned 1
	[0136.576] GetFileType (hFile=0x32c) returned 0x1
	[0136.576] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0136.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0136.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0136.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0136.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.577] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.578] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.578] CloseHandle (hObject=0x34c) returned 1
	[0136.578] CloseHandle (hObject=0x32c) returned 1
	[0136.578] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.580] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0136.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1
	[0136.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0136.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744398 | out: pbBuffer=0x12744398) returned 1
	[0136.580] ReadFile (in: hFile=0x32c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f3d1c*=0xfc, lpOverlapped=0x0) returned 1
	[0136.582] GetFileType (hFile=0x32c) returned 0x1
	[0136.582] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.582] WriteFile (in: hFile=0x32c, lpBuffer=0x12991200*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12991200*, lpNumberOfBytesWritten=0x124f3d00*=0xfc, lpOverlapped=0x124f3d0c) returned 1
	[0136.582] GetFileType (hFile=0x32c) returned 0x1
	[0136.582] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.582] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0136.582] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0136.583] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec901 | out: pbBuffer=0x124ec901) returned 1
	[0136.583] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744510 | out: pbBuffer=0x12744510) returned 1
	[0136.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.583] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0136.583] WriteFile (in: hFile=0x34c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.584] CloseHandle (hObject=0x34c) returned 1
	[0136.584] CloseHandle (hObject=0x32c) returned 1
	[0136.584] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.585] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6)) returned 1
	[0136.586] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4c0 | out: pbBuffer=0x1252e4c0) returned 1
	[0136.586] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744528 | out: pbBuffer=0x12744528) returned 1
	[0136.586] ReadFile (in: hFile=0x32c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1242bd1c*=0xa6, lpOverlapped=0x0) returned 1
	[0136.587] GetFileType (hFile=0x32c) returned 0x1
	[0136.587] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.587] WriteFile (in: hFile=0x32c, lpBuffer=0x1262b760*, nNumberOfBytesToWrite=0xa6, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1262b760*, lpNumberOfBytesWritten=0x1242bd00*=0xa6, lpOverlapped=0x1242bd0c) returned 1
	[0136.587] GetFileType (hFile=0x32c) returned 0x1
	[0136.588] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xa6, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca01 | out: pbBuffer=0x124eca01) returned 1
	[0136.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb01 | out: pbBuffer=0x124ecb01) returned 1
	[0136.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc01 | out: pbBuffer=0x124ecc01) returned 1
	[0136.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744640 | out: pbBuffer=0x12744640) returned 1
	[0136.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.588] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.588] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.589] CloseHandle (hObject=0x34c) returned 1
	[0136.589] CloseHandle (hObject=0x32c) returned 1
	[0136.589] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.590] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.735] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.740] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.742] SetEvent (hEvent=0x68) returned 1
	[0136.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.742] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1
	[0136.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0136.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0136.743] ReadFile (in: hFile=0x32c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f1d1c*=0xf9, lpOverlapped=0x0) returned 1
	[0136.744] GetFileType (hFile=0x32c) returned 0x1
	[0136.744] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.745] WriteFile (in: hFile=0x32c, lpBuffer=0x124be100*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124be100*, lpNumberOfBytesWritten=0x124f1d00*=0xf9, lpOverlapped=0x124f1d0c) returned 1
	[0136.745] GetFileType (hFile=0x32c) returned 0x1
	[0136.745] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8101 | out: pbBuffer=0x127e8101) returned 1
	[0136.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8201 | out: pbBuffer=0x127e8201) returned 1
	[0136.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8301 | out: pbBuffer=0x127e8301) returned 1
	[0136.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0136.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.746] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.746] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.746] CloseHandle (hObject=0x33c) returned 1
	[0136.746] CloseHandle (hObject=0x32c) returned 1
	[0136.747] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.748] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.762] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.768] SetEvent (hEvent=0x68) returned 1
	[0136.769] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.769] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef)) returned 1
	[0136.769] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0136.769] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0136.770] ReadFile (in: hFile=0x32c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f5d1c*=0xef, lpOverlapped=0x0) returned 1
	[0136.771] GetFileType (hFile=0x32c) returned 0x1
	[0136.771] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.771] WriteFile (in: hFile=0x32c, lpBuffer=0x12464000*, nNumberOfBytesToWrite=0xef, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12464000*, lpNumberOfBytesWritten=0x124f5d00*=0xef, lpOverlapped=0x124f5d0c) returned 1
	[0136.772] GetFileType (hFile=0x32c) returned 0x1
	[0136.772] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xef, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0136.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0136.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0136.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0136.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.773] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.773] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.773] CloseHandle (hObject=0x33c) returned 1
	[0136.773] CloseHandle (hObject=0x32c) returned 1
	[0136.773] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.774] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0136.798] SetEvent (hEvent=0x30c) returned 1
	[0136.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.798] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0136.798] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0136.798] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0136.799] ReadFile (in: hFile=0x33c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f1d1c*=0xd7, lpOverlapped=0x0) returned 1
	[0136.800] GetFileType (hFile=0x33c) returned 0x1
	[0136.800] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.800] WriteFile (in: hFile=0x33c, lpBuffer=0x127727e0*, nNumberOfBytesToWrite=0xd7, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127727e0*, lpNumberOfBytesWritten=0x124f1d00*=0xd7, lpOverlapped=0x124f1d0c) returned 1
	[0136.800] GetFileType (hFile=0x33c) returned 0x1
	[0136.800] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd7, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0136.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0136.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0136.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445f0 | out: pbBuffer=0x127445f0) returned 1
	[0136.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.801] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.801] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.801] CloseHandle (hObject=0x34c) returned 1
	[0136.802] CloseHandle (hObject=0x33c) returned 1
	[0136.802] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.803] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d)) returned 1
	[0136.803] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0136.803] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744608 | out: pbBuffer=0x12744608) returned 1
	[0136.803] ReadFile (in: hFile=0x33c, lpBuffer=0x128f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128f8000*, lpNumberOfBytesRead=0x1242bd1c*=0x10d, lpOverlapped=0x0) returned 1
	[0136.805] GetFileType (hFile=0x33c) returned 0x1
	[0136.805] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.805] WriteFile (in: hFile=0x33c, lpBuffer=0x1248d200*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1248d200*, lpNumberOfBytesWritten=0x1242bd00*=0x10d, lpOverlapped=0x1242bd0c) returned 1
	[0136.805] GetFileType (hFile=0x33c) returned 0x1
	[0136.805] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x10d, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0136.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0136.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0136.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446d0 | out: pbBuffer=0x127446d0) returned 1
	[0136.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.806] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.806] WriteFile (in: hFile=0x34c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.806] CloseHandle (hObject=0x34c) returned 1
	[0136.806] CloseHandle (hObject=0x33c) returned 1
	[0136.806] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.807] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0137.013] SetEvent (hEvent=0x2e4) returned 1
	[0137.013] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0137.018] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0137.051] SetEvent (hEvent=0x2e4) returned 1
	[0137.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.051] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0137.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0137.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0137.052] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f1d1c*=0xdf, lpOverlapped=0x0) returned 1
	[0137.053] GetFileType (hFile=0x33c) returned 0x1
	[0137.053] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.053] WriteFile (in: hFile=0x33c, lpBuffer=0x12648000*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12648000*, lpNumberOfBytesWritten=0x124f1d00*=0xdf, lpOverlapped=0x124f1d0c) returned 1
	[0137.053] GetFileType (hFile=0x33c) returned 0x1
	[0137.054] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xdf, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.054] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0137.054] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0137.054] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0137.054] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0137.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.054] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.054] WriteFile (in: hFile=0x34c, lpBuffer=0x1262a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262a000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.055] CloseHandle (hObject=0x34c) returned 1
	[0137.055] CloseHandle (hObject=0x33c) returned 1
	[0137.055] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_PT\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_pt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.057] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0137.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0137.057] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0137.057] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0137.057] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1242bd1c*=0xde, lpOverlapped=0x0) returned 1
	[0137.058] GetFileType (hFile=0x33c) returned 0x1
	[0137.058] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.058] WriteFile (in: hFile=0x33c, lpBuffer=0x126481c0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x126481c0*, lpNumberOfBytesWritten=0x1242bd00*=0xde, lpOverlapped=0x1242bd0c) returned 1
	[0137.059] GetFileType (hFile=0x33c) returned 0x1
	[0137.059] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xde, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.059] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0137.059] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0137.059] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0137.059] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0137.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.060] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0137.060] WriteFile (in: hFile=0x34c, lpBuffer=0x1262a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262a500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.060] CloseHandle (hObject=0x34c) returned 1
	[0137.060] CloseHandle (hObject=0x33c) returned 1
	[0137.060] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_BR\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pt_br\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.062] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0137.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1
	[0137.062] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0137.062] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882a8 | out: pbBuffer=0x127882a8) returned 1
	[0137.062] ReadFile (in: hFile=0x33c, lpBuffer=0x12938000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12938000*, lpNumberOfBytesRead=0x124f3d1c*=0x109, lpOverlapped=0x0) returned 1
	[0137.063] GetFileType (hFile=0x33c) returned 0x1
	[0137.064] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.064] WriteFile (in: hFile=0x33c, lpBuffer=0x12781b00*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12781b00*, lpNumberOfBytesWritten=0x124f3d00*=0x109, lpOverlapped=0x124f3d0c) returned 1
	[0137.064] GetFileType (hFile=0x33c) returned 0x1
	[0137.064] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x109, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.064] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0137.065] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0137.065] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0137.065] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788370 | out: pbBuffer=0x12788370) returned 1
	[0137.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.065] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0137.065] WriteFile (in: hFile=0x34c, lpBuffer=0x1262aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262aa00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.066] CloseHandle (hObject=0x34c) returned 1
	[0137.066] CloseHandle (hObject=0x33c) returned 1
	[0137.066] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ro\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.068] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.068] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.068] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.068] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.068] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.069] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.069] WriteFile (in: hFile=0x33c, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.071] CloseHandle (hObject=0x33c) returned 1
	[0137.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0137.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.072] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.072] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.072] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.072] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.072] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.073] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.073] WriteFile (in: hFile=0x33c, lpBuffer=0x12619300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12619300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.075] CloseHandle (hObject=0x33c) returned 1
	[0137.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1
	[0137.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.076] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.076] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.076] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.077] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.077] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.077] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.078] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.078] WriteFile (in: hFile=0x33c, lpBuffer=0x1261a600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1261a600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.080] CloseHandle (hObject=0x33c) returned 1
	[0137.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x127)) returned 1
	[0137.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.081] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.081] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.081] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.081] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.081] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.082] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.082] WriteFile (in: hFile=0x33c, lpBuffer=0x1261b900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1261b900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.113] CloseHandle (hObject=0x33c) returned 1
	[0137.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x144)) returned 1
	[0137.113] SetEvent (hEvent=0x2e4) returned 1
	[0137.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.114] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.114] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.114] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.115] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.115] WriteFile (in: hFile=0x33c, lpBuffer=0x1261cc00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1261cc00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.117] CloseHandle (hObject=0x33c) returned 1
	[0137.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1
	[0137.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.118] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.118] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.118] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.118] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.119] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.119] WriteFile (in: hFile=0x33c, lpBuffer=0x1276a000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276a000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.120] CloseHandle (hObject=0x33c) returned 1
	[0137.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1
	[0137.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.121] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.121] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.121] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.121] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.121] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.123] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.123] WriteFile (in: hFile=0x33c, lpBuffer=0x1276b300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276b300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.124] CloseHandle (hObject=0x33c) returned 1
	[0137.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0137.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.125] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.125] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.125] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.125] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.125] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.127] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.127] WriteFile (in: hFile=0x33c, lpBuffer=0x1276c600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276c600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.128] CloseHandle (hObject=0x33c) returned 1
	[0137.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1
	[0137.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.129] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0137.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0137.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd20 | out: pbBuffer=0x1244cd20) returned 1
	[0137.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127885d0 | out: pbBuffer=0x127885d0) returned 1
	[0137.129] ReadFile (in: hFile=0x33c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f3d1c*=0xe8, lpOverlapped=0x0) returned 1
	[0137.131] GetFileType (hFile=0x33c) returned 0x1
	[0137.131] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.131] WriteFile (in: hFile=0x33c, lpBuffer=0x1277c4b0*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1277c4b0*, lpNumberOfBytesWritten=0x124f3d00*=0xe8, lpOverlapped=0x124f3d0c) returned 1
	[0137.131] GetFileType (hFile=0x33c) returned 0x1
	[0137.131] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0137.132] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0137.132] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0137.132] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788688 | out: pbBuffer=0x12788688) returned 1
	[0137.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.132] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0137.132] WriteFile (in: hFile=0x32c, lpBuffer=0x1262af00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262af00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.132] CloseHandle (hObject=0x32c) returned 1
	[0137.133] CloseHandle (hObject=0x33c) returned 1
	[0137.133] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\vi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.134] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.134] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0137.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1
	[0137.135] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cf40 | out: pbBuffer=0x1244cf40) returned 1
	[0137.135] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127886a0 | out: pbBuffer=0x127886a0) returned 1
	[0137.135] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0137.136] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0137.136] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0137.136] SetEvent (hEvent=0xa0) returned 1
	[0137.136] SetEvent (hEvent=0x2e4) returned 1
	[0137.137] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f3d1c*=0x102, lpOverlapped=0x0) returned 1
	[0137.138] GetFileType (hFile=0x33c) returned 0x1
	[0137.138] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.138] WriteFile (in: hFile=0x33c, lpBuffer=0x12773320*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12773320*, lpNumberOfBytesWritten=0x124f3d00*=0x102, lpOverlapped=0x124f3d0c) returned 1
	[0137.139] GetFileType (hFile=0x33c) returned 0x1
	[0137.139] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x102, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.139] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435081 | out: pbBuffer=0x12435081) returned 1
	[0137.139] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435181 | out: pbBuffer=0x12435181) returned 1
	[0137.139] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435281 | out: pbBuffer=0x12435281) returned 1
	[0137.139] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788758 | out: pbBuffer=0x12788758) returned 1
	[0137.139] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.139] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0137.140] WriteFile (in: hFile=0x32c, lpBuffer=0x1262b400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262b400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.140] CloseHandle (hObject=0x32c) returned 1
	[0137.140] CloseHandle (hObject=0x33c) returned 1
	[0137.140] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_CN\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_cn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.142] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0137.142] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0137.143] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0137.143] SetEvent (hEvent=0x68) returned 1
	[0137.143] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0137.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.168] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0137.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1
	[0137.168] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0137.168] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0137.168] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f5d1c*=0xf9, lpOverlapped=0x0) returned 1
	[0137.170] GetFileType (hFile=0x33c) returned 0x1
	[0137.170] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.170] WriteFile (in: hFile=0x33c, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0xf9, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x124f5d00*=0xf9, lpOverlapped=0x124f5d0c) returned 1
	[0137.170] GetFileType (hFile=0x33c) returned 0x1
	[0137.170] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xf9, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0137.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0137.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0137.171] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0137.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.171] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0137.171] WriteFile (in: hFile=0x32c, lpBuffer=0x1262a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262a000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.171] CloseHandle (hObject=0x32c) returned 1
	[0137.171] CloseHandle (hObject=0x33c) returned 1
	[0137.171] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_TW\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\zh_tw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.180] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x869b0fb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x310)) returned 1
	[0137.180] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0137.180] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0137.180] ReadFile (in: hFile=0x33c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f1d1c*=0x310, lpOverlapped=0x0) returned 1
	[0137.196] GetFileType (hFile=0x33c) returned 0x1
	[0137.196] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.197] WriteFile (in: hFile=0x33c, lpBuffer=0x127da000*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127da000*, lpNumberOfBytesWritten=0x124f1d00*=0x310, lpOverlapped=0x124f1d0c) returned 1
	[0137.197] GetFileType (hFile=0x33c) returned 0x1
	[0137.197] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x310, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.197] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0137.197] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0137.198] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0137.198] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0137.198] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0137.198] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.198] WriteFile (in: hFile=0x344, lpBuffer=0x1262a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262a500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.199] CloseHandle (hObject=0x344) returned 1
	[0137.199] CloseHandle (hObject=0x33c) returned 1
	[0137.199] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\manifest.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.200] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0137.246] SetEvent (hEvent=0x30c) returned 1
	[0137.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.247] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0137.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833fee30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833fee30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x45bf)) returned 1
	[0137.248] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0137.248] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0137.248] ReadFile (in: hFile=0x32c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f5d1c*=0x45bf, lpOverlapped=0x0) returned 1
	[0137.268] GetFileType (hFile=0x32c) returned 0x1
	[0137.268] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.268] WriteFile (in: hFile=0x32c, lpBuffer=0x128d8000*, nNumberOfBytesToWrite=0x45bf, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x128d8000*, lpNumberOfBytesWritten=0x124f5d00*=0x45bf, lpOverlapped=0x124f5d0c) returned 1
	[0137.291] GetFileType (hFile=0x32c) returned 0x1
	[0137.292] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x45bf, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0137.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0137.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0137.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e720 | out: pbBuffer=0x1251e720) returned 1
	[0137.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.293] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0137.293] WriteFile (in: hFile=0x33c, lpBuffer=0x1262aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262aa00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.293] CloseHandle (hObject=0x33c) returned 1
	[0137.293] CloseHandle (hObject=0x32c) returned 1
	[0137.293] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ar\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.295] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8340b180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8340b180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52cb)) returned 1
	[0137.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0137.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e738 | out: pbBuffer=0x1251e738) returned 1
	[0137.296] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0137.300] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0137.301] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0137.301] SetEvent (hEvent=0xa0) returned 1
	[0137.301] SetEvent (hEvent=0x2e4) returned 1
	[0137.301] ReadFile (in: hFile=0x32c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x12429d1c*=0x52cb, lpOverlapped=0x0) returned 1
	[0137.305] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0137.306] GetFileType (hFile=0x32c) returned 0x1
	[0137.307] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.307] WriteFile (in: hFile=0x32c, lpBuffer=0x124a1500*, nNumberOfBytesToWrite=0x52cb, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124a1500*, lpNumberOfBytesWritten=0x12429d00*=0x52cb, lpOverlapped=0x12429d0c) returned 1
	[0137.307] GetFileType (hFile=0x32c) returned 0x1
	[0137.307] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x52cb, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.307] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0137.307] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0137.308] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0137.308] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410710 | out: pbBuffer=0x12410710) returned 1
	[0137.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.308] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.308] WriteFile (in: hFile=0x33c, lpBuffer=0x128f0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x128f0000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.309] CloseHandle (hObject=0x33c) returned 1
	[0137.309] CloseHandle (hObject=0x32c) returned 1
	[0137.309] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.310] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0137.311] SetEvent (hEvent=0x2e8) returned 1
	[0137.311] SetEvent (hEvent=0x30c) returned 1
	[0137.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.312] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.312] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83419be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8341c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8341c2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.312] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.312] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.312] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.313] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.313] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.315] CloseHandle (hObject=0x32c) returned 1
	[0137.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029)) returned 1
	[0137.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.316] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83425f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83428640, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.316] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.317] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.317] WriteFile (in: hFile=0x32c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.318] CloseHandle (hObject=0x32c) returned 1
	[0137.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83428640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83428640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f79)) returned 1
	[0137.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.329] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.329] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8342d460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8342fb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8342fb70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.329] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.329] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.329] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.330] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.330] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.333] CloseHandle (hObject=0x33c) returned 1
	[0137.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f)) returned 1
	[0137.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.333] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83434990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834370a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834370a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.334] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.335] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.335] WriteFile (in: hFile=0x33c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.336] CloseHandle (hObject=0x33c) returned 1
	[0137.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834370a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834397b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4afe)) returned 1
	[0137.349] SetEvent (hEvent=0x30c) returned 1
	[0137.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.350] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8343bec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83440ce0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.350] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.350] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.350] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.351] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.351] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.352] CloseHandle (hObject=0x32c) returned 1
	[0137.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a)) returned 1
	[0137.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.353] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.353] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8344a920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8344d030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.353] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.353] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.353] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.354] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.354] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.355] CloseHandle (hObject=0x32c) returned 1
	[0137.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8344d030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8344d030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404b)) returned 1
	[0137.368] SetEvent (hEvent=0x30c) returned 1
	[0137.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.369] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83451e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83454560, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.369] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.369] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.369] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.370] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.370] WriteFile (in: hFile=0x32c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.371] CloseHandle (hObject=0x32c) returned 1
	[0137.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83454560, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83454560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e85)) returned 1
	[0137.386] SetEvent (hEvent=0x30c) returned 1
	[0137.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.386] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.386] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83459380, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8345ba90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.386] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.386] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.387] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.388] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.388] WriteFile (in: hFile=0x34c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.389] CloseHandle (hObject=0x34c) returned 1
	[0137.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5)) returned 1
	[0137.396] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0137.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.400] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.400] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834608b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83462fc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.400] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.400] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.400] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.401] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.401] WriteFile (in: hFile=0x34c, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.403] CloseHandle (hObject=0x34c) returned 1
	[0137.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83462fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83462fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f4c)) returned 1
	[0137.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.403] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.403] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83467de0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8346cc00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8346cc00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.403] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.404] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.404] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.405] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.405] WriteFile (in: hFile=0x34c, lpBuffer=0x125bb300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x125bb300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.406] CloseHandle (hObject=0x34c) returned 1
	[0137.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082)) returned 1
	[0137.408] SetEvent (hEvent=0x30c) returned 1
	[0137.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.408] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.408] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83476840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83478f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.408] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.409] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.409] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.410] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.410] WriteFile (in: hFile=0x34c, lpBuffer=0x125bc600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x125bc600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.411] CloseHandle (hObject=0x34c) returned 1
	[0137.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f)) returned 1
	[0137.412] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0137.439] SetEvent (hEvent=0x70) returned 1
	[0137.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.447] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.447] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8347dd70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83480480, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.447] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.447] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.447] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.449] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.449] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.451] CloseHandle (hObject=0x32c) returned 1
	[0137.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079)) returned 1
	[0137.466] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.466] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.466] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834852a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834879b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.466] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.466] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.466] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0137.468] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.468] WriteFile (in: hFile=0x344, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.469] CloseHandle (hObject=0x344) returned 1
	[0137.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834879b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834879b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x50f7)) returned 1
	[0137.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0137.471] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1277bd0c | out: lpMode=0x1277bd0c) returned 0
	[0137.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277bad0 | out: lpFileInformation=0x1277bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83480480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83480480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5079)) returned 1
	[0137.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0137.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0b8 | out: pbBuffer=0x1251e0b8) returned 1
	[0137.471] ReadFile (in: hFile=0x344, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1277bd1c*=0x5079, lpOverlapped=0x0) returned 1
	[0137.593] GetFileType (hFile=0x344) returned 0x1
	[0137.593] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277bce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.593] WriteFile (in: hFile=0x344, lpBuffer=0x124a1500*, nNumberOfBytesToWrite=0x5079, lpNumberOfBytesWritten=0x1277bd00, lpOverlapped=0x1277bd0c | out: lpBuffer=0x124a1500*, lpNumberOfBytesWritten=0x1277bd00*=0x5079, lpOverlapped=0x1277bd0c) returned 1
	[0137.593] GetFileType (hFile=0x344) returned 0x1
	[0137.593] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x5079, lpNewFilePointer=0x0, dwMoveMethod=0x1277bce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.593] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0137.593] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0137.593] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0137.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0137.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.594] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1277bd0c | out: lpMode=0x1277bd0c) returned 0
	[0137.594] WriteFile (in: hFile=0x33c, lpBuffer=0x12618500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12618500*, lpNumberOfBytesWritten=0x1277bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.594] CloseHandle (hObject=0x33c) returned 1
	[0137.594] CloseHandle (hObject=0x344) returned 1
	[0137.594] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\gu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.603] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0137.718] SetEvent (hEvent=0x2e4) returned 1
	[0137.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0137.719] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1
	[0137.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0137.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0c8 | out: pbBuffer=0x1251e0c8) returned 1
	[0137.719] ReadFile (in: hFile=0x344, lpBuffer=0x1292c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1292c000*, lpNumberOfBytesRead=0x124f1d1c*=0x40d4, lpOverlapped=0x0) returned 1
	[0137.833] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0138.173] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0138.409] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0138.488] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0138.537] SetEvent (hEvent=0x68) returned 1
	[0138.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.538] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0138.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc)) returned 1
	[0138.538] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0138.538] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0138.539] ReadFile (in: hFile=0x2cc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1242bd1c*=0x3ebc, lpOverlapped=0x0) returned 1
	[0138.600] GetFileType (hFile=0x2cc) returned 0x1
	[0138.601] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.601] WriteFile (in: hFile=0x2cc, lpBuffer=0x12648000*, nNumberOfBytesToWrite=0x3ebc, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12648000*, lpNumberOfBytesWritten=0x1242bd00*=0x3ebc, lpOverlapped=0x1242bd0c) returned 1
	[0138.601] GetFileType (hFile=0x2cc) returned 0x1
	[0138.601] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x3ebc, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.601] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0138.602] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0138.602] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0138.602] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0138.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0138.602] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0138.602] WriteFile (in: hFile=0x33c, lpBuffer=0x12720000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12720000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.603] CloseHandle (hObject=0x33c) returned 1
	[0138.603] CloseHandle (hObject=0x2cc) returned 1
	[0138.603] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.604] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0138.653] SetEvent (hEvent=0x68) returned 1
	[0138.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.654] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0138.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7)) returned 1
	[0138.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0138.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0138.654] ReadFile (in: hFile=0x34c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f3d1c*=0x3fd7, lpOverlapped=0x0) returned 1
	[0138.708] GetFileType (hFile=0x34c) returned 0x1
	[0138.708] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.708] WriteFile (in: hFile=0x34c, lpBuffer=0x125e4000*, nNumberOfBytesToWrite=0x3fd7, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125e4000*, lpNumberOfBytesWritten=0x124f3d00*=0x3fd7, lpOverlapped=0x124f3d0c) returned 1
	[0138.708] GetFileType (hFile=0x34c) returned 0x1
	[0138.708] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x3fd7, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.708] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0138.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0138.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0138.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0138.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0138.709] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0138.709] WriteFile (in: hFile=0x33c, lpBuffer=0x12720500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12720500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.710] CloseHandle (hObject=0x33c) returned 1
	[0138.710] CloseHandle (hObject=0x34c) returned 1
	[0138.710] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.711] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0138.807] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0138.855] SetEvent (hEvent=0x2e8) returned 1
	[0138.855] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0138.906] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.906] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0138.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd)) returned 1
	[0138.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0138.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446c0 | out: pbBuffer=0x127446c0) returned 1
	[0138.907] ReadFile (in: hFile=0x34c, lpBuffer=0x128f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128f8000*, lpNumberOfBytesRead=0x1242bd1c*=0x40fd, lpOverlapped=0x0) returned 1
	[0138.956] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0138.990] SetEvent (hEvent=0x2e8) returned 1
	[0138.991] GetFileType (hFile=0x34c) returned 0x1
	[0138.991] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.991] WriteFile (in: hFile=0x34c, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x40fd, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x1242bd00*=0x40fd, lpOverlapped=0x1242bd0c) returned 1
	[0138.991] GetFileType (hFile=0x34c) returned 0x1
	[0138.991] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x40fd, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.991] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0138.991] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0138.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0138.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0138.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0138.992] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0138.992] WriteFile (in: hFile=0x33c, lpBuffer=0x12720f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12720f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.992] CloseHandle (hObject=0x33c) returned 1
	[0138.993] CloseHandle (hObject=0x34c) returned 1
	[0138.993] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.994] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0139.029] SetEvent (hEvent=0x2e8) returned 1
	[0139.029] SetEvent (hEvent=0x30c) returned 1
	[0139.029] GetFileType (hFile=0x2cc) returned 0x1
	[0139.029] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.029] WriteFile (in: hFile=0x2cc, lpBuffer=0x127fc800*, nNumberOfBytesToWrite=0x40db, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127fc800*, lpNumberOfBytesWritten=0x124f3d00*=0x40db, lpOverlapped=0x124f3d0c) returned 1
	[0139.030] GetFileType (hFile=0x2cc) returned 0x1
	[0139.030] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x40db, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.030] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0139.030] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0139.030] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0139.031] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0139.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.031] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0139.031] WriteFile (in: hFile=0x34c, lpBuffer=0x12720000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12720000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.031] CloseHandle (hObject=0x34c) returned 1
	[0139.031] CloseHandle (hObject=0x2cc) returned 1
	[0139.031] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.034] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835cec10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835cec10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.034] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0139.034] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.034] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0139.035] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0139.035] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0139.037] CloseHandle (hObject=0x2cc) returned 1
	[0139.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1)) returned 1
	[0139.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.038] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.038] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835daf60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dd670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.038] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0139.038] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.038] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0139.040] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0139.040] WriteFile (in: hFile=0x2cc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0139.041] CloseHandle (hObject=0x2cc) returned 1
	[0139.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96)) returned 1
	[0139.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.086] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.087] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835dfd80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.087] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0139.087] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.087] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.089] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0139.089] WriteFile (in: hFile=0x34c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0139.090] CloseHandle (hObject=0x34c) returned 1
	[0139.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b)) returned 1
	[0139.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.092] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835e4ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835e72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.092] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0139.092] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.092] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.094] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0139.094] WriteFile (in: hFile=0x34c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0139.096] CloseHandle (hObject=0x34c) returned 1
	[0139.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d)) returned 1
	[0139.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.140] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.140] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835ec0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f0ef0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.140] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f0ef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5593, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0139.140] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.140] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0139.141] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0139.141] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0139.143] CloseHandle (hObject=0x33c) returned 1
	[0139.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f0ef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5593)) returned 1
	[0139.143] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0139.144] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0139.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835e72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835e99c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x563d)) returned 1
	[0139.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0139.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127445c0 | out: pbBuffer=0x127445c0) returned 1
	[0139.184] ReadFile (in: hFile=0x33c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1242bd1c*=0x563d, lpOverlapped=0x0) returned 1
	[0139.234] GetFileType (hFile=0x33c) returned 0x1
	[0139.234] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.234] WriteFile (in: hFile=0x33c, lpBuffer=0x12958000*, nNumberOfBytesToWrite=0x563d, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12958000*, lpNumberOfBytesWritten=0x1242bd00*=0x563d, lpOverlapped=0x1242bd0c) returned 1
	[0139.235] GetFileType (hFile=0x33c) returned 0x1
	[0139.235] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x563d, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.235] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0139.235] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0139.235] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0139.236] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744678 | out: pbBuffer=0x12744678) returned 1
	[0139.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.236] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0139.236] WriteFile (in: hFile=0x34c, lpBuffer=0x12720500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12720500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.236] CloseHandle (hObject=0x34c) returned 1
	[0139.236] CloseHandle (hObject=0x33c) returned 1
	[0139.237] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ta\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.238] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0139.282] SetEvent (hEvent=0x2e4) returned 1
	[0139.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0139.283] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0139.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f8420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835fab30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4f64)) returned 1
	[0139.283] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0139.283] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446a0 | out: pbBuffer=0x127446a0) returned 1
	[0139.283] ReadFile (in: hFile=0x33c, lpBuffer=0x1295e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1295e000*, lpNumberOfBytesRead=0x1276bd1c*=0x4f64, lpOverlapped=0x0) returned 1
	[0139.327] SwitchToThread () returned 1
	[0139.373] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0139.481] SetEvent (hEvent=0x68) returned 1
	[0139.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0139.482] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0139.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8360e3b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83610ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f1)) returned 1
	[0139.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0139.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0139.482] ReadFile (in: hFile=0x2cc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1276dd1c*=0x48f1, lpOverlapped=0x0) returned 1
	[0139.526] GetFileType (hFile=0x2cc) returned 0x1
	[0139.527] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.527] WriteFile (in: hFile=0x2cc, lpBuffer=0x12458000*, nNumberOfBytesToWrite=0x48f1, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12458000*, lpNumberOfBytesWritten=0x1276dd00*=0x48f1, lpOverlapped=0x1276dd0c) returned 1
	[0139.527] GetFileType (hFile=0x2cc) returned 0x1
	[0139.527] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x48f1, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.527] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0139.527] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0139.528] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0139.528] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0139.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.528] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0139.528] WriteFile (in: hFile=0x34c, lpBuffer=0x1280e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1280e000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.528] CloseHandle (hObject=0x34c) returned 1
	[0139.529] CloseHandle (hObject=0x2cc) returned 1
	[0139.529] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.530] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0139.569] SetEvent (hEvent=0x68) returned 1
	[0139.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0139.570] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0139.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8361f520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d11)) returned 1
	[0139.570] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6c0 | out: pbBuffer=0x1244c6c0) returned 1
	[0139.570] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103f8 | out: pbBuffer=0x124103f8) returned 1
	[0139.570] ReadFile (in: hFile=0x2cc, lpBuffer=0x12582000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12582000*, lpNumberOfBytesRead=0x12429d1c*=0x3d11, lpOverlapped=0x0) returned 1
	[0139.613] GetFileType (hFile=0x2cc) returned 0x1
	[0139.613] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.613] WriteFile (in: hFile=0x2cc, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x3d11, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x12429d00*=0x3d11, lpOverlapped=0x12429d0c) returned 1
	[0139.614] GetFileType (hFile=0x2cc) returned 0x1
	[0139.614] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x3d11, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.614] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0139.614] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0139.614] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0139.615] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104d0 | out: pbBuffer=0x124104d0) returned 1
	[0139.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0139.615] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0139.615] WriteFile (in: hFile=0x32c, lpBuffer=0x1280e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1280e500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.615] CloseHandle (hObject=0x32c) returned 1
	[0139.615] CloseHandle (hObject=0x2cc) returned 1
	[0139.615] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.617] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0142.068] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0142.832] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0142.832] SetEvent (hEvent=0x30c) returned 1
	[0142.832] SetEvent (hEvent=0x70) returned 1
	[0142.832] SwitchToThread () returned 1
	[0142.838] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0142.916] SetEvent (hEvent=0x70) returned 1
	[0142.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b1ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b43f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x46039)) returned 1
	[0142.917] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0142.934] SetEvent (hEvent=0x70) returned 1
	[0142.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb)) returned 1
	[0142.934] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.128] SetEvent (hEvent=0x30c) returned 1
	[0143.128] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.137] SetEvent (hEvent=0x70) returned 1
	[0143.137] SetEvent (hEvent=0x2e4) returned 1
	[0143.137] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.237] SetEvent (hEvent=0x70) returned 1
	[0143.237] SetEvent (hEvent=0x2f4) returned 1
	[0143.237] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0143.284] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.284] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0143.476] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.476] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0143.477] SetEvent (hEvent=0x30c) returned 1
	[0143.477] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0143.503] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0143.504] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0143.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.504] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0143.504] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0143.504] ReadFile (in: hFile=0x2cc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.504] CloseHandle (hObject=0x2cc) returned 1
	[0143.504] SwitchToThread () returned 1
	[0143.524] GetFileType (hFile=0x344) returned 0x1
	[0143.524] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.524] WriteFile (in: hFile=0x344, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x124f1d00*=0x5000, lpOverlapped=0x124f1d0c) returned 1
	[0143.524] GetFileType (hFile=0x344) returned 0x1
	[0143.524] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x5000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.524] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0143.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0143.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0143.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0143.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0143.525] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0143.525] WriteFile (in: hFile=0x348, lpBuffer=0x125ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ee000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.526] CloseHandle (hObject=0x348) returned 1
	[0143.526] CloseHandle (hObject=0x344) returned 1
	[0143.526] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0143.529] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0143.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f)) returned 1
	[0143.529] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0143.529] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0143.529] ReadFile (in: hFile=0x344, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f1d1c*=0x142f, lpOverlapped=0x0) returned 1
	[0143.576] GetFileType (hFile=0x344) returned 0x1
	[0143.576] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.576] WriteFile (in: hFile=0x344, lpBuffer=0x1250d500*, nNumberOfBytesToWrite=0x142f, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1250d500*, lpNumberOfBytesWritten=0x124f1d00*=0x142f, lpOverlapped=0x124f1d0c) returned 1
	[0143.576] GetFileType (hFile=0x344) returned 0x1
	[0143.576] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x142f, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400901 | out: pbBuffer=0x12400901) returned 1
	[0143.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0143.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0143.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105c0 | out: pbBuffer=0x124105c0) returned 1
	[0143.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0143.577] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0143.577] WriteFile (in: hFile=0x340, lpBuffer=0x12460500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12460500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.578] CloseHandle (hObject=0x340) returned 1
	[0143.578] CloseHandle (hObject=0x344) returned 1
	[0143.578] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.580] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.659] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.675] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.685] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.694] SetEvent (hEvent=0x2e4) returned 1
	[0143.694] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.698] SetEvent (hEvent=0x70) returned 1
	[0143.698] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0143.711] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0143.711] SetEvent (hEvent=0x70) returned 1
	[0143.711] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0143.722] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0143.752] SetEvent (hEvent=0x2e4) returned 1
	[0143.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d)) returned 1
	[0143.756] SetEvent (hEvent=0x2e4) returned 1
	[0143.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1
	[0143.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0143.758] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d)) returned 1
	[0143.758] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0143.758] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0143.759] ReadFile (in: hFile=0x344, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12429d1c*=0x1a9d, lpOverlapped=0x0) returned 1
	[0143.796] GetFileType (hFile=0x344) returned 0x1
	[0143.796] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.796] WriteFile (in: hFile=0x344, lpBuffer=0x12458000*, nNumberOfBytesToWrite=0x1a9d, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12458000*, lpNumberOfBytesWritten=0x12429d00*=0x1a9d, lpOverlapped=0x12429d0c) returned 1
	[0143.797] GetFileType (hFile=0x344) returned 0x1
	[0143.797] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1a9d, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0143.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0143.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0143.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0143.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.798] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.798] WriteFile (in: hFile=0x33c, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.798] CloseHandle (hObject=0x33c) returned 1
	[0143.798] CloseHandle (hObject=0x344) returned 1
	[0143.798] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\preferences.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.801] SetEvent (hEvent=0x2e4) returned 1
	[0143.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0143.802] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00)) returned 1
	[0143.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0143.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0143.802] ReadFile (in: hFile=0x344, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0x3c00, lpOverlapped=0x0) returned 1
	[0143.868] GetFileType (hFile=0x344) returned 0x1
	[0143.868] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.868] WriteFile (in: hFile=0x344, lpBuffer=0x127de000*, nNumberOfBytesToWrite=0x3c00, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127de000*, lpNumberOfBytesWritten=0x12429d00*=0x3c00, lpOverlapped=0x12429d0c) returned 1
	[0143.868] GetFileType (hFile=0x344) returned 0x1
	[0143.868] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x3c00, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0143.869] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0143.869] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0143.869] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446f0 | out: pbBuffer=0x127446f0) returned 1
	[0143.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.869] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.869] WriteFile (in: hFile=0x34c, lpBuffer=0x1263af00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263af00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.870] CloseHandle (hObject=0x34c) returned 1
	[0143.870] CloseHandle (hObject=0x344) returned 1
	[0143.870] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0145.454] SetEvent (hEvent=0xa0) returned 1
	[0145.454] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0146.125] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0146.132] SetEvent (hEvent=0x2e8) returned 1
	[0146.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0146.133] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0146.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1
	[0146.133] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0146.133] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0146.133] ReadFile (in: hFile=0x33c, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f5d1c*=0x5000, lpOverlapped=0x0) returned 1
	[0146.141] GetFileType (hFile=0x33c) returned 0x1
	[0146.141] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.141] WriteFile (in: hFile=0x33c, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x124f5d00*=0x5000, lpOverlapped=0x124f5d0c) returned 1
	[0146.142] GetFileType (hFile=0x33c) returned 0x1
	[0146.142] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x5000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0146.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0146.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0146.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0146.142] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.142] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0146.142] WriteFile (in: hFile=0x344, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0146.143] CloseHandle (hObject=0x344) returned 1
	[0146.143] CloseHandle (hObject=0x33c) returned 1
	[0146.143] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0146.216] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0146.275] SetEvent (hEvent=0x30c) returned 1
	[0146.276] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.276] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0146.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0146.277] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0146.277] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0146.277] ReadFile (in: hFile=0x344, lpBuffer=0x12938000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12938000*, lpNumberOfBytesRead=0x124f5d1c*=0x11000, lpOverlapped=0x0) returned 1
	[0146.308] GetFileType (hFile=0x344) returned 0x1
	[0146.308] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.308] WriteFile (in: hFile=0x344, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x11000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x124f5d00*=0x11000, lpOverlapped=0x124f5d0c) returned 1
	[0146.309] GetFileType (hFile=0x344) returned 0x1
	[0146.309] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x11000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0146.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0146.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0146.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0146.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0146.309] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0146.309] WriteFile (in: hFile=0x33c, lpBuffer=0x1262c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262c000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0146.310] CloseHandle (hObject=0x33c) returned 1
	[0146.310] CloseHandle (hObject=0x344) returned 1
	[0146.310] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0146.314] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0146.322] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0146.366] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0146.417] SetEvent (hEvent=0x30c) returned 1
	[0146.417] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0146.495] SetEvent (hEvent=0x30c) returned 1
	[0146.495] SetEvent (hEvent=0x2e8) returned 1
	[0146.495] SetEvent (hEvent=0x2e4) returned 1
	[0146.495] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0146.924] SetEvent (hEvent=0x30c) returned 1
	[0146.924] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0146.970] SetEvent (hEvent=0x30c) returned 1
	[0146.970] SetEvent (hEvent=0x2e4) returned 1
	[0146.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0146.971] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0146.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0146.971] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0146.971] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0146.972] ReadFile (in: hFile=0x2cc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1276bd1c*=0x29, lpOverlapped=0x0) returned 1
	[0146.974] GetFileType (hFile=0x2cc) returned 0x1
	[0146.974] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.974] WriteFile (in: hFile=0x2cc, lpBuffer=0x1240a210*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x1240a210*, lpNumberOfBytesWritten=0x1276bd00*=0x29, lpOverlapped=0x1276bd0c) returned 1
	[0146.975] GetFileType (hFile=0x2cc) returned 0x1
	[0146.975] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x29, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0146.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0146.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0146.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0146.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.975] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0146.976] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0146.976] CloseHandle (hObject=0x344) returned 1
	[0146.977] CloseHandle (hObject=0x2cc) returned 1
	[0146.977] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0146.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0146.981] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0146.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0146.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0146.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0146.982] ReadFile (in: hFile=0x2cc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1276dd1c*=0x4000, lpOverlapped=0x0) returned 1
	[0147.009] GetFileType (hFile=0x2cc) returned 0x1
	[0147.009] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.009] WriteFile (in: hFile=0x2cc, lpBuffer=0x12522000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12522000*, lpNumberOfBytesWritten=0x1276dd00*=0x4000, lpOverlapped=0x1276dd0c) returned 1
	[0147.009] GetFileType (hFile=0x2cc) returned 0x1
	[0147.009] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0147.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0147.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0147.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0147.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0147.010] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0147.010] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0147.010] CloseHandle (hObject=0x344) returned 1
	[0147.010] CloseHandle (hObject=0x2cc) returned 1
	[0147.010] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0147.013] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0147.064] SetEvent (hEvent=0x2e4) returned 1
	[0147.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0147.065] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0147.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a)) returned 1
	[0147.065] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0147.065] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744378 | out: pbBuffer=0x12744378) returned 1
	[0147.066] ReadFile (in: hFile=0x344, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f1d1c*=0x1082a, lpOverlapped=0x0) returned 1
	[0147.081] GetFileType (hFile=0x344) returned 0x1
	[0147.081] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.081] WriteFile (in: hFile=0x344, lpBuffer=0x12714000*, nNumberOfBytesToWrite=0x1082a, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12714000*, lpNumberOfBytesWritten=0x124f1d00*=0x1082a, lpOverlapped=0x124f1d0c) returned 1
	[0147.082] GetFileType (hFile=0x344) returned 0x1
	[0147.082] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1082a, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.082] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0147.082] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0147.082] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0147.083] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444d0 | out: pbBuffer=0x127444d0) returned 1
	[0147.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0147.083] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0147.083] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0147.083] CloseHandle (hObject=0x340) returned 1
	[0147.083] CloseHandle (hObject=0x344) returned 1
	[0147.083] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0147.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0147.144] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0147.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\first run"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732760 | out: pbBuffer=0x12732760) returned 1
	[0147.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744508 | out: pbBuffer=0x12744508) returned 1
	[0147.144] ReadFile (in: hFile=0x344, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f3d1c*=0x0, lpOverlapped=0x0) returned 1
	[0147.144] CloseHandle (hObject=0x344) returned 1
	[0147.144] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0147.294] SetEvent (hEvent=0x2e4) returned 1
	[0147.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.294] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History\\*", lpFindFileData=0x1276ba44 | out: lpFindFileData=0x1276ba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0147.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0147.295] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0147.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8de8eaa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x126da7)) returned 1
	[0147.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732780 | out: pbBuffer=0x12732780) returned 1
	[0147.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0147.296] ReadFile (in: hFile=0x344, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0147.359] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0147.364] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0147.373] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0147.383] SetEvent (hEvent=0x2f4) returned 1
	[0147.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0147.384] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0147.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0147.384] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0147.384] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0147.385] ReadFile (in: hFile=0x34c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12429d1c*=0x1a00, lpOverlapped=0x0) returned 1
	[0147.387] GetFileType (hFile=0x34c) returned 0x1
	[0147.387] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.388] WriteFile (in: hFile=0x34c, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x12429d00*=0x1a00, lpOverlapped=0x12429d0c) returned 1
	[0147.388] GetFileType (hFile=0x34c) returned 0x1
	[0147.388] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1a00, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0147.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0147.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0147.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0147.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0147.389] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0147.389] WriteFile (in: hFile=0x348, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0147.389] CloseHandle (hObject=0x348) returned 1
	[0147.389] CloseHandle (hObject=0x34c) returned 1
	[0147.389] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0147.391] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0148.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0148.123] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0148.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0148.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0148.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0148.123] ReadFile (in: hFile=0x344, lpBuffer=0x12938000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12938000*, lpNumberOfBytesRead=0x124f1d1c*=0x7000, lpOverlapped=0x0) returned 1
	[0149.747] GetFileType (hFile=0x344) returned 0x1
	[0149.747] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0149.747] WriteFile (in: hFile=0x344, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x124f1d00*=0x7000, lpOverlapped=0x124f1d0c) returned 1
	[0149.747] GetFileType (hFile=0x344) returned 0x1
	[0149.747] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x7000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0149.748] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0149.748] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0149.748] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0149.748] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0149.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0149.748] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0149.748] WriteFile (in: hFile=0x340, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0149.749] CloseHandle (hObject=0x340) returned 1
	[0149.749] CloseHandle (hObject=0x344) returned 1
	[0149.749] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0149.751] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0150.309] SetEvent (hEvent=0x320) returned 1
	[0150.310] SetEvent (hEvent=0x2f4) returned 1
	[0150.310] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0150.344] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0150.344] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0150.379] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0150.380] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0150.422] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0150.422] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0150.422] SetEvent (hEvent=0x2f4) returned 1
	[0150.422] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0150.481] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0150.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0150.482] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0150.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0150.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0150.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0150.482] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0x0, lpOverlapped=0x0) returned 1
	[0150.483] CloseHandle (hObject=0x33c) returned 1
	[0150.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0150.483] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0150.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0150.484] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0150.484] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410048 | out: pbBuffer=0x12410048) returned 1
	[0150.484] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x43, lpOverlapped=0x0) returned 1
	[0150.487] GetFileType (hFile=0x33c) returned 0x1
	[0150.488] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0150.488] WriteFile (in: hFile=0x33c, lpBuffer=0x12616000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12616000*, lpNumberOfBytesWritten=0x1242bd00*=0x43, lpOverlapped=0x1242bd0c) returned 1
	[0150.488] GetFileType (hFile=0x33c) returned 0x1
	[0150.488] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0150.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0150.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0150.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0150.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103d0 | out: pbBuffer=0x124103d0) returned 1
	[0150.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0150.489] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0150.489] WriteFile (in: hFile=0x344, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0150.489] CloseHandle (hObject=0x344) returned 1
	[0150.730] SetEvent (hEvent=0xa0) returned 1
	[0150.730] CloseHandle (hObject=0x33c) returned 1
	[0150.901] SetEvent (hEvent=0xa0) returned 1
	[0150.901] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0152.264] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0152.818] SetEvent (hEvent=0x30c) returned 1
	[0152.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0152.820] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0152.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0152.820] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0152.821] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0152.821] ReadFile (in: hFile=0x33c, lpBuffer=0x128dc000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128dc000*, lpNumberOfBytesRead=0x124f1d1c*=0x43, lpOverlapped=0x0) returned 1
	[0152.822] GetFileType (hFile=0x33c) returned 0x1
	[0152.823] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0152.823] WriteFile (in: hFile=0x33c, lpBuffer=0x127e4000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127e4000*, lpNumberOfBytesWritten=0x124f1d00*=0x43, lpOverlapped=0x124f1d0c) returned 1
	[0152.823] GetFileType (hFile=0x33c) returned 0x1
	[0152.823] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0152.824] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0152.826] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0152.826] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0152.826] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880e0 | out: pbBuffer=0x127880e0) returned 1
	[0152.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0152.827] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0152.827] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261c000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0152.827] CloseHandle (hObject=0x2cc) returned 1
	[0152.827] CloseHandle (hObject=0x33c) returned 1
	[0152.828] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0153.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\ieonline.microsoft[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\ieonline.microsoft[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0153.464] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0153.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\ieonline.microsoft[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\ieonline.microsoft[1]"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0153.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0153.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788108 | out: pbBuffer=0x12788108) returned 1
	[0153.465] ReadFile (in: hFile=0x33c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0153.465] CloseHandle (hObject=0x33c) returned 1
	[0153.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0153.465] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0153.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0153.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0153.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788118 | out: pbBuffer=0x12788118) returned 1
	[0153.466] ReadFile (in: hFile=0x33c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1242bd1c*=0x43, lpOverlapped=0x0) returned 1
	[0153.467] GetFileType (hFile=0x33c) returned 0x1
	[0153.467] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0153.467] WriteFile (in: hFile=0x33c, lpBuffer=0x127e4140*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127e4140*, lpNumberOfBytesWritten=0x1242bd00*=0x43, lpOverlapped=0x1242bd0c) returned 1
	[0153.467] GetFileType (hFile=0x33c) returned 0x1
	[0153.467] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0153.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0153.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0153.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0153.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881d0 | out: pbBuffer=0x127881d0) returned 1
	[0153.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0153.468] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0153.468] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1261c500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0153.468] CloseHandle (hObject=0x2cc) returned 1
	[0153.468] CloseHandle (hObject=0x33c) returned 1
	[0153.468] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0153.658] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0154.184] SetEvent (hEvent=0x30c) returned 1
	[0154.184] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0154.229] SetEvent (hEvent=0x30c) returned 1
	[0154.229] SetEvent (hEvent=0x2e4) returned 1
	[0154.229] SetEvent (hEvent=0x320) returned 1
	[0154.229] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0154.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0154.658] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0154.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1
	[0154.658] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0154.658] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0154.659] ReadFile (in: hFile=0x344, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x1200, lpOverlapped=0x0) returned 1
	[0154.701] GetFileType (hFile=0x344) returned 0x1
	[0154.701] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.701] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f5d00*=0x1200, lpOverlapped=0x124f5d0c) returned 1
	[0154.701] GetFileType (hFile=0x344) returned 0x1
	[0154.702] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1200, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0154.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0154.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0154.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0154.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0154.703] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0154.703] WriteFile (in: hFile=0x340, lpBuffer=0x127d8000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d8000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0154.703] CloseHandle (hObject=0x340) returned 1
	[0154.851] CloseHandle (hObject=0x344) returned 1
	[0154.924] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.652] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0155.680] SetEvent (hEvent=0x2e8) returned 1
	[0155.680] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0155.885] SetEvent (hEvent=0x2e8) returned 1
	[0155.885] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0155.893] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0155.902] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0155.903] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0155.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1
	[0155.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0155.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0155.904] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f3d1c*=0x504, lpOverlapped=0x0) returned 1
	[0155.908] GetFileType (hFile=0x33c) returned 0x1
	[0155.908] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.909] WriteFile (in: hFile=0x33c, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0x504, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x124f3d00*=0x504, lpOverlapped=0x124f3d0c) returned 1
	[0155.909] GetFileType (hFile=0x33c) returned 0x1
	[0155.909] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x504, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.909] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0155.909] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0155.909] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0155.910] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0155.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0155.910] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0155.910] WriteFile (in: hFile=0x34c, lpBuffer=0x125f6500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f6500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.910] CloseHandle (hObject=0x34c) returned 1
	[0155.911] CloseHandle (hObject=0x33c) returned 1
	[0155.912] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.961] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0155.975] SetEvent (hEvent=0x2e4) returned 1
	[0155.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0155.976] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0155.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1
	[0155.977] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ed40 | out: pbBuffer=0x1240ed40) returned 1
	[0155.977] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410500 | out: pbBuffer=0x12410500) returned 1
	[0155.977] ReadFile (in: hFile=0x344, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f5d1c*=0x410, lpOverlapped=0x0) returned 1
	[0155.980] GetFileType (hFile=0x344) returned 0x1
	[0155.980] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.980] WriteFile (in: hFile=0x344, lpBuffer=0x124b4900*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124b4900*, lpNumberOfBytesWritten=0x124f5d00*=0x410, lpOverlapped=0x124f5d0c) returned 1
	[0155.981] GetFileType (hFile=0x344) returned 0x1
	[0155.981] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x410, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8801 | out: pbBuffer=0x127e8801) returned 1
	[0155.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8901 | out: pbBuffer=0x127e8901) returned 1
	[0155.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a01 | out: pbBuffer=0x127e8a01) returned 1
	[0155.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0155.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0155.982] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0155.982] WriteFile (in: hFile=0x33c, lpBuffer=0x12626f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.982] CloseHandle (hObject=0x33c) returned 1
	[0155.983] CloseHandle (hObject=0x344) returned 1
	[0155.988] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.031] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.034] SetEvent (hEvent=0x30c) returned 1
	[0156.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.035] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1
	[0156.035] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e400 | out: pbBuffer=0x1240e400) returned 1
	[0156.035] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0156.035] ReadFile (in: hFile=0x344, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12605d1c*=0x427, lpOverlapped=0x0) returned 1
	[0156.043] GetFileType (hFile=0x344) returned 0x1
	[0156.043] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.043] WriteFile (in: hFile=0x344, lpBuffer=0x12490480*, nNumberOfBytesToWrite=0x427, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x12490480*, lpNumberOfBytesWritten=0x12605d00*=0x427, lpOverlapped=0x12605d0c) returned 1
	[0156.044] GetFileType (hFile=0x344) returned 0x1
	[0156.044] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x427, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0156.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0156.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0156.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0156.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.045] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.045] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.046] CloseHandle (hObject=0x340) returned 1
	[0156.052] CloseHandle (hObject=0x344) returned 1
	[0156.054] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.161] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1
	[0156.161] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e0a0 | out: pbBuffer=0x1252e0a0) returned 1
	[0156.161] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e060 | out: pbBuffer=0x1251e060) returned 1
	[0156.161] ReadFile (in: hFile=0x340, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12605d1c*=0x4ff, lpOverlapped=0x0) returned 1
	[0156.183] GetFileType (hFile=0x340) returned 0x1
	[0156.183] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.183] WriteFile (in: hFile=0x340, lpBuffer=0x12626000*, nNumberOfBytesToWrite=0x4ff, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x12626000*, lpNumberOfBytesWritten=0x12605d00*=0x4ff, lpOverlapped=0x12605d0c) returned 1
	[0156.183] GetFileType (hFile=0x340) returned 0x1
	[0156.183] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x4ff, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec501 | out: pbBuffer=0x124ec501) returned 1
	[0156.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec601 | out: pbBuffer=0x124ec601) returned 1
	[0156.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0156.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e128 | out: pbBuffer=0x1251e128) returned 1
	[0156.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.184] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.184] WriteFile (in: hFile=0x344, lpBuffer=0x12626500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626500*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.208] CloseHandle (hObject=0x344) returned 1
	[0156.215] CloseHandle (hObject=0x340) returned 1
	[0156.216] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.248] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.252] SetEvent (hEvent=0x2e4) returned 1
	[0156.252] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.253] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1
	[0156.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0156.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0156.253] ReadFile (in: hFile=0x340, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x311, lpOverlapped=0x0) returned 1
	[0156.256] GetFileType (hFile=0x340) returned 0x1
	[0156.256] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.256] WriteFile (in: hFile=0x340, lpBuffer=0x124fa000*, nNumberOfBytesToWrite=0x311, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124fa000*, lpNumberOfBytesWritten=0x1242bd00*=0x311, lpOverlapped=0x1242bd0c) returned 1
	[0156.256] GetFileType (hFile=0x340) returned 0x1
	[0156.256] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x311, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.256] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0156.257] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0156.257] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0156.257] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0156.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.257] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.257] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.257] CloseHandle (hObject=0x344) returned 1
	[0156.259] CloseHandle (hObject=0x340) returned 1
	[0156.259] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.301] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.309] SetEvent (hEvent=0x2e8) returned 1
	[0156.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.310] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1
	[0156.310] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0156.310] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0156.311] ReadFile (in: hFile=0x340, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f5d1c*=0x401, lpOverlapped=0x0) returned 1
	[0156.314] GetFileType (hFile=0x340) returned 0x1
	[0156.314] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.314] WriteFile (in: hFile=0x340, lpBuffer=0x125e6000*, nNumberOfBytesToWrite=0x401, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125e6000*, lpNumberOfBytesWritten=0x124f5d00*=0x401, lpOverlapped=0x124f5d0c) returned 1
	[0156.315] GetFileType (hFile=0x340) returned 0x1
	[0156.315] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x401, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0156.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0156.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0156.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0156.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.316] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.316] WriteFile (in: hFile=0x344, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.316] CloseHandle (hObject=0x344) returned 1
	[0156.317] CloseHandle (hObject=0x340) returned 1
	[0156.318] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.356] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.361] SetEvent (hEvent=0x2e8) returned 1
	[0156.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.362] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1
	[0156.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0156.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0156.363] ReadFile (in: hFile=0x340, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f3d1c*=0x437, lpOverlapped=0x0) returned 1
	[0156.403] GetFileType (hFile=0x340) returned 0x1
	[0156.404] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.404] WriteFile (in: hFile=0x340, lpBuffer=0x125e6900*, nNumberOfBytesToWrite=0x437, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125e6900*, lpNumberOfBytesWritten=0x124f3d00*=0x437, lpOverlapped=0x124f3d0c) returned 1
	[0156.404] GetFileType (hFile=0x340) returned 0x1
	[0156.404] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x437, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.404] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0156.404] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0156.404] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0156.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0156.406] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.406] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.406] WriteFile (in: hFile=0x344, lpBuffer=0x125da500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125da500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.406] CloseHandle (hObject=0x344) returned 1
	[0156.448] CloseHandle (hObject=0x340) returned 1
	[0156.456] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.511] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.516] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.561] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.583] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.595] SetEvent (hEvent=0x30c) returned 1
	[0156.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.596] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0156.596] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0156.596] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0156.596] ReadFile (in: hFile=0x344, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f3d1c*=0x104, lpOverlapped=0x0) returned 1
	[0156.598] GetFileType (hFile=0x344) returned 0x1
	[0156.598] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.599] WriteFile (in: hFile=0x344, lpBuffer=0x1263a240*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1263a240*, lpNumberOfBytesWritten=0x124f3d00*=0x104, lpOverlapped=0x124f3d0c) returned 1
	[0156.599] GetFileType (hFile=0x344) returned 0x1
	[0156.599] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.599] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0156.599] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0156.599] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0156.599] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0156.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0156.600] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.600] WriteFile (in: hFile=0x2cc, lpBuffer=0x127ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.600] CloseHandle (hObject=0x2cc) returned 1
	[0156.600] CloseHandle (hObject=0x344) returned 1
	[0156.600] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.605] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.615] SetEvent (hEvent=0x30c) returned 1
	[0156.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\~last~.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\~last~.sharing.xml.obi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.615] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\~last~.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\~last~.sharing.xml.obi"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae80e80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9)) returned 1
	[0156.616] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0156.616] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0156.616] ReadFile (in: hFile=0x344, lpBuffer=0x12958000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12958000*, lpNumberOfBytesRead=0x124f5d1c*=0xb9, lpOverlapped=0x0) returned 1
	[0156.618] GetFileType (hFile=0x344) returned 0x1
	[0156.618] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.618] WriteFile (in: hFile=0x344, lpBuffer=0x12784000*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12784000*, lpNumberOfBytesWritten=0x124f5d00*=0xb9, lpOverlapped=0x124f5d0c) returned 1
	[0156.618] GetFileType (hFile=0x344) returned 0x1
	[0156.618] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xb9, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.619] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0156.619] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0156.619] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0156.619] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0156.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\~last~.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\~last~.sharing.xml.obi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0156.619] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.619] WriteFile (in: hFile=0x2cc, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.619] CloseHandle (hObject=0x2cc) returned 1
	[0156.619] CloseHandle (hObject=0x344) returned 1
	[0156.620] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\~last~.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\~last~.sharing.xml.obi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\~last~.sharing.xml.obi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\~last~.sharing.xml.obi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.621] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.714] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.739] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.743] SetEvent (hEvent=0x30c) returned 1
	[0156.743] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0156.743] SetEvent (hEvent=0x30c) returned 1
	[0156.743] SetEvent (hEvent=0x320) returned 1
	[0156.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.745] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0156.745] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0156.746] CloseHandle (hObject=0x344) returned 1
	[0156.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.756] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.756] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.756] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1
	[0156.756] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7314c10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7314c10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7314c10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1
	[0156.756] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.756] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.765] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0156.765] WriteFile (in: hFile=0x344, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0156.766] CloseHandle (hObject=0x344) returned 1
	[0156.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.770] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.770] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.770] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
	[0156.770] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.770] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.771] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.772] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0156.772] WriteFile (in: hFile=0x344, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0156.774] CloseHandle (hObject=0x344) returned 1
	[0156.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.775] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.775] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1
	[0156.775] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.775] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.777] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0156.777] WriteFile (in: hFile=0x344, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0156.778] CloseHandle (hObject=0x344) returned 1
	[0156.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.782] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826e2030, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826e2030, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0156.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1
	[0156.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1
	[0156.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x807f0230, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x854b47b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1
	[0156.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb653ec30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1
	[0156.805] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1
	[0156.805] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.805] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.808] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0156.808] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0156.810] CloseHandle (hObject=0x33c) returned 1
	[0156.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="B", cAlternateFileName="")) returned 1
	[0156.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1
	[0156.824] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D", cAlternateFileName="")) returned 1
	[0156.824] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E", cAlternateFileName="")) returned 1
	[0156.824] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F", cAlternateFileName="")) returned 1
	[0156.824] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1
	[0156.824] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1
	[0156.824] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1
	[0156.824] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1
	[0156.824] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.824] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.829] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0156.829] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0156.830] CloseHandle (hObject=0x33c) returned 1
	[0156.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.865] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.865] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.865] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="98", cAlternateFileName="")) returned 1
	[0156.866] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A8", cAlternateFileName="")) returned 1
	[0156.866] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.866] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.868] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0156.868] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0156.870] CloseHandle (hObject=0x33c) returned 1
	[0156.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.881] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.881] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8c39470, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.881] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="B60F3d01", cAlternateFileName="")) returned 1
	[0156.881] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.881] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.883] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0156.883] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0156.885] CloseHandle (hObject=0x33c) returned 1
	[0156.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e)) returned 1
	[0156.889] SetEvent (hEvent=0x30c) returned 1
	[0156.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.895] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.895] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.895] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x0, dwReserved1=0x0, cFileName="C3B7Bd01", cAlternateFileName="")) returned 1
	[0156.895] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.895] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.898] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0156.898] WriteFile (in: hFile=0x344, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0156.900] CloseHandle (hObject=0x344) returned 1
	[0156.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898)) returned 1
	[0156.925] SetEvent (hEvent=0x30c) returned 1
	[0156.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.926] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.926] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.927] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B", cAlternateFileName="")) returned 1
	[0156.927] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2", cAlternateFileName="")) returned 1
	[0156.927] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6", cAlternateFileName="")) returned 1
	[0156.927] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.927] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.929] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0156.929] WriteFile (in: hFile=0x33c, lpBuffer=0x1277d300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x1277d300*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0156.931] CloseHandle (hObject=0x33c) returned 1
	[0156.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.932] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.932] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.932] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCBF5d01", cAlternateFileName="")) returned 1
	[0156.932] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.932] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.934] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0156.934] WriteFile (in: hFile=0x33c, lpBuffer=0x1277e600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x1277e600*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0156.936] CloseHandle (hObject=0x33c) returned 1
	[0156.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd)) returned 1
	[0156.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.955] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.956] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.956] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B619d01", cAlternateFileName="")) returned 1
	[0156.956] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.956] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.961] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0156.961] WriteFile (in: hFile=0x33c, lpBuffer=0x1277f900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x1277f900*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0156.963] CloseHandle (hObject=0x33c) returned 1
	[0156.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05)) returned 1
	[0156.964] SetEvent (hEvent=0x30c) returned 1
	[0156.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.062] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.062] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d7ec50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.062] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CBD4Dd01", cAlternateFileName="")) returned 1
	[0157.062] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.062] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.068] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0157.069] WriteFile (in: hFile=0x2cc, lpBuffer=0x12780c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12780c00*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0157.070] CloseHandle (hObject=0x2cc) returned 1
	[0157.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b)) returned 1
	[0157.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.092] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.092] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.092] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\2\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\2\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0157.094] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.094] WriteFile (in: hFile=0x33c, lpBuffer=0x127dc000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x127dc000*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.096] CloseHandle (hObject=0x33c) returned 1
	[0157.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.108] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.108] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B", cAlternateFileName="")) returned 1
	[0157.108] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.108] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0157.111] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.111] WriteFile (in: hFile=0x340, lpBuffer=0x127dd300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x127dd300*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.113] CloseHandle (hObject=0x340) returned 1
	[0157.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.122] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.122] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb727c690, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.122] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D8FDd01", cAlternateFileName="")) returned 1
	[0157.122] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.122] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.126] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0157.126] WriteFile (in: hFile=0x344, lpBuffer=0x127de600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x127de600*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0157.127] CloseHandle (hObject=0x344) returned 1
	[0157.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543)) returned 1
	[0157.129] SetEvent (hEvent=0x2f4) returned 1
	[0157.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.130] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.130] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.130] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.130] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\4\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\4\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.132] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.132] WriteFile (in: hFile=0x344, lpBuffer=0x127df900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x127df900*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.134] CloseHandle (hObject=0x344) returned 1
	[0157.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.155] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.155] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb64f2970, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.155] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.155] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\5\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\5\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.157] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.157] WriteFile (in: hFile=0x2cc, lpBuffer=0x127e0c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x127e0c00*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.158] CloseHandle (hObject=0x2cc) returned 1
	[0157.159] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.163] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.163] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.163] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.163] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\6\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\6\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.165] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.165] WriteFile (in: hFile=0x2cc, lpBuffer=0x12714000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12714000*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.166] CloseHandle (hObject=0x2cc) returned 1
	[0157.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.186] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.186] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.188] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\7\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\7\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.194] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.194] WriteFile (in: hFile=0x344, lpBuffer=0x12715300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12715300*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.198] CloseHandle (hObject=0x344) returned 1
	[0157.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.199] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.199] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.199] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.199] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.199] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.199] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\8\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\8\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.201] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.201] WriteFile (in: hFile=0x344, lpBuffer=0x12716600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12716600*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.203] CloseHandle (hObject=0x344) returned 1
	[0157.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.207] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.208] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.208] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10", cAlternateFileName="")) returned 1
	[0157.208] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C", cAlternateFileName="")) returned 1
	[0157.208] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61", cAlternateFileName="")) returned 1
	[0157.208] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E0", cAlternateFileName="")) returned 1
	[0157.208] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.208] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.210] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.210] WriteFile (in: hFile=0x344, lpBuffer=0x12717900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12717900*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.212] CloseHandle (hObject=0x344) returned 1
	[0157.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x0, dwReserved1=0x0, cFileName="16A09d01", cAlternateFileName="")) returned 1
	[0157.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.217] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.219] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0157.219] WriteFile (in: hFile=0x344, lpBuffer=0x12718c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12718c00*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0157.221] CloseHandle (hObject=0x344) returned 1
	[0157.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f)) returned 1
	[0157.222] SetEvent (hEvent=0x2f4) returned 1
	[0157.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.226] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0157.237] SetEvent (hEvent=0x2f4) returned 1
	[0157.237] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0157.239] SetEvent (hEvent=0x2f4) returned 1
	[0157.239] SetEvent (hEvent=0x30c) returned 1
	[0157.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.239] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7d58af0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.239] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="24B53d01", cAlternateFileName="")) returned 1
	[0157.240] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.240] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.242] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0157.242] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0157.243] CloseHandle (hObject=0x344) returned 1
	[0157.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5)) returned 1
	[0157.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.250] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.250] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.250] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949, dwReserved0=0x0, dwReserved1=0x0, cFileName="28E95d01", cAlternateFileName="")) returned 1
	[0157.250] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.250] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.255] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0157.255] WriteFile (in: hFile=0x344, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0157.256] CloseHandle (hObject=0x344) returned 1
	[0157.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949)) returned 1
	[0157.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.259] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.259] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f, dwReserved0=0x0, dwReserved1=0x0, cFileName="F17B2d01", cAlternateFileName="")) returned 1
	[0157.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.259] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.264] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0157.264] WriteFile (in: hFile=0x344, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0157.265] CloseHandle (hObject=0x344) returned 1
	[0157.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f)) returned 1
	[0157.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.268] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.268] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.269] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.269] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.279] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\A\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\a\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.281] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.281] WriteFile (in: hFile=0x344, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.283] CloseHandle (hObject=0x344) returned 1
	[0157.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6518ad0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.288] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\B\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\b\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0157.292] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.292] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.293] CloseHandle (hObject=0x33c) returned 1
	[0157.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.294] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.295] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.295] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E6", cAlternateFileName="")) returned 1
	[0157.295] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.295] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0157.297] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.297] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.298] CloseHandle (hObject=0x33c) returned 1
	[0157.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.299] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.299] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.299] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839, dwReserved0=0x0, dwReserved1=0x0, cFileName="9DCB7d01", cAlternateFileName="")) returned 1
	[0157.300] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.300] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0157.302] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0157.302] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0157.303] CloseHandle (hObject=0x33c) returned 1
	[0157.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839)) returned 1
	[0157.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.311] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.311] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.311] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="08", cAlternateFileName="")) returned 1
	[0157.311] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.311] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0157.316] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.316] WriteFile (in: hFile=0x34c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.318] CloseHandle (hObject=0x34c) returned 1
	[0157.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.321] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8266, dwReserved0=0x0, dwReserved1=0x0, cFileName="71469d01", cAlternateFileName="")) returned 1
	[0157.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.322] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0157.326] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0157.326] WriteFile (in: hFile=0x34c, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0157.327] CloseHandle (hObject=0x34c) returned 1
	[0157.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8266)) returned 1
	[0157.328] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0157.662] SetEvent (hEvent=0x68) returned 1
	[0157.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.662] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125dfd0c | out: lpMode=0x125dfd0c) returned 0
	[0157.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01"), fInfoLevelId=0x0, lpFileInformation=0x125dfad0 | out: lpFileInformation=0x125dfad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb80063b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10d22)) returned 1
	[0157.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0157.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e038 | out: pbBuffer=0x1251e038) returned 1
	[0157.663] ReadFile (in: hFile=0x344, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125dfd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x125dfd1c*=0x10d22, lpOverlapped=0x0) returned 1
	[0157.736] GetFileType (hFile=0x344) returned 0x1
	[0157.736] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125dfce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.736] WriteFile (in: hFile=0x344, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x10d22, lpNumberOfBytesWritten=0x125dfd00, lpOverlapped=0x125dfd0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x125dfd00*=0x10d22, lpOverlapped=0x125dfd0c) returned 1
	[0157.753] GetFileType (hFile=0x344) returned 0x1
	[0157.753] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x10d22, lpNewFilePointer=0x0, dwMoveMethod=0x125dfce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed101 | out: pbBuffer=0x124ed101) returned 1
	[0157.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed201 | out: pbBuffer=0x124ed201) returned 1
	[0157.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed301 | out: pbBuffer=0x124ed301) returned 1
	[0157.754] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107a0 | out: pbBuffer=0x124107a0) returned 1
	[0157.754] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0157.754] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x125dfd0c | out: lpMode=0x125dfd0c) returned 0
	[0157.754] WriteFile (in: hFile=0x350, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125dfd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x125dfd0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.758] CloseHandle (hObject=0x350) returned 1
	[0157.758] CloseHandle (hObject=0x344) returned 1
	[0157.773] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.792] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0157.798] SetEvent (hEvent=0x320) returned 1
	[0157.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0157.801] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0157.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x823c2350, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa80f)) returned 1
	[0157.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732520 | out: pbBuffer=0x12732520) returned 1
	[0157.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124107b8 | out: pbBuffer=0x124107b8) returned 1
	[0157.801] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0157.804] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0157.804] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0157.804] SetEvent (hEvent=0xa0) returned 1
	[0157.804] SetEvent (hEvent=0x320) returned 1
	[0157.804] SetEvent (hEvent=0x30c) returned 1
	[0157.804] ReadFile (in: hFile=0x348, lpBuffer=0x1288a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1288a000*, lpNumberOfBytesRead=0x1242bd1c*=0xa80f, lpOverlapped=0x0) returned 1
	[0157.862] SetEvent (hEvent=0xa0) returned 1
	[0157.862] GetFileType (hFile=0x348) returned 0x1
	[0157.862] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.862] WriteFile (in: hFile=0x348, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0xa80f, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x1242bd00*=0xa80f, lpOverlapped=0x1242bd0c) returned 1
	[0157.863] GetFileType (hFile=0x348) returned 0x1
	[0157.863] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0xa80f, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.863] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0157.863] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0157.863] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec301 | out: pbBuffer=0x124ec301) returned 1
	[0157.864] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103f0 | out: pbBuffer=0x124103f0) returned 1
	[0157.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.864] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0157.864] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.864] CloseHandle (hObject=0x2cc) returned 1
	[0157.864] CloseHandle (hObject=0x348) returned 1
	[0157.864] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.867] SetEvent (hEvent=0x30c) returned 1
	[0157.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0157.868] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0157.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114)) returned 1
	[0157.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0157.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410418 | out: pbBuffer=0x12410418) returned 1
	[0157.868] ReadFile (in: hFile=0x348, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1242bd1c*=0x2114, lpOverlapped=0x0) returned 1
	[0158.548] GetFileType (hFile=0x348) returned 0x1
	[0158.548] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.548] WriteFile (in: hFile=0x348, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x2114, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1242bd00*=0x2114, lpOverlapped=0x1242bd0c) returned 1
	[0158.555] GetFileType (hFile=0x348) returned 0x1
	[0158.555] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x2114, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0158.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0158.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec901 | out: pbBuffer=0x124ec901) returned 1
	[0158.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0158.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0158.555] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0158.555] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0158.565] CloseHandle (hObject=0x34c) returned 1
	[0158.565] CloseHandle (hObject=0x348) returned 1
	[0158.571] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0158.574] SetEvent (hEvent=0x30c) returned 1
	[0158.574] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0158.574] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0158.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc399b820, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1
	[0158.574] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127326a0 | out: pbBuffer=0x127326a0) returned 1
	[0158.574] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0158.575] ReadFile (in: hFile=0x348, lpBuffer=0x1294a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1294a000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0158.606] GetFileType (hFile=0x348) returned 0x1
	[0158.606] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.607] WriteFile (in: hFile=0x348, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0158.607] GetFileType (hFile=0x348) returned 0x1
	[0158.607] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca01 | out: pbBuffer=0x124eca01) returned 1
	[0158.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb01 | out: pbBuffer=0x124ecb01) returned 1
	[0158.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc01 | out: pbBuffer=0x124ecc01) returned 1
	[0158.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106e0 | out: pbBuffer=0x124106e0) returned 1
	[0158.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0158.608] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0158.608] WriteFile (in: hFile=0x34c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0158.610] CloseHandle (hObject=0x34c) returned 1
	[0158.610] CloseHandle (hObject=0x348) returned 1
	[0158.610] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0158.620] SetEvent (hEvent=0x2e4) returned 1
	[0158.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0158.621] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0158.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1
	[0158.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127328c0 | out: pbBuffer=0x127328c0) returned 1
	[0158.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106f8 | out: pbBuffer=0x124106f8) returned 1
	[0158.621] ReadFile (in: hFile=0x348, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0x1, lpOverlapped=0x0) returned 1
	[0158.630] GetFileType (hFile=0x348) returned 0x1
	[0158.630] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.630] WriteFile (in: hFile=0x348, lpBuffer=0x12410710*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12410710*, lpNumberOfBytesWritten=0x1242bd00*=0x1, lpOverlapped=0x1242bd0c) returned 1
	[0158.630] GetFileType (hFile=0x348) returned 0x1
	[0158.630] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x1, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd01 | out: pbBuffer=0x124ecd01) returned 1
	[0158.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece01 | out: pbBuffer=0x124ece01) returned 1
	[0158.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf01 | out: pbBuffer=0x124ecf01) returned 1
	[0158.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410800 | out: pbBuffer=0x12410800) returned 1
	[0158.631] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x358
	[0158.631] GetConsoleMode (in: hConsoleHandle=0x358, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0158.631] WriteFile (in: hFile=0x358, lpBuffer=0x1245e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1245e000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0158.632] CloseHandle (hObject=0x358) returned 1
	[0158.632] CloseHandle (hObject=0x348) returned 1
	[0158.632] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0158.635] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0159.964] SetEvent (hEvent=0x30c) returned 1
	[0159.965] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0160.003] SetEvent (hEvent=0x30c) returned 1
	[0160.003] SetEvent (hEvent=0x68) returned 1
	[0160.003] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0160.180] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0160.739] SetEvent (hEvent=0x320) returned 1
	[0160.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0160.741] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0160.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0160.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0160.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744378 | out: pbBuffer=0x12744378) returned 1
	[0160.741] ReadFile (in: hFile=0x33c, lpBuffer=0x1266c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1266c000*, lpNumberOfBytesRead=0x124f5d1c*=0x4000, lpOverlapped=0x0) returned 1
	[0160.785] GetFileType (hFile=0x33c) returned 0x1
	[0160.785] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0160.785] WriteFile (in: hFile=0x33c, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x124f5d00*=0x4000, lpOverlapped=0x124f5d0c) returned 1
	[0160.786] GetFileType (hFile=0x33c) returned 0x1
	[0160.786] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0160.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0160.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0160.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0160.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444d0 | out: pbBuffer=0x127444d0) returned 1
	[0160.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0160.787] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0160.787] WriteFile (in: hFile=0x350, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0160.788] CloseHandle (hObject=0x350) returned 1
	[0160.788] CloseHandle (hObject=0x33c) returned 1
	[0160.788] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Cookies\\index.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cookies\\index.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0160.928] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0160.975] SetEvent (hEvent=0x2e4) returned 1
	[0160.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCexAVKgk.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gcexavkgk.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0160.976] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0160.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCexAVKgk.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gcexavkgk.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b058aa0, ftCreationTime.dwHighDateTime=0x1d5e415, ftLastAccessTime.dwLowDateTime=0xfb6ecf50, ftLastAccessTime.dwHighDateTime=0x1d5d997, ftLastWriteTime.dwLowDateTime=0xfb6ecf50, ftLastWriteTime.dwHighDateTime=0x1d5d997, nFileSizeHigh=0x0, nFileSizeLow=0x5623)) returned 1
	[0160.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0160.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0160.976] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1245dd1c*=0x5623, lpOverlapped=0x0) returned 1
	[0161.036] GetFileType (hFile=0x33c) returned 0x1
	[0161.036] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.037] WriteFile (in: hFile=0x33c, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x5623, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x1245dd00*=0x5623, lpOverlapped=0x1245dd0c) returned 1
	[0161.037] GetFileType (hFile=0x33c) returned 0x1
	[0161.037] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x5623, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.037] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0161.037] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0161.037] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0161.037] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0161.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCexAVKgk.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gcexavkgk.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.038] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0161.038] WriteFile (in: hFile=0x340, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.038] CloseHandle (hObject=0x340) returned 1
	[0161.038] CloseHandle (hObject=0x33c) returned 1
	[0161.038] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCexAVKgk.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gcexavkgk.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\GCexAVKgk.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gcexavkgk.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LZJv.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lzjv.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0161.044] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0161.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LZJv.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lzjv.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6588d460, ftCreationTime.dwHighDateTime=0x1d5dd3c, ftLastAccessTime.dwLowDateTime=0xcc64bb10, ftLastAccessTime.dwHighDateTime=0x1d5e104, ftLastWriteTime.dwLowDateTime=0xcc64bb10, ftLastWriteTime.dwHighDateTime=0x1d5e104, nFileSizeHigh=0x0, nFileSizeLow=0x10ade)) returned 1
	[0161.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0161.045] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0161.045] ReadFile (in: hFile=0x33c, lpBuffer=0x128c2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x128c2000*, lpNumberOfBytesRead=0x1245dd1c*=0x10ade, lpOverlapped=0x0) returned 1
	[0161.085] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0161.239] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0161.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OxNwH0wrLkaUZQi.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\oxnwh0wrlkauzqi.mp4"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf5403a30, ftCreationTime.dwHighDateTime=0x1d5d9db, ftLastAccessTime.dwLowDateTime=0x361c12b0, ftLastAccessTime.dwHighDateTime=0x1d5d7f0, ftLastWriteTime.dwLowDateTime=0x361c12b0, ftLastWriteTime.dwHighDateTime=0x1d5d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x18f47)) returned 1
	[0161.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\QeS5KaTkQ97fY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qes5katkq97fy.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24e2ef90, ftCreationTime.dwHighDateTime=0x1d5e7a5, ftLastAccessTime.dwLowDateTime=0x43439c80, ftLastAccessTime.dwHighDateTime=0x1d5dfa5, ftLastWriteTime.dwLowDateTime=0x43439c80, ftLastWriteTime.dwHighDateTime=0x1d5dfa5, nFileSizeHigh=0x0, nFileSizeLow=0x1819b)) returned 1
	[0161.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OxNwH0wrLkaUZQi.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\oxnwh0wrlkauzqi.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.430] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0161.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OxNwH0wrLkaUZQi.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\oxnwh0wrlkauzqi.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf5403a30, ftCreationTime.dwHighDateTime=0x1d5d9db, ftLastAccessTime.dwLowDateTime=0x361c12b0, ftLastAccessTime.dwHighDateTime=0x1d5d7f0, ftLastWriteTime.dwLowDateTime=0x361c12b0, ftLastWriteTime.dwHighDateTime=0x1d5d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x18f47)) returned 1
	[0161.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0161.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0161.431] ReadFile (in: hFile=0x340, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0x18f47, lpOverlapped=0x0) returned 1
	[0161.517] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0161.517] SetEvent (hEvent=0x2e4) returned 1
	[0161.518] GetFileType (hFile=0x340) returned 0x1
	[0161.518] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.518] WriteFile (in: hFile=0x340, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x18f47, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x1242bd00*=0x18f47, lpOverlapped=0x1242bd0c) returned 1
	[0161.519] GetFileType (hFile=0x340) returned 0x1
	[0161.519] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x18f47, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0161.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0161.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0161.520] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0161.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OxNwH0wrLkaUZQi.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\oxnwh0wrlkauzqi.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0161.520] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0161.520] WriteFile (in: hFile=0x344, lpBuffer=0x12680000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12680000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.520] CloseHandle (hObject=0x344) returned 1
	[0161.520] CloseHandle (hObject=0x340) returned 1
	[0161.520] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OxNwH0wrLkaUZQi.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\oxnwh0wrlkauzqi.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\OxNwH0wrLkaUZQi.mp4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\oxnwh0wrlkauzqi.mp4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.528] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0161.568] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0161.568] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0161.569] SetEvent (hEvent=0x2e4) returned 1
	[0161.569] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0161.643] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0161.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Qn_DRcPU5aoUEc8om.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qn_drcpu5aouec8om.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x351ea2c0, ftCreationTime.dwHighDateTime=0x1d5e0aa, ftLastAccessTime.dwLowDateTime=0xebb24d50, ftLastAccessTime.dwHighDateTime=0x1d5dba7, ftLastWriteTime.dwLowDateTime=0xebb24d50, ftLastWriteTime.dwHighDateTime=0x1d5dba7, nFileSizeHigh=0x0, nFileSizeLow=0x1437)) returned 1
	[0161.643] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0161.643] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0161.643] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f5d1c*=0x1437, lpOverlapped=0x0) returned 1
	[0161.692] GetFileType (hFile=0x33c) returned 0x1
	[0161.692] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.692] WriteFile (in: hFile=0x33c, lpBuffer=0x1250d500*, nNumberOfBytesToWrite=0x1437, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1250d500*, lpNumberOfBytesWritten=0x124f5d00*=0x1437, lpOverlapped=0x124f5d0c) returned 1
	[0161.693] GetFileType (hFile=0x33c) returned 0x1
	[0161.693] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1437, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0161.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0161.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0161.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0161.693] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Qn_DRcPU5aoUEc8om.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qn_drcpu5aouec8om.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.694] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0161.694] WriteFile (in: hFile=0x340, lpBuffer=0x12680500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12680500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.694] CloseHandle (hObject=0x340) returned 1
	[0161.694] CloseHandle (hObject=0x33c) returned 1
	[0161.694] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Qn_DRcPU5aoUEc8om.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qn_drcpu5aouec8om.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Qn_DRcPU5aoUEc8om.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qn_drcpu5aouec8om.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.754] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0161.755] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0161.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0161.755] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0161.755] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0161.755] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12429d1c*=0x43, lpOverlapped=0x0) returned 1
	[0161.757] GetFileType (hFile=0x33c) returned 0x1
	[0161.757] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.757] WriteFile (in: hFile=0x33c, lpBuffer=0x1272c2d0*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1272c2d0*, lpNumberOfBytesWritten=0x12429d00*=0x43, lpOverlapped=0x12429d0c) returned 1
	[0161.757] GetFileType (hFile=0x33c) returned 0x1
	[0161.757] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0161.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0161.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0161.758] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0161.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0161.758] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0161.758] WriteFile (in: hFile=0x350, lpBuffer=0x12680a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12680a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.758] CloseHandle (hObject=0x350) returned 1
	[0161.758] CloseHandle (hObject=0x33c) returned 1
	[0161.758] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V0CQP.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v0cqp.rtf"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x468b090, ftCreationTime.dwHighDateTime=0x1d5df82, ftLastAccessTime.dwLowDateTime=0xb5892f60, ftLastAccessTime.dwHighDateTime=0x1d5e64b, ftLastWriteTime.dwLowDateTime=0xb5892f60, ftLastWriteTime.dwHighDateTime=0x1d5e64b, nFileSizeHigh=0x0, nFileSizeLow=0x4527)) returned 1
	[0161.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V1-6Rq.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v1-6rq.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb80fa20, ftCreationTime.dwHighDateTime=0x1d5e146, ftLastAccessTime.dwLowDateTime=0x323bad90, ftLastAccessTime.dwHighDateTime=0x1d5d7d7, ftLastWriteTime.dwLowDateTime=0x323bad90, ftLastWriteTime.dwHighDateTime=0x1d5d7d7, nFileSizeHigh=0x0, nFileSizeLow=0xaf37)) returned 1
	[0161.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V0CQP.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v0cqp.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0161.999] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0161.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V0CQP.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v0cqp.rtf"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x468b090, ftCreationTime.dwHighDateTime=0x1d5df82, ftLastAccessTime.dwLowDateTime=0xb5892f60, ftLastAccessTime.dwHighDateTime=0x1d5e64b, ftLastWriteTime.dwLowDateTime=0xb5892f60, ftLastWriteTime.dwHighDateTime=0x1d5e64b, nFileSizeHigh=0x0, nFileSizeLow=0x4527)) returned 1
	[0161.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324a0 | out: pbBuffer=0x127324a0) returned 1
	[0161.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0161.999] ReadFile (in: hFile=0x33c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12429d1c*=0x4527, lpOverlapped=0x0) returned 1
	[0162.049] GetFileType (hFile=0x33c) returned 0x1
	[0162.049] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.049] WriteFile (in: hFile=0x33c, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0x4527, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x12429d00*=0x4527, lpOverlapped=0x12429d0c) returned 1
	[0162.049] GetFileType (hFile=0x33c) returned 0x1
	[0162.049] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4527, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.050] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0162.050] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0162.050] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0162.050] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e8e0 | out: pbBuffer=0x1251e8e0) returned 1
	[0162.050] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V0CQP.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v0cqp.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0162.050] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0162.050] WriteFile (in: hFile=0x354, lpBuffer=0x12681400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12681400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.051] CloseHandle (hObject=0x354) returned 1
	[0162.051] CloseHandle (hObject=0x33c) returned 1
	[0162.051] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V0CQP.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v0cqp.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\V0CQP.rtf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\v0cqp.rtf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.104] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0162.115] SwitchToThread () returned 1
	[0162.174] SwitchToThread () returned 1
	[0162.175] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0162.176] SetEvent (hEvent=0x68) returned 1
	[0162.176] SetEvent (hEvent=0x70) returned 1
	[0162.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\VBj DzpAPGzF3j.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vbj dzpapgzf3j.gif"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5599d300, ftCreationTime.dwHighDateTime=0x1d5e2b5, ftLastAccessTime.dwLowDateTime=0x5bf78ea0, ftLastAccessTime.dwHighDateTime=0x1d5e296, ftLastWriteTime.dwLowDateTime=0x5bf78ea0, ftLastWriteTime.dwHighDateTime=0x1d5e296, nFileSizeHigh=0x0, nFileSizeLow=0x1374c)) returned 1
	[0162.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb51728d0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xb51728d0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb51728d0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.205] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb51728d0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xb51728d0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb51728d0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.205] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb51728d0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xb51728d0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb51728d0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.205] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.205] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\WPDNSE\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\wpdnse\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0162.208] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0162.208] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0162.210] CloseHandle (hObject=0x340) returned 1
	[0162.210] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Y68O.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\y68o.wav"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f111500, ftCreationTime.dwHighDateTime=0x1d5d861, ftLastAccessTime.dwLowDateTime=0xb562d500, ftLastAccessTime.dwHighDateTime=0x1d5e582, ftLastWriteTime.dwLowDateTime=0xb562d500, ftLastWriteTime.dwHighDateTime=0x1d5e582, nFileSizeHigh=0x0, nFileSizeLow=0x1668b)) returned 1
	[0162.227] SetEvent (hEvent=0xa0) returned 1
	[0162.227] SetEvent (hEvent=0x68) returned 1
	[0162.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\acKsRzA IaCKL6.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\acksrza iackl6.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1e694c0, ftCreationTime.dwHighDateTime=0x1d5e471, ftLastAccessTime.dwLowDateTime=0x1498dd50, ftLastAccessTime.dwHighDateTime=0x1d5db40, ftLastWriteTime.dwLowDateTime=0x1498dd50, ftLastWriteTime.dwHighDateTime=0x1d5db40, nFileSizeHigh=0x0, nFileSizeLow=0x126d)) returned 1
	[0162.234] SetEvent (hEvent=0x68) returned 1
	[0162.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\baQLVf.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\baqlvf.avi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15aa0140, ftCreationTime.dwHighDateTime=0x1d5da66, ftLastAccessTime.dwLowDateTime=0x27d24080, ftLastAccessTime.dwHighDateTime=0x1d5e335, ftLastWriteTime.dwLowDateTime=0x27d24080, ftLastWriteTime.dwHighDateTime=0x1d5e335, nFileSizeHigh=0x0, nFileSizeLow=0x5a7c)) returned 1
	[0162.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\bst449D.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bst449d.tmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6be9bb00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6be9bb00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x6be9bb00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dUmvLSpm1YlmZ-wBP.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dumvlspm1ylmz-wbp.gif"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb43f5b0, ftCreationTime.dwHighDateTime=0x1d5e5f5, ftLastAccessTime.dwLowDateTime=0x42bbf590, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x42bbf590, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x17455)) returned 1
	[0162.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\bst449D.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bst449d.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.244] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0162.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\bst449D.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\bst449d.tmp"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6be9bb00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6be9bb00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x6be9bb00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.244] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ed20 | out: pbBuffer=0x1240ed20) returned 1
	[0162.244] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410560 | out: pbBuffer=0x12410560) returned 1
	[0162.244] ReadFile (in: hFile=0x344, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0162.244] CloseHandle (hObject=0x344) returned 1
	[0162.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dUmvLSpm1YlmZ-wBP.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dumvlspm1ylmz-wbp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.245] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0162.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dUmvLSpm1YlmZ-wBP.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dumvlspm1ylmz-wbp.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb43f5b0, ftCreationTime.dwHighDateTime=0x1d5e5f5, ftLastAccessTime.dwLowDateTime=0x42bbf590, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x42bbf590, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x17455)) returned 1
	[0162.245] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ed40 | out: pbBuffer=0x1240ed40) returned 1
	[0162.245] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410570 | out: pbBuffer=0x12410570) returned 1
	[0162.245] ReadFile (in: hFile=0x344, lpBuffer=0x1282c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1282c000*, lpNumberOfBytesRead=0x12429d1c*=0x17455, lpOverlapped=0x0) returned 1
	[0162.264] GetFileType (hFile=0x344) returned 0x1
	[0162.264] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.264] WriteFile (in: hFile=0x344, lpBuffer=0x125ae000*, nNumberOfBytesToWrite=0x17455, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125ae000*, lpNumberOfBytesWritten=0x12429d00*=0x17455, lpOverlapped=0x12429d0c) returned 1
	[0162.265] GetFileType (hFile=0x344) returned 0x1
	[0162.265] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x17455, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0162.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0162.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0162.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410648 | out: pbBuffer=0x12410648) returned 1
	[0162.265] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dUmvLSpm1YlmZ-wBP.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dumvlspm1ylmz-wbp.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0162.265] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0162.265] WriteFile (in: hFile=0x350, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.266] CloseHandle (hObject=0x350) returned 1
	[0162.266] CloseHandle (hObject=0x344) returned 1
	[0162.266] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dUmvLSpm1YlmZ-wBP.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dumvlspm1ylmz-wbp.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\dUmvLSpm1YlmZ-wBP.gif.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\dumvlspm1ylmz-wbp.gif.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ey2SCFlW9bAkVQT2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ey2scflw9bakvqt2.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2850f370, ftCreationTime.dwHighDateTime=0x1d5da8f, ftLastAccessTime.dwLowDateTime=0x245d4450, ftLastAccessTime.dwHighDateTime=0x1d5da3d, ftLastWriteTime.dwLowDateTime=0x245d4450, ftLastWriteTime.dwHighDateTime=0x1d5da3d, nFileSizeHigh=0x0, nFileSizeLow=0x7086)) returned 1
	[0162.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gmmwsk3 dGA3ax.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gmmwsk3 dga3ax.mp4"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6bab130, ftCreationTime.dwHighDateTime=0x1d5e4f0, ftLastAccessTime.dwLowDateTime=0xe350fd20, ftLastAccessTime.dwHighDateTime=0x1d5e514, ftLastWriteTime.dwLowDateTime=0xe350fd20, ftLastWriteTime.dwHighDateTime=0x1d5e514, nFileSizeHigh=0x0, nFileSizeLow=0x4d21)) returned 1
	[0162.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\guhNBmJGTnVeriINiWLp.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\guhnbmjgtnveriiniwlp.flv"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x586464d0, ftCreationTime.dwHighDateTime=0x1d5e12d, ftLastAccessTime.dwLowDateTime=0xc50f0a90, ftLastAccessTime.dwHighDateTime=0x1d5e015, ftLastWriteTime.dwLowDateTime=0xc50f0a90, ftLastWriteTime.dwHighDateTime=0x1d5e015, nFileSizeHigh=0x0, nFileSizeLow=0x18fd2)) returned 1
	[0162.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gmmwsk3 dGA3ax.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gmmwsk3 dga3ax.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.280] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0162.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gmmwsk3 dGA3ax.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gmmwsk3 dga3ax.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6bab130, ftCreationTime.dwHighDateTime=0x1d5e4f0, ftLastAccessTime.dwLowDateTime=0xe350fd20, ftLastAccessTime.dwHighDateTime=0x1d5e514, ftLastWriteTime.dwLowDateTime=0xe350fd20, ftLastWriteTime.dwHighDateTime=0x1d5e514, nFileSizeHigh=0x0, nFileSizeLow=0x4d21)) returned 1
	[0162.280] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f2e0 | out: pbBuffer=0x1240f2e0) returned 1
	[0162.280] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410670 | out: pbBuffer=0x12410670) returned 1
	[0162.280] ReadFile (in: hFile=0x344, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x4d21, lpOverlapped=0x0) returned 1
	[0162.303] GetFileType (hFile=0x344) returned 0x1
	[0162.303] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.304] WriteFile (in: hFile=0x344, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x4d21, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x12429d00*=0x4d21, lpOverlapped=0x12429d0c) returned 1
	[0162.304] GetFileType (hFile=0x344) returned 0x1
	[0162.304] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x4d21, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.304] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0162.304] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0162.304] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0162.305] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410778 | out: pbBuffer=0x12410778) returned 1
	[0162.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gmmwsk3 dGA3ax.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gmmwsk3 dga3ax.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0162.305] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0162.305] WriteFile (in: hFile=0x354, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.305] CloseHandle (hObject=0x354) returned 1
	[0162.305] CloseHandle (hObject=0x344) returned 1
	[0162.305] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gmmwsk3 dGA3ax.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gmmwsk3 dga3ax.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\gmmwsk3 dGA3ax.mp4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\gmmwsk3 dga3ax.mp4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\jxznuzrhQcG2KGu.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\jxznuzrhqcg2kgu.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1b54ba0, ftCreationTime.dwHighDateTime=0x1d5dbe5, ftLastAccessTime.dwLowDateTime=0x68aa4990, ftLastAccessTime.dwHighDateTime=0x1d5dd45, ftLastWriteTime.dwLowDateTime=0x68aa4990, ftLastWriteTime.dwHighDateTime=0x1d5dd45, nFileSizeHigh=0x0, nFileSizeLow=0x14486)) returned 1
	[0162.340] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0162.386] SetEvent (hEvent=0x68) returned 1
	[0162.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\m_0F 5e.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\m_0f 5e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0162.387] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0162.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\m_0F 5e.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\m_0f 5e.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8a811180, ftCreationTime.dwHighDateTime=0x1d5e2da, ftLastAccessTime.dwLowDateTime=0x8c2ff4d0, ftLastAccessTime.dwHighDateTime=0x1d5e07b, ftLastWriteTime.dwLowDateTime=0x8c2ff4d0, ftLastWriteTime.dwHighDateTime=0x1d5e07b, nFileSizeHigh=0x0, nFileSizeLow=0x17840)) returned 1
	[0162.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0162.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0162.387] ReadFile (in: hFile=0x33c, lpBuffer=0x1267a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1267a000*, lpNumberOfBytesRead=0x124f1d1c*=0x17840, lpOverlapped=0x0) returned 1
	[0162.423] GetFileType (hFile=0x33c) returned 0x1
	[0162.424] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.424] WriteFile (in: hFile=0x33c, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0x17840, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x124f1d00*=0x17840, lpOverlapped=0x124f1d0c) returned 1
	[0162.507] GetFileType (hFile=0x33c) returned 0x1
	[0162.507] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x17840, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.507] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0162.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0162.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0162.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788190 | out: pbBuffer=0x12788190) returned 1
	[0162.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\m_0F 5e.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\m_0f 5e.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0162.508] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0162.508] WriteFile (in: hFile=0x354, lpBuffer=0x125dc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.540] CloseHandle (hObject=0x354) returned 1
	[0162.541] CloseHandle (hObject=0x33c) returned 1
	[0162.543] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\m_0F 5e.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\m_0f 5e.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\m_0F 5e.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\m_0f 5e.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.586] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0162.593] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0162.612] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0162.675] SetEvent (hEvent=0x68) returned 1
	[0162.675] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0162.680] SetEvent (hEvent=0x320) returned 1
	[0162.681] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0162.688] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0162.688] SetEvent (hEvent=0x320) returned 1
	[0162.688] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0162.689] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0162.782] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0162.805] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0162.820] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.097] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.101] SetEvent (hEvent=0x68) returned 1
	[0163.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.103] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561)) returned 1
	[0163.103] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0163.103] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e010 | out: pbBuffer=0x1251e010) returned 1
	[0163.103] ReadFile (in: hFile=0x34c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f5d1c*=0x561, lpOverlapped=0x0) returned 1
	[0163.128] GetFileType (hFile=0x34c) returned 0x1
	[0163.128] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.128] WriteFile (in: hFile=0x34c, lpBuffer=0x127de000*, nNumberOfBytesToWrite=0x561, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127de000*, lpNumberOfBytesWritten=0x124f5d00*=0x561, lpOverlapped=0x124f5d0c) returned 1
	[0163.128] GetFileType (hFile=0x34c) returned 0x1
	[0163.128] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x561, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434301 | out: pbBuffer=0x12434301) returned 1
	[0163.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434401 | out: pbBuffer=0x12434401) returned 1
	[0163.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434501 | out: pbBuffer=0x12434501) returned 1
	[0163.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0163.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.129] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.129] WriteFile (in: hFile=0x350, lpBuffer=0x125d8000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125d8000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.129] CloseHandle (hObject=0x350) returned 1
	[0163.132] CloseHandle (hObject=0x34c) returned 1
	[0163.133] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.161] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.170] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.194] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.211] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.223] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.228] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.229] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7)) returned 1
	[0163.229] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0163.229] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744020 | out: pbBuffer=0x12744020) returned 1
	[0163.229] ReadFile (in: hFile=0x34c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f5d1c*=0x2d7, lpOverlapped=0x0) returned 1
	[0163.236] GetFileType (hFile=0x34c) returned 0x1
	[0163.236] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.236] WriteFile (in: hFile=0x34c, lpBuffer=0x1260a600*, nNumberOfBytesToWrite=0x2d7, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260a600*, lpNumberOfBytesWritten=0x124f5d00*=0x2d7, lpOverlapped=0x124f5d0c) returned 1
	[0163.236] GetFileType (hFile=0x34c) returned 0x1
	[0163.236] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x2d7, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca081 | out: pbBuffer=0x127ca081) returned 1
	[0163.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca181 | out: pbBuffer=0x127ca181) returned 1
	[0163.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca281 | out: pbBuffer=0x127ca281) returned 1
	[0163.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0163.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.237] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.237] WriteFile (in: hFile=0x344, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.238] CloseHandle (hObject=0x344) returned 1
	[0163.242] CloseHandle (hObject=0x34c) returned 1
	[0163.244] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.281] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.326] SetEvent (hEvent=0x320) returned 1
	[0163.326] SetEvent (hEvent=0x2f4) returned 1
	[0163.326] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0163.327] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0163.327] SetEvent (hEvent=0x2f4) returned 1
	[0163.327] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0163.329] SetEvent (hEvent=0x30c) returned 1
	[0163.329] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.649] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.650] SetEvent (hEvent=0x30c) returned 1
	[0163.650] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.651] SetEvent (hEvent=0x30c) returned 1
	[0163.651] SetEvent (hEvent=0x320) returned 1
	[0163.651] SwitchToThread () returned 1
	[0163.651] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0163.861] SetEvent (hEvent=0x320) returned 1
	[0163.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1
	[0163.863] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0164.029] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0165.080] SetEvent (hEvent=0x318) returned 1
	[0165.080] SetEvent (hEvent=0x30c) returned 1
	[0165.080] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.615] SetEvent (hEvent=0x2e8) returned 1
	[0167.615] SetEvent (hEvent=0x68) returned 1
	[0167.615] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.618] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.841] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.842] SetEvent (hEvent=0x68) returned 1
	[0167.842] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.845] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.854] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.869] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.882] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.898] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.911] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.928] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.946] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0167.976] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.015] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.029] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.040] SetEvent (hEvent=0x318) returned 1
	[0168.040] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.050] SetEvent (hEvent=0x68) returned 1
	[0168.051] SetEvent (hEvent=0x2e8) returned 1
	[0168.051] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0168.052] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0168.055] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0168.055] SetEvent (hEvent=0x68) returned 1
	[0168.055] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0168.072] SwitchToThread () returned 1
	[0168.073] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.288] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.293] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.294] SetEvent (hEvent=0x2e8) returned 1
	[0168.295] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.298] SetEvent (hEvent=0x2e8) returned 1
	[0168.298] SetEvent (hEvent=0x318) returned 1
	[0168.298] SwitchToThread () returned 1
	[0168.299] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.300] SetEvent (hEvent=0x318) returned 1
	[0168.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0168.301] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204)) returned 1
	[0168.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0168.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0168.301] ReadFile (in: hFile=0x344, lpBuffer=0x12886000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12886000*, lpNumberOfBytesRead=0x12429d1c*=0x204, lpOverlapped=0x0) returned 1
	[0168.308] GetFileType (hFile=0x344) returned 0x1
	[0168.308] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.308] WriteFile (in: hFile=0x344, lpBuffer=0x1287e240*, nNumberOfBytesToWrite=0x204, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1287e240*, lpNumberOfBytesWritten=0x12429d00*=0x204, lpOverlapped=0x12429d0c) returned 1
	[0168.308] GetFileType (hFile=0x344) returned 0x1
	[0168.309] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x204, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0168.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0168.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0168.309] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0168.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.309] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.309] WriteFile (in: hFile=0x350, lpBuffer=0x1261a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261a000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.310] CloseHandle (hObject=0x350) returned 1
	[0168.312] CloseHandle (hObject=0x344) returned 1
	[0168.314] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.347] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.351] SetEvent (hEvent=0x318) returned 1
	[0168.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.353] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1
	[0168.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0168.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0168.353] ReadFile (in: hFile=0x34c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f1d1c*=0x18e, lpOverlapped=0x0) returned 1
	[0168.355] GetFileType (hFile=0x34c) returned 0x1
	[0168.355] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.355] WriteFile (in: hFile=0x34c, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x18e, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x124f1d00*=0x18e, lpOverlapped=0x124f1d0c) returned 1
	[0168.355] GetFileType (hFile=0x34c) returned 0x1
	[0168.355] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x18e, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0168.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0168.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0168.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0168.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.356] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.356] WriteFile (in: hFile=0x350, lpBuffer=0x125f8000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f8000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.357] CloseHandle (hObject=0x350) returned 1
	[0168.359] CloseHandle (hObject=0x34c) returned 1
	[0168.360] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.403] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.413] SetEvent (hEvent=0x318) returned 1
	[0168.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.414] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4)) returned 1
	[0168.414] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e640 | out: pbBuffer=0x1240e640) returned 1
	[0168.415] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410400 | out: pbBuffer=0x12410400) returned 1
	[0168.415] ReadFile (in: hFile=0x34c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f3d1c*=0x1a4, lpOverlapped=0x0) returned 1
	[0168.417] GetFileType (hFile=0x34c) returned 0x1
	[0168.417] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.417] WriteFile (in: hFile=0x34c, lpBuffer=0x1271c540*, nNumberOfBytesToWrite=0x1a4, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1271c540*, lpNumberOfBytesWritten=0x124f3d00*=0x1a4, lpOverlapped=0x124f3d0c) returned 1
	[0168.418] GetFileType (hFile=0x34c) returned 0x1
	[0168.418] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1a4, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0168.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0168.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0168.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0168.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.419] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.419] WriteFile (in: hFile=0x350, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.419] CloseHandle (hObject=0x350) returned 1
	[0168.422] CloseHandle (hObject=0x34c) returned 1
	[0168.423] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.476] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.481] SetEvent (hEvent=0x318) returned 1
	[0168.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f90f18257cbb4d84216ac1e1f3bb2c76"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.482] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f90f18257cbb4d84216ac1e1f3bb2c76"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1
	[0168.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0168.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0168.482] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0168.486] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0168.486] SetEvent (hEvent=0xa0) returned 1
	[0168.486] SetEvent (hEvent=0x318) returned 1
	[0168.486] ReadFile (in: hFile=0x34c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f5d1c*=0xfc, lpOverlapped=0x0) returned 1
	[0168.488] GetFileType (hFile=0x34c) returned 0x1
	[0168.488] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.488] WriteFile (in: hFile=0x34c, lpBuffer=0x12462000*, nNumberOfBytesToWrite=0xfc, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12462000*, lpNumberOfBytesWritten=0x124f5d00*=0xfc, lpOverlapped=0x124f5d0c) returned 1
	[0168.488] GetFileType (hFile=0x34c) returned 0x1
	[0168.488] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xfc, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0168.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0168.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0168.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0168.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f90f18257cbb4d84216ac1e1f3bb2c76"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0168.489] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.489] WriteFile (in: hFile=0x33c, lpBuffer=0x125f8a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f8a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.489] CloseHandle (hObject=0x33c) returned 1
	[0168.490] CloseHandle (hObject=0x34c) returned 1
	[0168.492] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f90f18257cbb4d84216ac1e1f3bb2c76"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f90f18257cbb4d84216ac1e1f3bb2c76.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.499] SetEvent (hEvent=0x30c) returned 1
	[0168.499] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.527] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.661] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.673] SetEvent (hEvent=0x30c) returned 1
	[0168.673] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.674] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0168.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1
	[0168.674] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0168.674] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0168.674] ReadFile (in: hFile=0x2dc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1276dd1c*=0xd, lpOverlapped=0x0) returned 1
	[0168.676] GetFileType (hFile=0x2dc) returned 0x1
	[0168.676] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.676] WriteFile (in: hFile=0x2dc, lpBuffer=0x1251e010*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1251e010*, lpNumberOfBytesWritten=0x1276dd00*=0xd, lpOverlapped=0x1276dd0c) returned 1
	[0168.676] GetFileType (hFile=0x2dc) returned 0x1
	[0168.676] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0168.677] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0168.677] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0168.677] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0f0 | out: pbBuffer=0x1251e0f0) returned 1
	[0168.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.677] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0168.677] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.678] CloseHandle (hObject=0x34c) returned 1
	[0168.678] CloseHandle (hObject=0x2dc) returned 1
	[0168.678] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.682] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.719] SetEvent (hEvent=0x68) returned 1
	[0168.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.720] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0168.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0168.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0168.721] ReadFile (in: hFile=0x2dc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12429d1c*=0x8000, lpOverlapped=0x0) returned 1
	[0168.731] GetFileType (hFile=0x2dc) returned 0x1
	[0168.731] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.731] WriteFile (in: hFile=0x2dc, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x12429d00*=0x8000, lpOverlapped=0x12429d0c) returned 1
	[0168.731] GetFileType (hFile=0x2dc) returned 0x1
	[0168.731] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0168.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0168.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0168.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5e0 | out: pbBuffer=0x1251e5e0) returned 1
	[0168.732] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0168.732] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.732] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.732] CloseHandle (hObject=0x1e4) returned 1
	[0168.733] CloseHandle (hObject=0x2dc) returned 1
	[0168.733] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.735] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.757] SetEvent (hEvent=0x68) returned 1
	[0168.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.758] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062)) returned 1
	[0168.758] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0168.758] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f8 | out: pbBuffer=0x1251e5f8) returned 1
	[0168.758] ReadFile (in: hFile=0x2dc, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0168.778] GetFileType (hFile=0x2dc) returned 0x1
	[0168.778] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.779] WriteFile (in: hFile=0x2dc, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0168.779] GetFileType (hFile=0x2dc) returned 0x1
	[0168.779] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.779] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0168.780] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0168.780] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0168.780] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0168.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.780] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.780] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.799] CloseHandle (hObject=0x34c) returned 1
	[0168.799] CloseHandle (hObject=0x2dc) returned 1
	[0168.799] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.816] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.841] SetEvent (hEvent=0x30c) returned 1
	[0168.841] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0168.848] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a)) returned 1
	[0168.849] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127326a0 | out: pbBuffer=0x127326a0) returned 1
	[0168.849] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e768 | out: pbBuffer=0x1251e768) returned 1
	[0168.849] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0168.854] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0168.854] SetEvent (hEvent=0xa0) returned 1
	[0168.854] SetEvent (hEvent=0x68) returned 1
	[0168.854] ReadFile (in: hFile=0x344, lpBuffer=0x128a6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128a6000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0168.864] GetFileType (hFile=0x344) returned 0x1
	[0168.864] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.865] WriteFile (in: hFile=0x344, lpBuffer=0x128e6000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x128e6000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0168.865] GetFileType (hFile=0x344) returned 0x1
	[0168.865] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0168.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0168.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0168.867] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744350 | out: pbBuffer=0x12744350) returned 1
	[0168.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.867] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.867] WriteFile (in: hFile=0x34c, lpBuffer=0x1271c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1271c500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.870] CloseHandle (hObject=0x34c) returned 1
	[0168.870] CloseHandle (hObject=0x344) returned 1
	[0168.870] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.873] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.874] SetEvent (hEvent=0x318) returned 1
	[0168.874] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.875] SetEvent (hEvent=0x318) returned 1
	[0168.875] SetEvent (hEvent=0x70) returned 1
	[0168.876] GetFileType (hFile=0x33c) returned 0x1
	[0168.876] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.876] WriteFile (in: hFile=0x33c, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x1276dd00*=0x20000, lpOverlapped=0x1276dd0c) returned 1
	[0168.877] GetFileType (hFile=0x33c) returned 0x1
	[0168.877] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0168.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0168.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0168.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0168.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0168.878] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0168.878] WriteFile (in: hFile=0x344, lpBuffer=0x1271c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1271c000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.908] CloseHandle (hObject=0x344) returned 1
	[0168.908] CloseHandle (hObject=0x33c) returned 1
	[0168.908] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2hKdHlkqz6G.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\2hkdhlkqz6g.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0168.911] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0168.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2hKdHlkqz6G.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\2hkdhlkqz6g.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12613ad0 | out: lpFileInformation=0x12613ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2c4347b0, ftCreationTime.dwHighDateTime=0x1d5d99c, ftLastAccessTime.dwLowDateTime=0x197be200, ftLastAccessTime.dwHighDateTime=0x1d5e765, ftLastWriteTime.dwLowDateTime=0x197be200, ftLastWriteTime.dwHighDateTime=0x1d5e765, nFileSizeHigh=0x0, nFileSizeLow=0x7f6a)) returned 1
	[0168.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0168.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0168.911] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12613d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12613d1c*=0x7f6a, lpOverlapped=0x0) returned 1
	[0168.928] GetFileType (hFile=0x33c) returned 0x1
	[0168.928] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.928] WriteFile (in: hFile=0x33c, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x7f6a, lpNumberOfBytesWritten=0x12613d00, lpOverlapped=0x12613d0c | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x12613d00*=0x7f6a, lpOverlapped=0x12613d0c) returned 1
	[0168.928] GetFileType (hFile=0x33c) returned 0x1
	[0168.928] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x7f6a, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.928] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0168.928] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0168.928] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0168.931] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0168.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2hKdHlkqz6G.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\2hkdhlkqz6g.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.932] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0168.932] WriteFile (in: hFile=0x2dc, lpBuffer=0x1271ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12613d0c, lpOverlapped=0x0 | out: lpBuffer=0x1271ca00*, lpNumberOfBytesWritten=0x12613d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.932] CloseHandle (hObject=0x2dc) returned 1
	[0168.942] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0168.944] CloseHandle (hObject=0x33c) returned 1
	[0169.126] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2hKdHlkqz6G.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\2hkdhlkqz6g.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2hKdHlkqz6G.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\2hkdhlkqz6g.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.260] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0169.345] SetEvent (hEvent=0x68) returned 1
	[0169.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ER2i7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\er2i7.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.346] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0169.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ER2i7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\er2i7.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefea4a50, ftCreationTime.dwHighDateTime=0x1d5e2fd, ftLastAccessTime.dwLowDateTime=0x83411b20, ftLastAccessTime.dwHighDateTime=0x1d5e589, ftLastWriteTime.dwLowDateTime=0x83411b20, ftLastWriteTime.dwHighDateTime=0x1d5e589, nFileSizeHigh=0x0, nFileSizeLow=0x11956)) returned 1
	[0169.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0169.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0169.347] ReadFile (in: hFile=0x2dc, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x12429d1c*=0x11956, lpOverlapped=0x0) returned 1
	[0169.399] GetFileType (hFile=0x2dc) returned 0x1
	[0169.399] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.399] WriteFile (in: hFile=0x2dc, lpBuffer=0x128b2000*, nNumberOfBytesToWrite=0x11956, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x128b2000*, lpNumberOfBytesWritten=0x12429d00*=0x11956, lpOverlapped=0x12429d0c) returned 1
	[0169.399] GetFileType (hFile=0x2dc) returned 0x1
	[0169.399] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x11956, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0169.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0169.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0169.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0169.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ER2i7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\er2i7.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0169.401] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0169.401] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.401] CloseHandle (hObject=0x33c) returned 1
	[0169.401] CloseHandle (hObject=0x2dc) returned 1
	[0169.401] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ER2i7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\er2i7.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\ER2i7.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\er2i7.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.405] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0169.451] SetEvent (hEvent=0x318) returned 1
	[0169.451] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0169.463] SetEvent (hEvent=0x318) returned 1
	[0169.463] SetEvent (hEvent=0x68) returned 1
	[0169.463] SetEvent (hEvent=0x30c) returned 1
	[0169.463] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0169.878] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0169.943] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0169.962] SetEvent (hEvent=0x2e8) returned 1
	[0169.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.964] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0169.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12613ad0 | out: lpFileInformation=0x12613ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1
	[0169.964] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324c0 | out: pbBuffer=0x127324c0) returned 1
	[0169.964] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0169.964] ReadFile (in: hFile=0x2dc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12613d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12613d1c*=0x122, lpOverlapped=0x0) returned 1
	[0169.967] GetFileType (hFile=0x2dc) returned 0x1
	[0169.967] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.967] WriteFile (in: hFile=0x2dc, lpBuffer=0x12986000*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x12613d00, lpOverlapped=0x12613d0c | out: lpBuffer=0x12986000*, lpNumberOfBytesWritten=0x12613d00*=0x122, lpOverlapped=0x12613d0c) returned 1
	[0169.967] GetFileType (hFile=0x2dc) returned 0x1
	[0169.967] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x122, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.967] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0169.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0169.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0169.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0169.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0169.969] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0169.969] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12613d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12613d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.969] CloseHandle (hObject=0x1e4) returned 1
	[0169.969] CloseHandle (hObject=0x2dc) returned 1
	[0169.969] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.978] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0170.085] SetEvent (hEvent=0x318) returned 1
	[0170.085] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0170.152] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0170.183] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0171.223] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0171.225] SetEvent (hEvent=0x70) returned 1
	[0171.225] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0171.225] SetEvent (hEvent=0x70) returned 1
	[0171.225] SetEvent (hEvent=0x2f4) returned 1
	[0171.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2)) returned 1
	[0171.227] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0171.263] SetEvent (hEvent=0x2f4) returned 1
	[0171.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.271] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x33c0ebb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x33c0ebb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x33c0ebb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.271] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.271] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\PowerPoint\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\powerpoint\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0171.273] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.273] WriteFile (in: hFile=0x34c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.274] CloseHandle (hObject=0x34c) returned 1
	[0171.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.501] SetEvent (hEvent=0xa0) returned 1
	[0171.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.501] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.501] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x510b16f0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x510b16f0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x510b16f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.501] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.501] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Proof\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\proof\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.505] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.505] WriteFile (in: hFile=0x344, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.507] CloseHandle (hObject=0x344) returned 1
	[0171.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0171.507] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.507] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x541f1c70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x541f1c70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1
	[0171.508] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1
	[0171.508] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3388679973-3930757225-3770151564-1000", cAlternateFileName="S-1-5-~2")) returned 1
	[0171.508] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1
	[0171.508] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.508] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.512] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.512] WriteFile (in: hFile=0x344, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.514] CloseHandle (hObject=0x344) returned 1
	[0171.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138)) returned 1
	[0171.515] SetEvent (hEvent=0x30c) returned 1
	[0171.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.515] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.578] SetEvent (hEvent=0xa0) returned 1
	[0171.578] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.578] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1
	[0171.578] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
	[0171.578] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.578] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.582] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0171.582] WriteFile (in: hFile=0x344, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0171.583] CloseHandle (hObject=0x344) returned 1
	[0171.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0171.585] SetEvent (hEvent=0x2e8) returned 1
	[0171.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0171.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x541f1c70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="02540a10-7eb7-4b20-a8c7-470f8986389c", cAlternateFileName="02540A~1")) returned 1
	[0171.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="0e15476d-d8fe-46ca-8099-ebdcf80f637c", cAlternateFileName="0E1547~1")) returned 1
	[0171.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="102a7bc8-3f85-4bb4-840a-38257d2965d2", cAlternateFileName="102A7B~1")) returned 1
	[0171.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2be989a0-16a1-424b-9211-51aa3bb43e5d", cAlternateFileName="2BE989~1")) returned 1
	[0171.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x89f07f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="915f9e3b-485d-4f89-a291-82a5ad3b0ee7", cAlternateFileName="915F9E~1")) returned 1
	[0171.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="fbbe72db-afd8-443b-88dd-64b20388700d", cAlternateFileName="FBBE72~1")) returned 1
	[0171.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x89f54240, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
	[0171.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.586] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.588] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0171.588] WriteFile (in: hFile=0x344, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0171.590] CloseHandle (hObject=0x344) returned 1
	[0171.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x89f07f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.612] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.613] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0171.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542b0350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542b0350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x542b0350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.614] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324c0 | out: pbBuffer=0x127324c0) returned 1
	[0171.614] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e7f8 | out: pbBuffer=0x1251e7f8) returned 1
	[0171.614] ReadFile (in: hFile=0x344, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12611d1c*=0x1d4, lpOverlapped=0x0) returned 1
	[0171.616] GetFileType (hFile=0x344) returned 0x1
	[0171.616] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.616] WriteFile (in: hFile=0x344, lpBuffer=0x124c85a0*, nNumberOfBytesToWrite=0x1d4, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x124c85a0*, lpNumberOfBytesWritten=0x12611d00*=0x1d4, lpOverlapped=0x12611d0c) returned 1
	[0171.617] GetFileType (hFile=0x344) returned 0x1
	[0171.617] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1d4, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0171.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0171.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0171.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e8e0 | out: pbBuffer=0x1251e8e0) returned 1
	[0171.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.618] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0171.618] WriteFile (in: hFile=0x2dc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.618] CloseHandle (hObject=0x2dc) returned 1
	[0171.618] CloseHandle (hObject=0x344) returned 1
	[0171.618] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\2be989a0-16a1-424b-9211-51aa3bb43e5d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.623] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0171.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\915f9e3b-485d-4f89-a291-82a5ad3b0ee7"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x89f07f80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x89f07f80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x89f07f80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.624] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127326e0 | out: pbBuffer=0x127326e0) returned 1
	[0171.624] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e908 | out: pbBuffer=0x1251e908) returned 1
	[0171.624] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12611d1c*=0x1d4, lpOverlapped=0x0) returned 1
	[0171.626] GetFileType (hFile=0x344) returned 0x1
	[0171.626] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.626] WriteFile (in: hFile=0x344, lpBuffer=0x124c8780*, nNumberOfBytesToWrite=0x1d4, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x124c8780*, lpNumberOfBytesWritten=0x12611d00*=0x1d4, lpOverlapped=0x12611d0c) returned 1
	[0171.646] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0171.675] GetFileType (hFile=0x344) returned 0x1
	[0171.675] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1d4, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.675] SetEvent (hEvent=0x2e8) returned 1
	[0171.675] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0171.689] SetEvent (hEvent=0x318) returned 1
	[0171.690] SetEvent (hEvent=0x2e8) returned 1
	[0171.690] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.085] SetEvent (hEvent=0x68) returned 1
	[0172.085] SetEvent (hEvent=0x2e8) returned 1
	[0172.085] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.122] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0172.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0172.122] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0172.122] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0172.122] ReadFile (in: hFile=0x344, lpBuffer=0x1256a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x1256a000*, lpNumberOfBytesRead=0x12611d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0172.130] GetFileType (hFile=0x344) returned 0x1
	[0172.130] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.130] WriteFile (in: hFile=0x344, lpBuffer=0x12684000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x12684000*, lpNumberOfBytesWritten=0x12611d00*=0x20000, lpOverlapped=0x12611d0c) returned 1
	[0172.130] GetFileType (hFile=0x344) returned 0x1
	[0172.130] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0172.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0172.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0172.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744340 | out: pbBuffer=0x12744340) returned 1
	[0172.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.131] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0172.131] WriteFile (in: hFile=0x34c, lpBuffer=0x125de000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x125de000*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.161] CloseHandle (hObject=0x34c) returned 1
	[0172.161] CloseHandle (hObject=0x344) returned 1
	[0172.162] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.215] SetEvent (hEvent=0xa0) returned 1
	[0172.215] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.217] SetEvent (hEvent=0x318) returned 1
	[0172.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.218] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d)) returned 1
	[0172.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0172.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0172.218] ReadFile (in: hFile=0x344, lpBuffer=0x126fc000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126fc000*, lpNumberOfBytesRead=0x12429d1c*=0x8d, lpOverlapped=0x0) returned 1
	[0172.220] GetFileType (hFile=0x344) returned 0x1
	[0172.220] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.220] WriteFile (in: hFile=0x344, lpBuffer=0x12516480*, nNumberOfBytesToWrite=0x8d, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12516480*, lpNumberOfBytesWritten=0x12429d00*=0x8d, lpOverlapped=0x12429d0c) returned 1
	[0172.220] GetFileType (hFile=0x344) returned 0x1
	[0172.220] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x8d, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0172.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0172.221] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0172.221] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0172.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.221] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.221] WriteFile (in: hFile=0x1e4, lpBuffer=0x125c6500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125c6500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.221] CloseHandle (hObject=0x1e4) returned 1
	[0172.222] CloseHandle (hObject=0x344) returned 1
	[0172.223] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.280] SetEvent (hEvent=0x2e8) returned 1
	[0172.280] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\mimeTypes.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\mimetypes.rdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.342] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\mimeTypes.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\mimetypes.rdf"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb50b6e70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5175550, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb5175550, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xef3)) returned 1
	[0172.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127323a0 | out: pbBuffer=0x127323a0) returned 1
	[0172.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0172.343] ReadFile (in: hFile=0x344, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12767d1c*=0xef3, lpOverlapped=0x0) returned 1
	[0172.346] GetFileType (hFile=0x344) returned 0x1
	[0172.346] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.346] WriteFile (in: hFile=0x344, lpBuffer=0x12773000*, nNumberOfBytesToWrite=0xef3, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12773000*, lpNumberOfBytesWritten=0x12767d00*=0xef3, lpOverlapped=0x12767d0c) returned 1
	[0172.349] GetFileType (hFile=0x344) returned 0x1
	[0172.349] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xef3, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0172.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0172.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0172.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0172.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\mimeTypes.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\mimetypes.rdf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.350] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.350] WriteFile (in: hFile=0x33c, lpBuffer=0x124f2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x124f2500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.350] CloseHandle (hObject=0x33c) returned 1
	[0172.351] CloseHandle (hObject=0x344) returned 1
	[0172.357] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\mimeTypes.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\mimetypes.rdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\mimeTypes.rdf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\mimetypes.rdf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.398] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.401] SetEvent (hEvent=0x318) returned 1
	[0172.401] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.402] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3b3f6e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0172.403] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732660 | out: pbBuffer=0x12732660) returned 1
	[0172.403] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0172.403] ReadFile (in: hFile=0x1e4, lpBuffer=0x12680000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12680000*, lpNumberOfBytesRead=0x1260fd1c*=0x10000, lpOverlapped=0x0) returned 1
	[0172.412] GetFileType (hFile=0x1e4) returned 0x1
	[0172.412] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.412] WriteFile (in: hFile=0x1e4, lpBuffer=0x127d0000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x127d0000*, lpNumberOfBytesWritten=0x1260fd00*=0x10000, lpOverlapped=0x1260fd0c) returned 1
	[0172.413] GetFileType (hFile=0x1e4) returned 0x1
	[0172.413] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0172.414] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0172.414] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8901 | out: pbBuffer=0x127e8901) returned 1
	[0172.414] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410600 | out: pbBuffer=0x12410600) returned 1
	[0172.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.414] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.414] WriteFile (in: hFile=0x344, lpBuffer=0x124f2a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x124f2a00*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.415] CloseHandle (hObject=0x344) returned 1
	[0172.415] CloseHandle (hObject=0x1e4) returned 1
	[0172.415] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\permissions.sqlite.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\permissions.sqlite.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.497] SetEvent (hEvent=0xa0) returned 1
	[0172.497] SetEvent (hEvent=0x30c) returned 1
	[0172.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\search.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\search.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.499] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\search.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\search.json"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6fa8c70, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6fa8c70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4183)) returned 1
	[0172.499] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0172.499] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0172.499] ReadFile (in: hFile=0x1e4, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1260fd1c*=0x4183, lpOverlapped=0x0) returned 1
	[0172.505] GetFileType (hFile=0x1e4) returned 0x1
	[0172.505] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.505] WriteFile (in: hFile=0x1e4, lpBuffer=0x127d0000*, nNumberOfBytesToWrite=0x4183, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x127d0000*, lpNumberOfBytesWritten=0x1260fd00*=0x4183, lpOverlapped=0x1260fd0c) returned 1
	[0172.506] GetFileType (hFile=0x1e4) returned 0x1
	[0172.506] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x4183, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.506] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0172.506] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0172.506] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0172.507] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0172.507] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\search.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\search.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0172.507] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.507] WriteFile (in: hFile=0x350, lpBuffer=0x1263c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c500*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.507] CloseHandle (hObject=0x350) returned 1
	[0172.510] CloseHandle (hObject=0x1e4) returned 1
	[0172.522] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\search.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\search.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\search.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\search.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.583] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.592] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.607] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.630] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.649] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.676] SetEvent (hEvent=0x318) returned 1
	[0172.676] SetEvent (hEvent=0x2f4) returned 1
	[0172.676] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.677] SetEvent (hEvent=0x318) returned 1
	[0172.678] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.678] SetEvent (hEvent=0x318) returned 1
	[0172.678] SetEvent (hEvent=0x2f4) returned 1
	[0172.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\TBVaCYAehfAbrB.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tbvacyaehfabrb.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.679] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\TBVaCYAehfAbrB.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tbvacyaehfabrb.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc2a98d0, ftCreationTime.dwHighDateTime=0x1d5dd2e, ftLastAccessTime.dwLowDateTime=0x8832ceb0, ftLastAccessTime.dwHighDateTime=0x1d5e1bc, ftLastWriteTime.dwLowDateTime=0x8832ceb0, ftLastWriteTime.dwHighDateTime=0x1d5e1bc, nFileSizeHigh=0x0, nFileSizeLow=0x6a07)) returned 1
	[0172.679] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0172.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0172.680] ReadFile (in: hFile=0x1e4, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x6a07, lpOverlapped=0x0) returned 1
	[0172.701] GetFileType (hFile=0x1e4) returned 0x1
	[0172.701] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.701] WriteFile (in: hFile=0x1e4, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x6a07, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429d00*=0x6a07, lpOverlapped=0x12429d0c) returned 1
	[0172.702] GetFileType (hFile=0x1e4) returned 0x1
	[0172.702] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x6a07, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0172.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0172.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0172.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0172.703] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\TBVaCYAehfAbrB.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tbvacyaehfabrb.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.703] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.703] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.703] CloseHandle (hObject=0x34c) returned 1
	[0172.703] CloseHandle (hObject=0x1e4) returned 1
	[0172.703] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\TBVaCYAehfAbrB.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tbvacyaehfabrb.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\TBVaCYAehfAbrB.gif.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tbvacyaehfabrb.gif.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b ltgosvw.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b ltgosvw.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.709] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b ltgosvw.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b ltgosvw.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95513410, ftCreationTime.dwHighDateTime=0x1d5e30b, ftLastAccessTime.dwLowDateTime=0x235395e0, ftLastAccessTime.dwHighDateTime=0x1d5e498, ftLastWriteTime.dwLowDateTime=0x235395e0, ftLastWriteTime.dwHighDateTime=0x1d5e498, nFileSizeHigh=0x0, nFileSizeLow=0x117aa)) returned 1
	[0172.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0172.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0172.709] ReadFile (in: hFile=0x1e4, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12429d1c*=0x117aa, lpOverlapped=0x0) returned 1
	[0172.727] GetFileType (hFile=0x1e4) returned 0x1
	[0172.727] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.727] WriteFile (in: hFile=0x1e4, lpBuffer=0x125a4000*, nNumberOfBytesToWrite=0x117aa, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125a4000*, lpNumberOfBytesWritten=0x12429d00*=0x117aa, lpOverlapped=0x12429d0c) returned 1
	[0172.728] GetFileType (hFile=0x1e4) returned 0x1
	[0172.728] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x117aa, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.729] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0172.729] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0172.729] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0172.729] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0172.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b ltgosvw.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b ltgosvw.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.729] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.729] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.729] CloseHandle (hObject=0x2dc) returned 1
	[0172.730] CloseHandle (hObject=0x1e4) returned 1
	[0172.730] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b ltgosvw.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b ltgosvw.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b ltgosvw.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b ltgosvw.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bhRzEornXmKqjzhPRV2K.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bhrzeornxmkqjzhprv2k.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a207870, ftCreationTime.dwHighDateTime=0x1d5e196, ftLastAccessTime.dwLowDateTime=0x8a241550, ftLastAccessTime.dwHighDateTime=0x1d5d8d2, ftLastWriteTime.dwLowDateTime=0x8a241550, ftLastWriteTime.dwHighDateTime=0x1d5d8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8171)) returned 1
	[0172.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cDuUfzDckOk7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cduufzdckok7.png"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54422790, ftCreationTime.dwHighDateTime=0x1d5df5a, ftLastAccessTime.dwLowDateTime=0xee358400, ftLastAccessTime.dwHighDateTime=0x1d5df50, ftLastWriteTime.dwLowDateTime=0xee358400, ftLastWriteTime.dwHighDateTime=0x1d5df50, nFileSizeHigh=0x0, nFileSizeLow=0x12d31)) returned 1
	[0172.787] SetEvent (hEvent=0x2f4) returned 1
	[0172.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cNLzJTE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cnlzjte.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x21222300, ftCreationTime.dwHighDateTime=0x1d5dd5d, ftLastAccessTime.dwLowDateTime=0xbccf2580, ftLastAccessTime.dwHighDateTime=0x1d5dcd3, ftLastWriteTime.dwLowDateTime=0xbccf2580, ftLastWriteTime.dwHighDateTime=0x1d5dcd3, nFileSizeHigh=0x0, nFileSizeLow=0x98c)) returned 1
	[0172.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpbZOlXks.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpbzolxks.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec712040, ftCreationTime.dwHighDateTime=0x1d5e449, ftLastAccessTime.dwLowDateTime=0x78bb2410, ftLastAccessTime.dwHighDateTime=0x1d5decd, ftLastWriteTime.dwLowDateTime=0x78bb2410, ftLastWriteTime.dwHighDateTime=0x1d5decd, nFileSizeHigh=0x0, nFileSizeLow=0xc1f2)) returned 1
	[0172.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kTbIlLkus7FGmtvx2K.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ktbillkus7fgmtvx2k.swf"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0920490, ftCreationTime.dwHighDateTime=0x1d5e4c2, ftLastAccessTime.dwLowDateTime=0xd0145530, ftLastAccessTime.dwHighDateTime=0x1d5e0ba, ftLastWriteTime.dwLowDateTime=0xd0145530, ftLastWriteTime.dwHighDateTime=0x1d5e0ba, nFileSizeHigh=0x0, nFileSizeLow=0x16c32)) returned 1
	[0172.796] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpbZOlXks.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpbzolxks.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.797] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpbZOlXks.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpbzolxks.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec712040, ftCreationTime.dwHighDateTime=0x1d5e449, ftLastAccessTime.dwLowDateTime=0x78bb2410, ftLastAccessTime.dwHighDateTime=0x1d5decd, ftLastWriteTime.dwLowDateTime=0x78bb2410, ftLastWriteTime.dwHighDateTime=0x1d5decd, nFileSizeHigh=0x0, nFileSizeLow=0xc1f2)) returned 1
	[0172.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0172.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0172.797] ReadFile (in: hFile=0x344, lpBuffer=0x12700000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12700000*, lpNumberOfBytesRead=0x12769d1c*=0xc1f2, lpOverlapped=0x0) returned 1
	[0172.807] GetFileType (hFile=0x344) returned 0x1
	[0172.807] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.808] WriteFile (in: hFile=0x344, lpBuffer=0x125e4000*, nNumberOfBytesToWrite=0xc1f2, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x125e4000*, lpNumberOfBytesWritten=0x12769d00*=0xc1f2, lpOverlapped=0x12769d0c) returned 1
	[0172.808] GetFileType (hFile=0x344) returned 0x1
	[0172.808] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xc1f2, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.808] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401401 | out: pbBuffer=0x12401401) returned 1
	[0172.808] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401501 | out: pbBuffer=0x12401501) returned 1
	[0172.808] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401601 | out: pbBuffer=0x12401601) returned 1
	[0172.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105a0 | out: pbBuffer=0x124105a0) returned 1
	[0172.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpbZOlXks.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpbzolxks.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.809] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.809] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.809] CloseHandle (hObject=0x1e4) returned 1
	[0172.809] CloseHandle (hObject=0x344) returned 1
	[0172.809] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpbZOlXks.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpbzolxks.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\hpbZOlXks.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hpbzolxks.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kTbIlLkus7FGmtvx2K.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ktbillkus7fgmtvx2k.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.932] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.967] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.967] SwitchToThread () returned 1
	[0172.976] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0172.982] SetEvent (hEvent=0x30c) returned 1
	[0172.982] GetFileType (hFile=0x34c) returned 0x1
	[0172.982] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.982] WriteFile (in: hFile=0x34c, lpBuffer=0x12644a80*, nNumberOfBytesToWrite=0x98c, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x12644a80*, lpNumberOfBytesWritten=0x1260fd00*=0x98c, lpOverlapped=0x1260fd0c) returned 1
	[0172.982] GetFileType (hFile=0x34c) returned 0x1
	[0172.983] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x98c, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.983] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0172.983] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0172.983] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0172.983] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0172.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cNLzJTE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cnlzjte.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.983] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.983] WriteFile (in: hFile=0x1e4, lpBuffer=0x124b6000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.984] CloseHandle (hObject=0x1e4) returned 1
	[0172.984] CloseHandle (hObject=0x34c) returned 1
	[0172.984] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cNLzJTE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cnlzjte.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cNLzJTE.xlsx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cnlzjte.xlsx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pNgT-T.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pngt-t.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.990] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pNgT-T.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pngt-t.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb4db940, ftCreationTime.dwHighDateTime=0x1d5e3b0, ftLastAccessTime.dwLowDateTime=0x3e4e0e80, ftLastAccessTime.dwHighDateTime=0x1d5dfe7, ftLastWriteTime.dwLowDateTime=0x3e4e0e80, ftLastWriteTime.dwHighDateTime=0x1d5dfe7, nFileSizeHigh=0x0, nFileSizeLow=0x18a7)) returned 1
	[0172.990] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0172.990] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0172.990] ReadFile (in: hFile=0x34c, lpBuffer=0x128ae000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x128ae000*, lpNumberOfBytesRead=0x1260fd1c*=0x18a7, lpOverlapped=0x0) returned 1
	[0173.062] GetFileType (hFile=0x34c) returned 0x1
	[0173.062] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.062] WriteFile (in: hFile=0x34c, lpBuffer=0x124ff980*, nNumberOfBytesToWrite=0x18a7, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x124ff980*, lpNumberOfBytesWritten=0x1260fd00*=0x18a7, lpOverlapped=0x1260fd0c) returned 1
	[0173.062] GetFileType (hFile=0x34c) returned 0x1
	[0173.062] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x18a7, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.062] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0173.063] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0173.063] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0173.063] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0173.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pNgT-T.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pngt-t.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.063] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0173.063] WriteFile (in: hFile=0x1e4, lpBuffer=0x124b6a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x124b6a00*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.063] CloseHandle (hObject=0x1e4) returned 1
	[0173.064] CloseHandle (hObject=0x34c) returned 1
	[0173.064] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pNgT-T.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pngt-t.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pNgT-T.mp4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pngt-t.mp4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.095] SetEvent (hEvent=0x70) returned 1
	[0173.095] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\sytZskr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sytzskr.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.096] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0173.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\sytZskr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sytzskr.wav"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda169d70, ftCreationTime.dwHighDateTime=0x1d5e10c, ftLastAccessTime.dwLowDateTime=0x7bb717d0, ftLastAccessTime.dwHighDateTime=0x1d5da60, ftLastWriteTime.dwLowDateTime=0x7bb717d0, ftLastWriteTime.dwHighDateTime=0x1d5da60, nFileSizeHigh=0x0, nFileSizeLow=0x175e9)) returned 1
	[0173.096] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c4e0 | out: pbBuffer=0x1244c4e0) returned 1
	[0173.096] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0173.096] ReadFile (in: hFile=0x34c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1260fd1c*=0x175e9, lpOverlapped=0x0) returned 1
	[0173.102] GetFileType (hFile=0x34c) returned 0x1
	[0173.102] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.102] WriteFile (in: hFile=0x34c, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x175e9, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x1260fd00*=0x175e9, lpOverlapped=0x1260fd0c) returned 1
	[0173.103] GetFileType (hFile=0x34c) returned 0x1
	[0173.103] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x175e9, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.103] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0173.103] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d01 | out: pbBuffer=0x12434d01) returned 1
	[0173.103] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e01 | out: pbBuffer=0x12434e01) returned 1
	[0173.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0173.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\sytZskr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sytzskr.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.104] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0173.104] WriteFile (in: hFile=0x344, lpBuffer=0x124b6f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x124b6f00*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.104] CloseHandle (hObject=0x344) returned 1
	[0173.105] CloseHandle (hObject=0x34c) returned 1
	[0173.109] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\sytZskr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sytzskr.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\sytZskr.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sytzskr.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.155] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0173.163] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0173.163] SetEvent (hEvent=0x318) returned 1
	[0173.163] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0173.164] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.173] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0173.200] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x12769a44 | out: lpFindFileData=0x12769a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0173.201] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.225] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.239] SetEvent (hEvent=0x68) returned 1
	[0173.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493)) returned 1
	[0173.241] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.268] SetEvent (hEvent=0x68) returned 1
	[0173.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1
	[0173.269] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.413] SetEvent (hEvent=0x30c) returned 1
	[0173.413] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.425] SetEvent (hEvent=0x30c) returned 1
	[0173.425] SetEvent (hEvent=0x68) returned 1
	[0173.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1sq3HbQ0h8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1sq3hbq0h8.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.426] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0173.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1sq3HbQ0h8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1sq3hbq0h8.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dc5a4e0, ftCreationTime.dwHighDateTime=0x1d5e4ed, ftLastAccessTime.dwLowDateTime=0x111bdb00, ftLastAccessTime.dwHighDateTime=0x1d5db81, ftLastWriteTime.dwLowDateTime=0x111bdb00, ftLastWriteTime.dwHighDateTime=0x1d5db81, nFileSizeHigh=0x0, nFileSizeLow=0x163de)) returned 1
	[0173.426] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0173.426] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744018 | out: pbBuffer=0x12744018) returned 1
	[0173.427] ReadFile (in: hFile=0x1e4, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1260fd1c*=0x163de, lpOverlapped=0x0) returned 1
	[0173.448] GetFileType (hFile=0x1e4) returned 0x1
	[0173.448] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.448] WriteFile (in: hFile=0x1e4, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x163de, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x1260fd00*=0x163de, lpOverlapped=0x1260fd0c) returned 1
	[0173.449] GetFileType (hFile=0x1e4) returned 0x1
	[0173.449] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x163de, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0173.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0173.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0173.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440e0 | out: pbBuffer=0x127440e0) returned 1
	[0173.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1sq3HbQ0h8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1sq3hbq0h8.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.450] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0173.450] WriteFile (in: hFile=0x344, lpBuffer=0x124ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x124ee000*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.450] CloseHandle (hObject=0x344) returned 1
	[0173.457] CloseHandle (hObject=0x1e4) returned 1
	[0173.459] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1sq3HbQ0h8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1sq3hbq0h8.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\1sq3HbQ0h8.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\1sq3hbq0h8.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.612] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.652] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.673] SetEvent (hEvent=0x70) returned 1
	[0173.673] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.679] SetEvent (hEvent=0x68) returned 1
	[0173.680] SetEvent (hEvent=0x2e8) returned 1
	[0173.680] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0173.686] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0173.686] SetEvent (hEvent=0x2f4) returned 1
	[0173.686] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0173.690] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.851] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.854] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.862] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0173.974] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.323] SetEvent (hEvent=0x2f4) returned 1
	[0174.323] SetEvent (hEvent=0x2e8) returned 1
	[0174.323] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.533] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.539] SetEvent (hEvent=0x2f4) returned 1
	[0174.540] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0174.546] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.546] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0174.560] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.560] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0174.561] SetEvent (hEvent=0x2f4) returned 1
	[0174.561] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0174.564] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gxHrQlTHsed.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gxhrqlthsed.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d71260, ftCreationTime.dwHighDateTime=0x1d5e7cd, ftLastAccessTime.dwLowDateTime=0xa0627c70, ftLastAccessTime.dwHighDateTime=0x1d5dce8, ftLastWriteTime.dwLowDateTime=0xa0627c70, ftLastWriteTime.dwHighDateTime=0x1d5dce8, nFileSizeHigh=0x0, nFileSizeLow=0x5f06)) returned 1
	[0174.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l-qGlIb2bAGgnY8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l-qglib2baggny8.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb12db0, ftCreationTime.dwHighDateTime=0x1d5daa0, ftLastAccessTime.dwLowDateTime=0x63925a20, ftLastAccessTime.dwHighDateTime=0x1d5e514, ftLastWriteTime.dwLowDateTime=0x63925a20, ftLastWriteTime.dwHighDateTime=0x1d5e514, nFileSizeHigh=0x0, nFileSizeLow=0x195f)) returned 1
	[0174.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lpgKJypqLWtbDF.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lpgkjypqlwtbdf.ppt"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa52d740, ftCreationTime.dwHighDateTime=0x1d5dd22, ftLastAccessTime.dwLowDateTime=0x791f60e0, ftLastAccessTime.dwHighDateTime=0x1d5e6e0, ftLastWriteTime.dwLowDateTime=0x791f60e0, ftLastWriteTime.dwHighDateTime=0x1d5e6e0, nFileSizeHigh=0x0, nFileSizeLow=0x1088c)) returned 1
	[0174.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l-qGlIb2bAGgnY8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l-qglib2baggny8.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0174.573] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l-qGlIb2bAGgnY8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l-qglib2baggny8.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb12db0, ftCreationTime.dwHighDateTime=0x1d5daa0, ftLastAccessTime.dwLowDateTime=0x63925a20, ftLastAccessTime.dwHighDateTime=0x1d5e514, ftLastWriteTime.dwLowDateTime=0x63925a20, ftLastWriteTime.dwHighDateTime=0x1d5e514, nFileSizeHigh=0x0, nFileSizeLow=0x195f)) returned 1
	[0174.573] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0174.573] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0174.573] ReadFile (in: hFile=0x1e4, lpBuffer=0x12974000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12974000*, lpNumberOfBytesRead=0x1260fd1c*=0x195f, lpOverlapped=0x0) returned 1
	[0174.582] GetFileType (hFile=0x1e4) returned 0x1
	[0174.582] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.582] WriteFile (in: hFile=0x1e4, lpBuffer=0x124ff980*, nNumberOfBytesToWrite=0x195f, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x124ff980*, lpNumberOfBytesWritten=0x1260fd00*=0x195f, lpOverlapped=0x1260fd0c) returned 1
	[0174.583] GetFileType (hFile=0x1e4) returned 0x1
	[0174.583] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x195f, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.584] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0174.584] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0174.584] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0174.584] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0174.584] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l-qGlIb2bAGgnY8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l-qglib2baggny8.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0174.584] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.584] WriteFile (in: hFile=0x2dc, lpBuffer=0x12614000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12614000*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.585] CloseHandle (hObject=0x2dc) returned 1
	[0174.585] CloseHandle (hObject=0x1e4) returned 1
	[0174.585] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l-qGlIb2bAGgnY8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l-qglib2baggny8.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\l-qGlIb2bAGgnY8.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\l-qglib2baggny8.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mCkyl D8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mckyl d8.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f51740, ftCreationTime.dwHighDateTime=0x1d5e2ed, ftLastAccessTime.dwLowDateTime=0xcb3a9df0, ftLastAccessTime.dwHighDateTime=0x1d5dba9, ftLastWriteTime.dwLowDateTime=0xcb3a9df0, ftLastWriteTime.dwHighDateTime=0x1d5dba9, nFileSizeHigh=0x0, nFileSizeLow=0x5916)) returned 1
	[0174.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mor.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mor.exe"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd95c980, ftCreationTime.dwHighDateTime=0x1d6243f, ftLastAccessTime.dwLowDateTime=0xfe2e6000, ftLastAccessTime.dwHighDateTime=0x1d6243f, ftLastWriteTime.dwLowDateTime=0xd1734c00, ftLastWriteTime.dwHighDateTime=0x1d62431, nFileSizeHigh=0x0, nFileSizeLow=0x1cba00)) returned 1
	[0174.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mCkyl D8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mckyl d8.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0174.597] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mCkyl D8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mckyl d8.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92f51740, ftCreationTime.dwHighDateTime=0x1d5e2ed, ftLastAccessTime.dwLowDateTime=0xcb3a9df0, ftLastAccessTime.dwHighDateTime=0x1d5dba9, ftLastWriteTime.dwLowDateTime=0xcb3a9df0, ftLastWriteTime.dwHighDateTime=0x1d5dba9, nFileSizeHigh=0x0, nFileSizeLow=0x5916)) returned 1
	[0174.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0174.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e688 | out: pbBuffer=0x1251e688) returned 1
	[0174.597] ReadFile (in: hFile=0x1e4, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1260fd1c*=0x5916, lpOverlapped=0x0) returned 1
	[0174.617] GetFileType (hFile=0x1e4) returned 0x1
	[0174.617] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.618] WriteFile (in: hFile=0x1e4, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x5916, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x1260fd00*=0x5916, lpOverlapped=0x1260fd0c) returned 1
	[0174.618] GetFileType (hFile=0x1e4) returned 0x1
	[0174.618] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x5916, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.618] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0174.618] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0174.618] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0174.619] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e750 | out: pbBuffer=0x1251e750) returned 1
	[0174.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mCkyl D8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mckyl d8.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0174.619] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.619] WriteFile (in: hFile=0x2dc, lpBuffer=0x12614a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12614a00*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.619] CloseHandle (hObject=0x2dc) returned 1
	[0174.623] CloseHandle (hObject=0x1e4) returned 1
	[0174.624] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mCkyl D8.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mckyl d8.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mCkyl D8.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mckyl d8.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.662] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.732] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.734] SetEvent (hEvent=0x68) returned 1
	[0174.734] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.738] SetEvent (hEvent=0x2e8) returned 1
	[0174.738] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.739] SetEvent (hEvent=0x2e8) returned 1
	[0174.739] SetEvent (hEvent=0x68) returned 1
	[0174.739] SetEvent (hEvent=0x318) returned 1
	[0174.739] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2lopYLbbft5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2lopylbbft5.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0174.750] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2lopYLbbft5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2lopylbbft5.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1297650, ftCreationTime.dwHighDateTime=0x1d55c90, ftLastAccessTime.dwLowDateTime=0x84fb0b60, ftLastAccessTime.dwHighDateTime=0x1d5630c, ftLastWriteTime.dwLowDateTime=0x84fb0b60, ftLastWriteTime.dwHighDateTime=0x1d5630c, nFileSizeHigh=0x0, nFileSizeLow=0x10bef)) returned 1
	[0174.750] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0174.750] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0174.750] ReadFile (in: hFile=0x1e4, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1242bd1c*=0x10bef, lpOverlapped=0x0) returned 1
	[0174.763] GetFileType (hFile=0x1e4) returned 0x1
	[0174.763] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.763] WriteFile (in: hFile=0x1e4, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x10bef, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x1242bd00*=0x10bef, lpOverlapped=0x1242bd0c) returned 1
	[0174.763] GetFileType (hFile=0x1e4) returned 0x1
	[0174.763] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x10bef, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.764] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0174.764] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0174.764] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0174.764] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0174.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2lopYLbbft5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2lopylbbft5.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.767] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.767] WriteFile (in: hFile=0x34c, lpBuffer=0x1272c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1272c000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.767] CloseHandle (hObject=0x34c) returned 1
	[0174.768] CloseHandle (hObject=0x1e4) returned 1
	[0174.791] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2lopYLbbft5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2lopylbbft5.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2lopYLbbft5.xlsx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2lopylbbft5.xlsx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.816] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.839] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.854] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.859] SetEvent (hEvent=0x30c) returned 1
	[0174.859] SetEvent (hEvent=0x70) returned 1
	[0174.859] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0174.861] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0174.861] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0174.862] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0174.862] SetEvent (hEvent=0x30c) returned 1
	[0174.862] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0174.864] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0176.173] SetEvent (hEvent=0x2e8) returned 1
	[0176.173] SetEvent (hEvent=0x2f4) returned 1
	[0176.173] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0176.299] GetFileType (hFile=0x34c) returned 0x1
	[0176.299] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.299] WriteFile (in: hFile=0x34c, lpBuffer=0x1271e000*, nNumberOfBytesToWrite=0xf826, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1271e000*, lpNumberOfBytesWritten=0x124f5d00*=0xf826, lpOverlapped=0x124f5d0c) returned 1
	[0176.300] GetFileType (hFile=0x34c) returned 0x1
	[0176.300] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xf826, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0176.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0176.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0176.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0176.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WaKhJ6h4jGauFr7uwjsd.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wakhj6h4jgaufr7uwjsd.pps"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0176.301] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0176.301] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.301] CloseHandle (hObject=0x33c) returned 1
	[0176.301] CloseHandle (hObject=0x34c) returned 1
	[0176.301] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WaKhJ6h4jGauFr7uwjsd.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wakhj6h4jgaufr7uwjsd.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WaKhJ6h4jGauFr7uwjsd.pps.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wakhj6h4jgaufr7uwjsd.pps.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\_5fZW-MXhsqnxQT.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\_5fzw-mxhsqnxqt.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c218a0, ftCreationTime.dwHighDateTime=0x1d576e7, ftLastAccessTime.dwLowDateTime=0x7fc550e0, ftLastAccessTime.dwHighDateTime=0x1d5d04b, ftLastWriteTime.dwLowDateTime=0x7fc550e0, ftLastWriteTime.dwHighDateTime=0x1d5d04b, nFileSizeHigh=0x0, nFileSizeLow=0xdb38)) returned 1
	[0176.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\bRrkEpHO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\brrkepho.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x126db2d0, ftCreationTime.dwHighDateTime=0x1d57baf, ftLastAccessTime.dwLowDateTime=0x515e7f00, ftLastAccessTime.dwHighDateTime=0x1d57282, ftLastWriteTime.dwLowDateTime=0x515e7f00, ftLastWriteTime.dwHighDateTime=0x1d57282, nFileSizeHigh=0x0, nFileSizeLow=0xcd4d)) returned 1
	[0176.372] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0176.667] SetEvent (hEvent=0x30c) returned 1
	[0176.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0176.674] SetEvent (hEvent=0x2f4) returned 1
	[0176.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hJ p0fOGQhB3TSky.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hj p0fogqhb3tsky.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e83d090, ftCreationTime.dwHighDateTime=0x1d5b0b1, ftLastAccessTime.dwLowDateTime=0xa366f3c0, ftLastAccessTime.dwHighDateTime=0x1d5dcf1, ftLastWriteTime.dwLowDateTime=0xa366f3c0, ftLastWriteTime.dwHighDateTime=0x1d5dcf1, nFileSizeHigh=0x0, nFileSizeLow=0x1ba9)) returned 1
	[0176.689] SetEvent (hEvent=0x68) returned 1
	[0176.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i1NGxT_2.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i1ngxt_2.pps"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77674a40, ftCreationTime.dwHighDateTime=0x1d5e467, ftLastAccessTime.dwLowDateTime=0xf9b12750, ftLastAccessTime.dwHighDateTime=0x1d5d977, ftLastWriteTime.dwLowDateTime=0xf9b12750, ftLastWriteTime.dwHighDateTime=0x1d5d977, nFileSizeHigh=0x0, nFileSizeLow=0x14a3c)) returned 1
	[0176.835] SetEvent (hEvent=0x2e8) returned 1
	[0176.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\irr KLGMy_iO-2aIa0 3.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\irr klgmy_io-2aia0 3.doc"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb57a0400, ftCreationTime.dwHighDateTime=0x1d5e6d6, ftLastAccessTime.dwLowDateTime=0x823b6e0, ftLastAccessTime.dwHighDateTime=0x1d5e0ad, ftLastWriteTime.dwLowDateTime=0x823b6e0, ftLastWriteTime.dwHighDateTime=0x1d5e0ad, nFileSizeHigh=0x0, nFileSizeLow=0x18c1d)) returned 1
	[0176.857] SetEvent (hEvent=0x30c) returned 1
	[0176.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iybTstxuOpsD-92nBh4r.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\iybtstxuopsd-92nbh4r.xls"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc1b440, ftCreationTime.dwHighDateTime=0x1d5e736, ftLastAccessTime.dwLowDateTime=0x7aba7d70, ftLastAccessTime.dwHighDateTime=0x1d5dcd3, ftLastWriteTime.dwLowDateTime=0x7aba7d70, ftLastWriteTime.dwHighDateTime=0x1d5dcd3, nFileSizeHigh=0x0, nFileSizeLow=0x5cb2)) returned 1
	[0176.881] SetEvent (hEvent=0x68) returned 1
	[0176.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jeFFyoPYYV1p-.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jeffyopyyv1p-.docx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55b32bc0, ftCreationTime.dwHighDateTime=0x1d5e2d3, ftLastAccessTime.dwLowDateTime=0x7bd431d0, ftLastAccessTime.dwHighDateTime=0x1d5da15, ftLastWriteTime.dwLowDateTime=0x7bd431d0, ftLastWriteTime.dwHighDateTime=0x1d5da15, nFileSizeHigh=0x0, nFileSizeLow=0x11cd2)) returned 1
	[0176.898] SetEvent (hEvent=0x2f4) returned 1
	[0176.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kEdzyToSMHzfQHo4.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kedzytosmhzfqho4.doc"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e42e0, ftCreationTime.dwHighDateTime=0x1d5e164, ftLastAccessTime.dwLowDateTime=0x97664c60, ftLastAccessTime.dwHighDateTime=0x1d5e6c4, ftLastWriteTime.dwLowDateTime=0x97664c60, ftLastWriteTime.dwHighDateTime=0x1d5e6c4, nFileSizeHigh=0x0, nFileSizeLow=0x8a93)) returned 1
	[0176.917] SetEvent (hEvent=0x30c) returned 1
	[0176.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kWogcIjH5ya_.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kwogcijh5ya_.doc"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b76870, ftCreationTime.dwHighDateTime=0x1d5df46, ftLastAccessTime.dwLowDateTime=0xc541bc40, ftLastAccessTime.dwHighDateTime=0x1d5e076, ftLastWriteTime.dwLowDateTime=0xc541bc40, ftLastWriteTime.dwHighDateTime=0x1d5e076, nFileSizeHigh=0x0, nFileSizeLow=0x182ce)) returned 1
	[0176.938] SetEvent (hEvent=0xa0) returned 1
	[0176.938] SetEvent (hEvent=0x68) returned 1
	[0176.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lZDPaudj3O QTkuAu.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lzdpaudj3o qtkuau.doc"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82575890, ftCreationTime.dwHighDateTime=0x1d5de50, ftLastAccessTime.dwLowDateTime=0x2dcd59f0, ftLastAccessTime.dwHighDateTime=0x1d5d7b6, ftLastWriteTime.dwLowDateTime=0x2dcd59f0, ftLastWriteTime.dwHighDateTime=0x1d5d7b6, nFileSizeHigh=0x0, nFileSizeLow=0xb55c)) returned 1
	[0177.031] SetEvent (hEvent=0x2f4) returned 1
	[0177.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mJO_zUfqpG.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mjo_zufqpg.ppt"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3d6b60, ftCreationTime.dwHighDateTime=0x1d5dbfe, ftLastAccessTime.dwLowDateTime=0xad719e40, ftLastAccessTime.dwHighDateTime=0x1d5e6f8, ftLastWriteTime.dwLowDateTime=0xad719e40, ftLastWriteTime.dwHighDateTime=0x1d5e6f8, nFileSizeHigh=0x0, nFileSizeLow=0x1a2d)) returned 1
	[0177.096] SetEvent (hEvent=0xa0) returned 1
	[0177.096] SetEvent (hEvent=0x30c) returned 1
	[0177.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_HVk0JMlZKCohb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m_hvk0jmlzkcohb.docx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc9210, ftCreationTime.dwHighDateTime=0x1d5953a, ftLastAccessTime.dwLowDateTime=0x639ef420, ftLastAccessTime.dwHighDateTime=0x1d5643a, ftLastWriteTime.dwLowDateTime=0x639ef420, ftLastWriteTime.dwHighDateTime=0x1d5643a, nFileSizeHigh=0x0, nFileSizeLow=0x12575)) returned 1
	[0177.113] SetEvent (hEvent=0x68) returned 1
	[0177.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n5qCmJE8IyM7pwIxOV5H.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\n5qcmje8iym7pwixov5h.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd23fb0, ftCreationTime.dwHighDateTime=0x1d5d7ff, ftLastAccessTime.dwLowDateTime=0x8837a0, ftLastAccessTime.dwHighDateTime=0x1d5db88, ftLastWriteTime.dwLowDateTime=0x8837a0, ftLastWriteTime.dwHighDateTime=0x1d5db88, nFileSizeHigh=0x0, nFileSizeLow=0x13a7f)) returned 1
	[0177.142] SetEvent (hEvent=0x2f4) returned 1
	[0177.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\szmk5T.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\szmk5t.csv"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca14c5b0, ftCreationTime.dwHighDateTime=0x1d5e106, ftLastAccessTime.dwLowDateTime=0x8b399a00, ftLastAccessTime.dwHighDateTime=0x1d5e304, ftLastWriteTime.dwLowDateTime=0x8b399a00, ftLastWriteTime.dwHighDateTime=0x1d5e304, nFileSizeHigh=0x0, nFileSizeLow=0xa655)) returned 1
	[0177.162] SetEvent (hEvent=0x70) returned 1
	[0177.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\x2Ywzp6f.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\x2ywzp6f.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3564d820, ftCreationTime.dwHighDateTime=0x1d5db47, ftLastAccessTime.dwLowDateTime=0xac4191e0, ftLastAccessTime.dwHighDateTime=0x1d58e94, ftLastWriteTime.dwLowDateTime=0xac4191e0, ftLastWriteTime.dwHighDateTime=0x1d58e94, nFileSizeHigh=0x0, nFileSizeLow=0xeff4)) returned 1
	[0177.177] SetEvent (hEvent=0x68) returned 1
	[0177.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yWe19NnqLCh.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ywe19nnqlch.ppt"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ed9faf0, ftCreationTime.dwHighDateTime=0x1d5da40, ftLastAccessTime.dwLowDateTime=0x2ffa06c0, ftLastAccessTime.dwHighDateTime=0x1d5e0f2, ftLastWriteTime.dwLowDateTime=0x2ffa06c0, ftLastWriteTime.dwHighDateTime=0x1d5e0f2, nFileSizeHigh=0x0, nFileSizeLow=0xb6e1)) returned 1
	[0177.192] SetEvent (hEvent=0x2f4) returned 1
	[0177.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0177.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0177.194] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0177.194] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0177.194] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0177.194] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0177.194] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0177.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0177.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0177.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0177.197] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0177.197] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0177.198] CloseHandle (hObject=0x34c) returned 1
	[0177.198] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0177.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0177.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0177.221] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0177.235] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0177.236] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0177.236] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0177.236] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0177.236] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0177.236] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0177.236] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0177.236] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0177.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0177.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0177.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0177.240] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0177.240] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0177.241] CloseHandle (hObject=0x33c) returned 1
	[0177.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0177.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0177.242] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0177.243] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0177.243] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0177.243] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1
	[0177.243] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
	[0177.243] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0177.243] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0177.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0177.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0177.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0177.247] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0177.248] WriteFile (in: hFile=0x34c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0177.250] CloseHandle (hObject=0x34c) returned 1
	[0177.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1
	[0177.251] SetEvent (hEvent=0x30c) returned 1
	[0177.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0177.252] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0177.253] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0177.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1
	[0177.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e080 | out: pbBuffer=0x1252e080) returned 1
	[0177.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443e0 | out: pbBuffer=0x127443e0) returned 1
	[0177.253] ReadFile (in: hFile=0x34c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12767d1c*=0xec, lpOverlapped=0x0) returned 1
	[0177.261] GetFileType (hFile=0x34c) returned 0x1
	[0177.261] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.261] WriteFile (in: hFile=0x34c, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x12767d00*=0xec, lpOverlapped=0x12767d0c) returned 1
	[0177.261] GetFileType (hFile=0x34c) returned 0x1
	[0177.261] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0177.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0177.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0177.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744498 | out: pbBuffer=0x12744498) returned 1
	[0177.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0177.262] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0177.262] WriteFile (in: hFile=0x33c, lpBuffer=0x127d2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d2000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0177.262] CloseHandle (hObject=0x33c) returned 1
	[0177.262] CloseHandle (hObject=0x34c) returned 1
	[0177.370] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.373] SetEvent (hEvent=0x30c) returned 1
	[0177.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0177.374] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0177.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1
	[0177.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e2e0 | out: pbBuffer=0x1252e2e0) returned 1
	[0177.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127444b0 | out: pbBuffer=0x127444b0) returned 1
	[0177.374] ReadFile (in: hFile=0x34c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12767d1c*=0x50, lpOverlapped=0x0) returned 1
	[0177.377] GetFileType (hFile=0x34c) returned 0x1
	[0177.377] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.377] WriteFile (in: hFile=0x34c, lpBuffer=0x126485a0*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x126485a0*, lpNumberOfBytesWritten=0x12767d00*=0x50, lpOverlapped=0x12767d0c) returned 1
	[0177.377] GetFileType (hFile=0x34c) returned 0x1
	[0177.377] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0177.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0177.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec901 | out: pbBuffer=0x124ec901) returned 1
	[0177.378] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744568 | out: pbBuffer=0x12744568) returned 1
	[0177.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0177.378] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0177.378] WriteFile (in: hFile=0x1e4, lpBuffer=0x127d2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d2500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0177.378] CloseHandle (hObject=0x1e4) returned 1
	[0177.378] CloseHandle (hObject=0x34c) returned 1
	[0177.378] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.544] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0178.069] SetEvent (hEvent=0x70) returned 1
	[0178.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0178.070] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0178.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0178.070] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e640 | out: pbBuffer=0x1240e640) returned 1
	[0178.071] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f0 | out: pbBuffer=0x127880f0) returned 1
	[0178.071] ReadFile (in: hFile=0x34c, lpBuffer=0x1291a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1291a000*, lpNumberOfBytesRead=0x124f3d1c*=0x85, lpOverlapped=0x0) returned 1
	[0178.073] GetFileType (hFile=0x34c) returned 0x1
	[0178.073] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0178.073] WriteFile (in: hFile=0x34c, lpBuffer=0x12712ab0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12712ab0*, lpNumberOfBytesWritten=0x124f3d00*=0x85, lpOverlapped=0x124f3d0c) returned 1
	[0178.074] GetFileType (hFile=0x34c) returned 0x1
	[0178.074] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0178.074] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0178.074] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0178.074] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0178.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a8 | out: pbBuffer=0x127881a8) returned 1
	[0178.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0178.075] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0178.075] WriteFile (in: hFile=0x344, lpBuffer=0x125f8500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f8500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0178.075] CloseHandle (hObject=0x344) returned 1
	[0178.075] CloseHandle (hObject=0x34c) returned 1
	[0178.075] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0178.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0178.123] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0178.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0178.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0178.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0178.123] ReadFile (in: hFile=0x34c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1242bd1c*=0x85, lpOverlapped=0x0) returned 1
	[0178.125] GetFileType (hFile=0x34c) returned 0x1
	[0178.125] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0178.125] WriteFile (in: hFile=0x34c, lpBuffer=0x1260e1b0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260e1b0*, lpNumberOfBytesWritten=0x1242bd00*=0x85, lpOverlapped=0x1242bd0c) returned 1
	[0178.126] GetFileType (hFile=0x34c) returned 0x1
	[0178.126] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0178.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0178.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0178.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0178.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0178.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0178.127] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0178.127] WriteFile (in: hFile=0x33c, lpBuffer=0x127d2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127d2000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0178.127] CloseHandle (hObject=0x33c) returned 1
	[0178.129] CloseHandle (hObject=0x34c) returned 1
	[0178.273] SetEvent (hEvent=0xa0) returned 1
	[0178.273] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0179.755] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0179.770] SetEvent (hEvent=0x318) returned 1
	[0179.771] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0179.772] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0179.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0179.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0179.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0179.773] ReadFile (in: hFile=0x2dc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f5d1c*=0x85, lpOverlapped=0x0) returned 1
	[0179.775] GetFileType (hFile=0x2dc) returned 0x1
	[0179.775] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.775] WriteFile (in: hFile=0x2dc, lpBuffer=0x12712120*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12712120*, lpNumberOfBytesWritten=0x124f5d00*=0x85, lpOverlapped=0x124f5d0c) returned 1
	[0179.775] GetFileType (hFile=0x2dc) returned 0x1
	[0179.775] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.775] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0179.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0179.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0179.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0179.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0179.776] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0179.776] WriteFile (in: hFile=0x1e4, lpBuffer=0x12770000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12770000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0179.777] CloseHandle (hObject=0x1e4) returned 1
	[0179.809] CloseHandle (hObject=0x2dc) returned 1
	[0179.940] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0180.888] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0180.928] SetEvent (hEvent=0x70) returned 1
	[0180.929] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0180.990] SetEvent (hEvent=0x70) returned 1
	[0180.990] SetEvent (hEvent=0x2e8) returned 1
	[0180.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0180.992] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0180.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1)) returned 1
	[0180.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0180.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0180.992] ReadFile (in: hFile=0x2dc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12767d1c*=0x3a1, lpOverlapped=0x0) returned 1
	[0181.295] GetFileType (hFile=0x2dc) returned 0x1
	[0181.295] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0181.295] WriteFile (in: hFile=0x2dc, lpBuffer=0x12498400*, nNumberOfBytesToWrite=0x3a1, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12498400*, lpNumberOfBytesWritten=0x12767d00*=0x3a1, lpOverlapped=0x12767d0c) returned 1
	[0181.296] GetFileType (hFile=0x2dc) returned 0x1
	[0181.296] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x3a1, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0181.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0181.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0181.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0181.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0181.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0181.297] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0181.297] WriteFile (in: hFile=0x344, lpBuffer=0x12770000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12770000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0181.297] CloseHandle (hObject=0x344) returned 1
	[0181.373] CloseHandle (hObject=0x2dc) returned 1
	[0181.451] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0182.952] SetEvent (hEvent=0xa0) returned 1
	[0182.952] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0182.963] SetEvent (hEvent=0x70) returned 1
	[0182.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\S1Iu.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\s1iu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0182.965] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0182.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\S1Iu.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\s1iu.wav"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa84df20, ftCreationTime.dwHighDateTime=0x1d5d9ac, ftLastAccessTime.dwLowDateTime=0x5d11b300, ftLastAccessTime.dwHighDateTime=0x1d5e4cc, ftLastWriteTime.dwLowDateTime=0x5d11b300, ftLastWriteTime.dwHighDateTime=0x1d5e4cc, nFileSizeHigh=0x0, nFileSizeLow=0xe406)) returned 1
	[0182.965] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c460 | out: pbBuffer=0x1244c460) returned 1
	[0182.965] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410548 | out: pbBuffer=0x12410548) returned 1
	[0182.965] ReadFile (in: hFile=0x344, lpBuffer=0x12964000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12964000*, lpNumberOfBytesRead=0x12767d1c*=0xe406, lpOverlapped=0x0) returned 1
	[0182.970] GetFileType (hFile=0x344) returned 0x1
	[0182.970] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0182.970] WriteFile (in: hFile=0x344, lpBuffer=0x12984000*, nNumberOfBytesToWrite=0xe406, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12984000*, lpNumberOfBytesWritten=0x12767d00*=0xe406, lpOverlapped=0x12767d0c) returned 1
	[0182.971] GetFileType (hFile=0x344) returned 0x1
	[0182.971] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xe406, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0182.971] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0182.971] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0182.971] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0182.971] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0182.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\S1Iu.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\s1iu.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0182.972] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0182.972] WriteFile (in: hFile=0x2dc, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0182.972] CloseHandle (hObject=0x2dc) returned 1
	[0182.982] CloseHandle (hObject=0x344) returned 1
	[0182.989] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\S1Iu.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\s1iu.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\S1Iu.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\s1iu.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\LTtHTD2SyO7vFh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\ltthtd2syo7vfh.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9998700, ftCreationTime.dwHighDateTime=0x1d5dba2, ftLastAccessTime.dwLowDateTime=0xa55c01d0, ftLastAccessTime.dwHighDateTime=0x1d5d863, ftLastWriteTime.dwLowDateTime=0xa55c01d0, ftLastWriteTime.dwHighDateTime=0x1d5d863, nFileSizeHigh=0x0, nFileSizeLow=0x624a)) returned 1
	[0183.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\PBNhapvAlAurNqggK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\pbnhapvalaurnqggk.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef41250, ftCreationTime.dwHighDateTime=0x1d5dc18, ftLastAccessTime.dwLowDateTime=0xc0218c30, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0xc0218c30, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x9536)) returned 1
	[0183.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\LTtHTD2SyO7vFh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\ltthtd2syo7vfh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.093] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\LTtHTD2SyO7vFh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\ltthtd2syo7vfh.wav"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9998700, ftCreationTime.dwHighDateTime=0x1d5dba2, ftLastAccessTime.dwLowDateTime=0xa55c01d0, ftLastAccessTime.dwHighDateTime=0x1d5d863, ftLastWriteTime.dwLowDateTime=0xa55c01d0, ftLastWriteTime.dwHighDateTime=0x1d5d863, nFileSizeHigh=0x0, nFileSizeLow=0x624a)) returned 1
	[0183.093] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e580 | out: pbBuffer=0x1252e580) returned 1
	[0183.093] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e6b8 | out: pbBuffer=0x1251e6b8) returned 1
	[0183.093] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0183.098] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0183.098] SetEvent (hEvent=0xa0) returned 1
	[0183.098] SetEvent (hEvent=0x70) returned 1
	[0183.099] ReadFile (in: hFile=0x2dc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12767d1c*=0x624a, lpOverlapped=0x0) returned 1
	[0183.103] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0183.108] GetFileType (hFile=0x2dc) returned 0x1
	[0183.108] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.108] WriteFile (in: hFile=0x2dc, lpBuffer=0x126fc000*, nNumberOfBytesToWrite=0x624a, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x126fc000*, lpNumberOfBytesWritten=0x12767d00*=0x624a, lpOverlapped=0x12767d0c) returned 1
	[0183.109] GetFileType (hFile=0x2dc) returned 0x1
	[0183.109] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x624a, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.109] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434901 | out: pbBuffer=0x12434901) returned 1
	[0183.109] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0183.109] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0183.109] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e770 | out: pbBuffer=0x1251e770) returned 1
	[0183.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\LTtHTD2SyO7vFh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\ltthtd2syo7vfh.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.109] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.109] WriteFile (in: hFile=0x33c, lpBuffer=0x1277ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277ca00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.109] CloseHandle (hObject=0x33c) returned 1
	[0183.110] CloseHandle (hObject=0x2dc) returned 1
	[0183.110] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\LTtHTD2SyO7vFh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\ltthtd2syo7vfh.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\LTtHTD2SyO7vFh.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\ltthtd2syo7vfh.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.112] SetEvent (hEvent=0x68) returned 1
	[0183.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\PBNhapvAlAurNqggK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\pbnhapvalaurnqggk.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.113] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\PBNhapvAlAurNqggK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\pbnhapvalaurnqggk.wav"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbef41250, ftCreationTime.dwHighDateTime=0x1d5dc18, ftLastAccessTime.dwLowDateTime=0xc0218c30, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0xc0218c30, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x9536)) returned 1
	[0183.113] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e7c0 | out: pbBuffer=0x1252e7c0) returned 1
	[0183.113] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e7b8 | out: pbBuffer=0x1251e7b8) returned 1
	[0183.113] ReadFile (in: hFile=0x2dc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12767d1c*=0x9536, lpOverlapped=0x0) returned 1
	[0183.124] GetFileType (hFile=0x2dc) returned 0x1
	[0183.124] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.124] WriteFile (in: hFile=0x2dc, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x9536, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12767d00*=0x9536, lpOverlapped=0x12767d0c) returned 1
	[0183.124] GetFileType (hFile=0x2dc) returned 0x1
	[0183.124] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x9536, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.124] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0183.125] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0183.125] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0183.125] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0183.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\PBNhapvAlAurNqggK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\pbnhapvalaurnqggk.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.125] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.125] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.125] CloseHandle (hObject=0x33c) returned 1
	[0183.125] CloseHandle (hObject=0x2dc) returned 1
	[0183.126] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\PBNhapvAlAurNqggK.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\pbnhapvalaurnqggk.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\PBNhapvAlAurNqggK.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\pbnhapvalaurnqggk.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.128] GetFileType (hFile=0x34c) returned 0x1
	[0183.128] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.129] WriteFile (in: hFile=0x34c, lpBuffer=0x1265e000*, nNumberOfBytesToWrite=0xc9c4, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1265e000*, lpNumberOfBytesWritten=0x1242bd00*=0xc9c4, lpOverlapped=0x1242bd0c) returned 1
	[0183.129] GetFileType (hFile=0x34c) returned 0x1
	[0183.129] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xc9c4, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0183.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0183.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0183.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410510 | out: pbBuffer=0x12410510) returned 1
	[0183.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\Exbj2tZr  _6Vr2s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\exbj2tzr  _6vr2s.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.130] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0183.130] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.130] CloseHandle (hObject=0x2dc) returned 1
	[0183.130] CloseHandle (hObject=0x34c) returned 1
	[0183.130] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\Exbj2tZr  _6Vr2s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\exbj2tzr  _6vr2s.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\Exbj2tZr  _6Vr2s.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\exbj2tzr  _6vr2s.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.140] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0183.170] SetEvent (hEvent=0x318) returned 1
	[0183.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\DiGKNDUtXuB4hlkF-1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\digkndutxub4hlkf-1.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.172] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0183.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\DiGKNDUtXuB4hlkF-1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\digkndutxub4hlkf-1.wav"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe43f1830, ftCreationTime.dwHighDateTime=0x1d5dfe6, ftLastAccessTime.dwLowDateTime=0xf3a72840, ftLastAccessTime.dwHighDateTime=0x1d5d95a, ftLastWriteTime.dwLowDateTime=0xf3a72840, ftLastWriteTime.dwHighDateTime=0x1d5d95a, nFileSizeHigh=0x0, nFileSizeLow=0x4c56)) returned 1
	[0183.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c600 | out: pbBuffer=0x1244c600) returned 1
	[0183.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410528 | out: pbBuffer=0x12410528) returned 1
	[0183.172] ReadFile (in: hFile=0x33c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x12769d1c*=0x4c56, lpOverlapped=0x0) returned 1
	[0183.196] GetFileType (hFile=0x33c) returned 0x1
	[0183.196] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.196] WriteFile (in: hFile=0x33c, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0x4c56, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x12769d00*=0x4c56, lpOverlapped=0x12769d0c) returned 1
	[0183.196] GetFileType (hFile=0x33c) returned 0x1
	[0183.196] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4c56, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0183.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0183.197] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0183.197] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105e0 | out: pbBuffer=0x124105e0) returned 1
	[0183.197] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\DiGKNDUtXuB4hlkF-1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\digkndutxub4hlkf-1.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0183.197] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0183.197] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.197] CloseHandle (hObject=0x1e4) returned 1
	[0183.197] CloseHandle (hObject=0x33c) returned 1
	[0183.198] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\DiGKNDUtXuB4hlkF-1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\digkndutxub4hlkf-1.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\DiGKNDUtXuB4hlkF-1.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\digkndutxub4hlkf-1.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\y7CVLXeKX6g.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\y7cvlxekx6g.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67431c30, ftCreationTime.dwHighDateTime=0x1d5e77c, ftLastAccessTime.dwLowDateTime=0x3ee609f0, ftLastAccessTime.dwHighDateTime=0x1d5e754, ftLastWriteTime.dwLowDateTime=0x3ee609f0, ftLastWriteTime.dwHighDateTime=0x1d5e754, nFileSizeHigh=0x0, nFileSizeLow=0xf8cc)) returned 1
	[0183.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\zw17nOJ0IwCKgijhA.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\zw17noj0iwckgijha.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52d15ce0, ftCreationTime.dwHighDateTime=0x1d5e1f4, ftLastAccessTime.dwLowDateTime=0x73c775a0, ftLastAccessTime.dwHighDateTime=0x1d5e353, ftLastWriteTime.dwLowDateTime=0x73c775a0, ftLastWriteTime.dwHighDateTime=0x1d5e353, nFileSizeHigh=0x0, nFileSizeLow=0x103dc)) returned 1
	[0183.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\y7CVLXeKX6g.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\y7cvlxekx6g.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.204] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0183.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\y7CVLXeKX6g.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\y7cvlxekx6g.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67431c30, ftCreationTime.dwHighDateTime=0x1d5e77c, ftLastAccessTime.dwLowDateTime=0x3ee609f0, ftLastAccessTime.dwHighDateTime=0x1d5e754, ftLastWriteTime.dwLowDateTime=0x3ee609f0, ftLastWriteTime.dwHighDateTime=0x1d5e754, nFileSizeHigh=0x0, nFileSizeLow=0xf8cc)) returned 1
	[0183.204] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c820 | out: pbBuffer=0x1244c820) returned 1
	[0183.204] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410608 | out: pbBuffer=0x12410608) returned 1
	[0183.204] ReadFile (in: hFile=0x33c, lpBuffer=0x127b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127b4000*, lpNumberOfBytesRead=0x12769d1c*=0xf8cc, lpOverlapped=0x0) returned 1
	[0183.231] GetFileType (hFile=0x33c) returned 0x1
	[0183.231] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.231] WriteFile (in: hFile=0x33c, lpBuffer=0x126e2000*, nNumberOfBytesToWrite=0xf8cc, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x126e2000*, lpNumberOfBytesWritten=0x12769d00*=0xf8cc, lpOverlapped=0x12769d0c) returned 1
	[0183.232] GetFileType (hFile=0x33c) returned 0x1
	[0183.232] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xf8cc, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0183.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0183.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0183.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410730 | out: pbBuffer=0x12410730) returned 1
	[0183.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\y7CVLXeKX6g.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\y7cvlxekx6g.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.233] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0183.233] WriteFile (in: hFile=0x344, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.233] CloseHandle (hObject=0x344) returned 1
	[0183.233] CloseHandle (hObject=0x33c) returned 1
	[0183.233] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\y7CVLXeKX6g.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\y7cvlxekx6g.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\y7CVLXeKX6g.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\y7cvlxekx6g.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.236] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0183.354] SetEvent (hEvent=0x2e8) returned 1
	[0183.354] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0183.669] SetEvent (hEvent=0x318) returned 1
	[0183.670] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0185.622] SetEvent (hEvent=0x2f4) returned 1
	[0185.622] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0185.659] SetEvent (hEvent=0x2f4) returned 1
	[0185.659] SetEvent (hEvent=0x318) returned 1
	[0185.659] GetFileType (hFile=0x33c) returned 0x1
	[0185.659] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.660] WriteFile (in: hFile=0x33c, lpBuffer=0x1298c000*, nNumberOfBytesToWrite=0x534, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1298c000*, lpNumberOfBytesWritten=0x12767d00*=0x534, lpOverlapped=0x12767d0c) returned 1
	[0185.660] GetFileType (hFile=0x33c) returned 0x1
	[0185.660] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x534, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.660] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0185.660] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0185.660] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0185.661] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0185.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NFcBSPRjS7jgBPvh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nfcbsprjs7jgbpvh.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.661] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0185.661] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.661] CloseHandle (hObject=0x2dc) returned 1
	[0185.661] CloseHandle (hObject=0x33c) returned 1
	[0185.661] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NFcBSPRjS7jgBPvh.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nfcbsprjs7jgbpvh.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NFcBSPRjS7jgBPvh.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nfcbsprjs7jgbpvh.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\PkdJzMOwu-e.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\pkdjzmowu-e.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1d8f70, ftCreationTime.dwHighDateTime=0x1d5e0f9, ftLastAccessTime.dwLowDateTime=0x9f0893e0, ftLastAccessTime.dwHighDateTime=0x1d5e50e, ftLastWriteTime.dwLowDateTime=0x9f0893e0, ftLastWriteTime.dwHighDateTime=0x1d5e50e, nFileSizeHigh=0x0, nFileSizeLow=0x652b)) returned 1
	[0185.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TIWX_fwu7g1qdZF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tiwx_fwu7g1qdzf.png"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd3225a0, ftCreationTime.dwHighDateTime=0x1d5e514, ftLastAccessTime.dwLowDateTime=0x8ea5efb0, ftLastAccessTime.dwHighDateTime=0x1d5e361, ftLastWriteTime.dwLowDateTime=0x8ea5efb0, ftLastWriteTime.dwHighDateTime=0x1d5e361, nFileSizeHigh=0x0, nFileSizeLow=0xbd84)) returned 1
	[0185.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TP3bdPfUcde_x.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tp3bdpfucde_x.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11fecf70, ftCreationTime.dwHighDateTime=0x1d5e0fc, ftLastAccessTime.dwLowDateTime=0xb3a38870, ftLastAccessTime.dwHighDateTime=0x1d5dc24, ftLastWriteTime.dwLowDateTime=0xb3a38870, ftLastWriteTime.dwHighDateTime=0x1d5dc24, nFileSizeHigh=0x0, nFileSizeLow=0x5f46)) returned 1
	[0185.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TIWX_fwu7g1qdZF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tiwx_fwu7g1qdzf.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0185.669] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0185.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TIWX_fwu7g1qdZF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tiwx_fwu7g1qdzf.png"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd3225a0, ftCreationTime.dwHighDateTime=0x1d5e514, ftLastAccessTime.dwLowDateTime=0x8ea5efb0, ftLastAccessTime.dwHighDateTime=0x1d5e361, ftLastWriteTime.dwLowDateTime=0x8ea5efb0, ftLastWriteTime.dwHighDateTime=0x1d5e361, nFileSizeHigh=0x0, nFileSizeLow=0xbd84)) returned 1
	[0185.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0185.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440d8 | out: pbBuffer=0x127440d8) returned 1
	[0185.669] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12767d1c*=0xbd84, lpOverlapped=0x0) returned 1
	[0185.733] GetFileType (hFile=0x33c) returned 0x1
	[0185.733] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.733] WriteFile (in: hFile=0x33c, lpBuffer=0x125cc000*, nNumberOfBytesToWrite=0xbd84, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x125cc000*, lpNumberOfBytesWritten=0x12767d00*=0xbd84, lpOverlapped=0x12767d0c) returned 1
	[0185.733] GetFileType (hFile=0x33c) returned 0x1
	[0185.733] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xbd84, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.733] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400801 | out: pbBuffer=0x12400801) returned 1
	[0185.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400901 | out: pbBuffer=0x12400901) returned 1
	[0185.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0185.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744340 | out: pbBuffer=0x12744340) returned 1
	[0185.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TIWX_fwu7g1qdZF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tiwx_fwu7g1qdzf.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.734] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0185.734] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.734] CloseHandle (hObject=0x2dc) returned 1
	[0185.735] CloseHandle (hObject=0x33c) returned 1
	[0185.735] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TIWX_fwu7g1qdZF.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tiwx_fwu7g1qdzf.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TIWX_fwu7g1qdZF.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tiwx_fwu7g1qdzf.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\VIzBq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vizbq.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8504a310, ftCreationTime.dwHighDateTime=0x1d5d912, ftLastAccessTime.dwLowDateTime=0xfd81f0f0, ftLastAccessTime.dwHighDateTime=0x1d5e555, ftLastWriteTime.dwLowDateTime=0xfd81f0f0, ftLastWriteTime.dwHighDateTime=0x1d5e555, nFileSizeHigh=0x0, nFileSizeLow=0x2cbd)) returned 1
	[0185.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\_wrmhDdA.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\_wrmhdda.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7ab60, ftCreationTime.dwHighDateTime=0x1d5dc49, ftLastAccessTime.dwLowDateTime=0x62279e50, ftLastAccessTime.dwHighDateTime=0x1d5e39a, ftLastWriteTime.dwLowDateTime=0x62279e50, ftLastWriteTime.dwHighDateTime=0x1d5e39a, nFileSizeHigh=0x0, nFileSizeLow=0x156f8)) returned 1
	[0185.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\dTbYfu SzaY6-cp8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\dtbyfu szay6-cp8.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf883ff10, ftCreationTime.dwHighDateTime=0x1d5e395, ftLastAccessTime.dwLowDateTime=0xbf6c9bb0, ftLastAccessTime.dwHighDateTime=0x1d5e5f2, ftLastWriteTime.dwLowDateTime=0xbf6c9bb0, ftLastWriteTime.dwHighDateTime=0x1d5e5f2, nFileSizeHigh=0x0, nFileSizeLow=0xc5fb)) returned 1
	[0185.739] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\_wrmhDdA.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\_wrmhdda.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0185.741] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0185.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\_wrmhDdA.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\_wrmhdda.gif"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8f7ab60, ftCreationTime.dwHighDateTime=0x1d5dc49, ftLastAccessTime.dwLowDateTime=0x62279e50, ftLastAccessTime.dwHighDateTime=0x1d5e39a, ftLastWriteTime.dwLowDateTime=0x62279e50, ftLastWriteTime.dwHighDateTime=0x1d5e39a, nFileSizeHigh=0x0, nFileSizeLow=0x156f8)) returned 1
	[0185.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c4e0 | out: pbBuffer=0x1244c4e0) returned 1
	[0185.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744358 | out: pbBuffer=0x12744358) returned 1
	[0185.741] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12767d1c*=0x156f8, lpOverlapped=0x0) returned 1
	[0185.801] GetFileType (hFile=0x33c) returned 0x1
	[0185.801] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.801] WriteFile (in: hFile=0x33c, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x156f8, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x12767d00*=0x156f8, lpOverlapped=0x12767d0c) returned 1
	[0185.802] GetFileType (hFile=0x33c) returned 0x1
	[0185.802] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x156f8, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0185.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f01 | out: pbBuffer=0x12400f01) returned 1
	[0185.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401001 | out: pbBuffer=0x12401001) returned 1
	[0185.803] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444f0 | out: pbBuffer=0x127444f0) returned 1
	[0185.803] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\_wrmhDdA.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\_wrmhdda.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0185.803] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0185.803] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.803] CloseHandle (hObject=0x1e4) returned 1
	[0185.803] CloseHandle (hObject=0x33c) returned 1
	[0185.803] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\_wrmhDdA.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\_wrmhdda.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\_wrmhDdA.gif.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\_wrmhdda.gif.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.862] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.307] SetEvent (hEvent=0x318) returned 1
	[0186.307] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.312] SetEvent (hEvent=0x2e8) returned 1
	[0186.312] SetEvent (hEvent=0x70) returned 1
	[0186.312] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.418] SetEvent (hEvent=0x70) returned 1
	[0186.418] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.420] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.440] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.449] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.460] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.470] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.490] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.503] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.528] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.535] SetEvent (hEvent=0x318) returned 1
	[0186.535] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.539] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12725d0c | out: lpMode=0x12725d0c) returned 0
	[0186.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12725ad0 | out: lpFileInformation=0x12725ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0186.539] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f120 | out: pbBuffer=0x1240f120) returned 1
	[0186.539] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e910 | out: pbBuffer=0x1251e910) returned 1
	[0186.540] ReadFile (in: hFile=0x344, lpBuffer=0x12808000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12725d1c, lpOverlapped=0x0 | out: lpBuffer=0x12808000*, lpNumberOfBytesRead=0x12725d1c*=0x11a, lpOverlapped=0x0) returned 1
	[0186.541] GetFileType (hFile=0x344) returned 0x1
	[0186.541] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12725ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.541] WriteFile (in: hFile=0x344, lpBuffer=0x1277f560*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x12725d00, lpOverlapped=0x12725d0c | out: lpBuffer=0x1277f560*, lpNumberOfBytesWritten=0x12725d00*=0x11a, lpOverlapped=0x12725d0c) returned 1
	[0186.541] GetFileType (hFile=0x344) returned 0x1
	[0186.541] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x12725ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.541] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9101 | out: pbBuffer=0x127e9101) returned 1
	[0186.541] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9201 | out: pbBuffer=0x127e9201) returned 1
	[0186.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9301 | out: pbBuffer=0x127e9301) returned 1
	[0186.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ea38 | out: pbBuffer=0x1251ea38) returned 1
	[0186.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.542] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12725d0c | out: lpMode=0x12725d0c) returned 0
	[0186.542] WriteFile (in: hFile=0x1e4, lpBuffer=0x128d4f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12725d0c, lpOverlapped=0x0 | out: lpBuffer=0x128d4f00*, lpNumberOfBytesWritten=0x12725d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.542] CloseHandle (hObject=0x1e4) returned 1
	[0186.542] CloseHandle (hObject=0x344) returned 1
	[0186.542] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.547] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.553] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.560] SetEvent (hEvent=0x68) returned 1
	[0186.560] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.560] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms\\*", lpFindFileData=0x12769a44 | out: lpFindFileData=0x12769a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0186.560] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.560] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms\\*", lpFindFileData=0x12725a44 | out: lpFindFileData=0x12725a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0186.561] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.751] SetEvent (hEvent=0x30c) returned 1
	[0186.751] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.881] SetEvent (hEvent=0x2e8) returned 1
	[0186.881] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.883] SetEvent (hEvent=0x2e8) returned 1
	[0186.883] SetEvent (hEvent=0x2f4) returned 1
	[0186.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\x4coRc2vg1.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\x4corc2vg1.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.884] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\x4coRc2vg1.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\x4corc2vg1.flv"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42dfb030, ftCreationTime.dwHighDateTime=0x1d5e18a, ftLastAccessTime.dwLowDateTime=0x8c47f700, ftLastAccessTime.dwHighDateTime=0x1d5e2a7, ftLastWriteTime.dwLowDateTime=0x8c47f700, ftLastWriteTime.dwHighDateTime=0x1d5e2a7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5d)) returned 1
	[0186.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0186.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788028 | out: pbBuffer=0x12788028) returned 1
	[0186.884] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12767d1c*=0x5a5d, lpOverlapped=0x0) returned 1
	[0186.905] GetFileType (hFile=0x33c) returned 0x1
	[0186.905] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.905] WriteFile (in: hFile=0x33c, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x5a5d, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x12767d00*=0x5a5d, lpOverlapped=0x12767d0c) returned 1
	[0186.905] GetFileType (hFile=0x33c) returned 0x1
	[0186.905] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x5a5d, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0186.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0186.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0186.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880e0 | out: pbBuffer=0x127880e0) returned 1
	[0186.906] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\x4coRc2vg1.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\x4corc2vg1.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.906] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.906] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.906] CloseHandle (hObject=0x2dc) returned 1
	[0186.906] CloseHandle (hObject=0x33c) returned 1
	[0186.906] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\x4coRc2vg1.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\x4corc2vg1.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\x4coRc2vg1.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\x4corc2vg1.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\grTUvN 8YQ4SGNta.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\grtuvn 8yq4sgnta.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.908] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\grTUvN 8YQ4SGNta.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\grtuvn 8yq4sgnta.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8dee00, ftCreationTime.dwHighDateTime=0x1d5d7d7, ftLastAccessTime.dwLowDateTime=0xc232d130, ftLastAccessTime.dwHighDateTime=0x1d5e27c, ftLastWriteTime.dwLowDateTime=0xc232d130, ftLastWriteTime.dwHighDateTime=0x1d5e27c, nFileSizeHigh=0x0, nFileSizeLow=0x403a)) returned 1
	[0186.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0186.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788108 | out: pbBuffer=0x12788108) returned 1
	[0186.908] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12767d1c*=0x403a, lpOverlapped=0x0) returned 1
	[0186.935] GetFileType (hFile=0x33c) returned 0x1
	[0186.935] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.935] WriteFile (in: hFile=0x33c, lpBuffer=0x1286a000*, nNumberOfBytesToWrite=0x403a, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1286a000*, lpNumberOfBytesWritten=0x12767d00*=0x403a, lpOverlapped=0x12767d0c) returned 1
	[0186.936] GetFileType (hFile=0x33c) returned 0x1
	[0186.936] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x403a, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0186.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0186.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0186.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0186.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\grTUvN 8YQ4SGNta.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\grtuvn 8yq4sgnta.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.936] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.936] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.937] CloseHandle (hObject=0x1e4) returned 1
	[0186.937] CloseHandle (hObject=0x33c) returned 1
	[0186.937] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\grTUvN 8YQ4SGNta.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\grtuvn 8yq4sgnta.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\grTUvN 8YQ4SGNta.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\grtuvn 8yq4sgnta.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\TBZe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\tbze.avi"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x616e9ed0, ftCreationTime.dwHighDateTime=0x1d5e3ab, ftLastAccessTime.dwLowDateTime=0xd89f2a70, ftLastAccessTime.dwHighDateTime=0x1d5e292, ftLastWriteTime.dwLowDateTime=0xd89f2a70, ftLastWriteTime.dwHighDateTime=0x1d5e292, nFileSizeHigh=0x0, nFileSizeLow=0x12549)) returned 1
	[0186.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\hHwbpVF.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\hhwbpvf.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4cafe0, ftCreationTime.dwHighDateTime=0x1d5e779, ftLastAccessTime.dwLowDateTime=0x40fcd180, ftLastAccessTime.dwHighDateTime=0x1d5da5a, ftLastWriteTime.dwLowDateTime=0x40fcd180, ftLastWriteTime.dwHighDateTime=0x1d5da5a, nFileSizeHigh=0x0, nFileSizeLow=0xe23d)) returned 1
	[0186.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\TBZe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\tbze.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.943] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\TBZe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\tbze.avi"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x616e9ed0, ftCreationTime.dwHighDateTime=0x1d5e3ab, ftLastAccessTime.dwLowDateTime=0xd89f2a70, ftLastAccessTime.dwHighDateTime=0x1d5e292, ftLastWriteTime.dwLowDateTime=0xd89f2a70, ftLastWriteTime.dwHighDateTime=0x1d5e292, nFileSizeHigh=0x0, nFileSizeLow=0x12549)) returned 1
	[0186.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324a0 | out: pbBuffer=0x127324a0) returned 1
	[0186.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0186.944] ReadFile (in: hFile=0x33c, lpBuffer=0x1287c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1287c000*, lpNumberOfBytesRead=0x12767d1c*=0x12549, lpOverlapped=0x0) returned 1
	[0186.967] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.988] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0186.998] SetEvent (hEvent=0x2e8) returned 1
	[0186.999] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\7Slv_zqdZ5jk.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\7slv_zqdz5jk.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0187.000] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0187.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\7Slv_zqdZ5jk.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\7slv_zqdz5jk.swf"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd05d25b0, ftCreationTime.dwHighDateTime=0x1d5da72, ftLastAccessTime.dwLowDateTime=0xcb66e180, ftLastAccessTime.dwHighDateTime=0x1d5e4d2, ftLastWriteTime.dwLowDateTime=0xcb66e180, ftLastWriteTime.dwHighDateTime=0x1d5e4d2, nFileSizeHigh=0x0, nFileSizeLow=0x542d)) returned 1
	[0187.000] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c2e0 | out: pbBuffer=0x1244c2e0) returned 1
	[0187.000] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744108 | out: pbBuffer=0x12744108) returned 1
	[0187.000] ReadFile (in: hFile=0x2dc, lpBuffer=0x126c4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126c4000*, lpNumberOfBytesRead=0x1242bd1c*=0x542d, lpOverlapped=0x0) returned 1
	[0187.007] GetFileType (hFile=0x2dc) returned 0x1
	[0187.007] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.007] WriteFile (in: hFile=0x2dc, lpBuffer=0x124a1500*, nNumberOfBytesToWrite=0x542d, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124a1500*, lpNumberOfBytesWritten=0x1242bd00*=0x542d, lpOverlapped=0x1242bd0c) returned 1
	[0187.007] GetFileType (hFile=0x2dc) returned 0x1
	[0187.007] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x542d, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0187.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0187.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0187.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127443b0 | out: pbBuffer=0x127443b0) returned 1
	[0187.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\7Slv_zqdZ5jk.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\7slv_zqdz5jk.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0187.008] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0187.008] WriteFile (in: hFile=0x1e4, lpBuffer=0x12990500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12990500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.008] CloseHandle (hObject=0x1e4) returned 1
	[0187.009] CloseHandle (hObject=0x2dc) returned 1
	[0187.009] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\7Slv_zqdZ5jk.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\7slv_zqdz5jk.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\7Slv_zqdZ5jk.swf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\7slv_zqdz5jk.swf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\8zDHmf.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\8zdhmf.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0187.030] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0187.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\8zDHmf.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\8zdhmf.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2de6f30, ftCreationTime.dwHighDateTime=0x1d5dda2, ftLastAccessTime.dwLowDateTime=0x17b1dc0, ftLastAccessTime.dwHighDateTime=0x1d5db75, ftLastWriteTime.dwLowDateTime=0x17b1dc0, ftLastWriteTime.dwHighDateTime=0x1d5db75, nFileSizeHigh=0x0, nFileSizeLow=0x1183b)) returned 1
	[0187.030] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0187.030] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0187.030] ReadFile (in: hFile=0x2dc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0x1183b, lpOverlapped=0x0) returned 1
	[0187.044] GetFileType (hFile=0x2dc) returned 0x1
	[0187.044] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.044] WriteFile (in: hFile=0x2dc, lpBuffer=0x12704000*, nNumberOfBytesToWrite=0x1183b, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12704000*, lpNumberOfBytesWritten=0x1242bd00*=0x1183b, lpOverlapped=0x1242bd0c) returned 1
	[0187.044] GetFileType (hFile=0x2dc) returned 0x1
	[0187.044] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1183b, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0187.045] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0187.045] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0187.045] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0187.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\8zDHmf.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\8zdhmf.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0187.045] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0187.045] WriteFile (in: hFile=0x1e4, lpBuffer=0x128e0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.046] CloseHandle (hObject=0x1e4) returned 1
	[0187.046] CloseHandle (hObject=0x2dc) returned 1
	[0187.046] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\8zDHmf.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\8zdhmf.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\8zDHmf.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\8zdhmf.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\oDQP.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\odqp.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0187.204] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0187.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\oDQP.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\odqp.flv"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10c222f0, ftCreationTime.dwHighDateTime=0x1d5e1bb, ftLastAccessTime.dwLowDateTime=0x98035960, ftLastAccessTime.dwHighDateTime=0x1d5e548, ftLastWriteTime.dwLowDateTime=0x98035960, ftLastWriteTime.dwHighDateTime=0x1d5e548, nFileSizeHigh=0x0, nFileSizeLow=0x12758)) returned 1
	[0187.205] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0187.205] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0187.205] ReadFile (in: hFile=0x2dc, lpBuffer=0x1284a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x1284a000*, lpNumberOfBytesRead=0x12727d1c*=0x12758, lpOverlapped=0x0) returned 1
	[0187.230] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0187.332] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0187.372] SetEvent (hEvent=0x2f4) returned 1
	[0187.372] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0187.407] SetEvent (hEvent=0x2f4) returned 1
	[0187.407] SetEvent (hEvent=0x2e8) returned 1
	[0187.409] GetFileType (hFile=0x344) returned 0x1
	[0187.409] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.409] WriteFile (in: hFile=0x344, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x13fbb, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x12769d00*=0x13fbb, lpOverlapped=0x12769d0c) returned 1
	[0187.410] GetFileType (hFile=0x344) returned 0x1
	[0187.410] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x13fbb, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.410] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0187.410] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0187.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0187.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0187.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\r3ICd_h.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\r3icd_h.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0187.411] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0187.411] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.411] CloseHandle (hObject=0x2dc) returned 1
	[0187.412] CloseHandle (hObject=0x344) returned 1
	[0187.412] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\r3ICd_h.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\r3icd_h.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\r3ICd_h.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\r3icd_h.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users" (normalized: "c:\\users\\all users"), fInfoLevelId=0x0, lpFileInformation=0x1276bc20 | out: lpFileInformation=0x1276bc20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0187.419] CreateFileW (lpFileName="C:\\Users\\All Users" (normalized: "c:\\users\\all users"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x344
	[0187.419] GetFileInformationByHandle (in: hFile=0x344, lpFileInformation=0x1276bbb0 | out: lpFileInformation=0x1276bbb0) returned 1
	[0187.419] GetFileInformationByHandleEx (in: hFile=0x344, FileInformationClass=0x9, lpFileInformation=0x1276bba8, dwBufferSize=0x8 | out: lpFileInformation=0x1276bba8) returned 1
	[0187.419] CloseHandle (hObject=0x344) returned 1
	[0187.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default" (normalized: "c:\\users\\default"), fInfoLevelId=0x0, lpFileInformation=0x1276bc20 | out: lpFileInformation=0x1276bc20*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0187.420] CreateFileW (lpFileName="C:\\Users\\Default" (normalized: "c:\\users\\default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.420] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x1276baf8 | out: lpFindFileData=0x1276baf8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0187.469] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.503] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0187.503] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x6770de0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6770de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xc0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG", cAlternateFileName="NTUSER~3.LOG")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8d30919, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8d30919, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0187.504] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0187.505] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0187.505] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0187.505] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0187.505] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0187.505] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0187.505] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0187.505] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.505] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0187.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b7c0 | out: lpFileInformation=0x1276b7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0187.507] CreateFileW (lpFileName="C:\\Users\\Default\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0187.507] CreateFileW (lpFileName="C:\\Users\\Default\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0187.509] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b9d0 | out: lpMode=0x1276b9d0) returned 0
	[0187.509] WriteFile (in: hFile=0x344, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b9d0, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b9d0*=0x1180, lpOverlapped=0x0) returned 1
	[0187.510] CloseHandle (hObject=0x344) returned 1
	[0187.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData" (normalized: "c:\\users\\default\\appdata"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0187.511] CreateFileW (lpFileName="C:\\Users\\Default\\AppData" (normalized: "c:\\users\\default\\appdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.512] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0187.512] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.512] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
	[0187.512] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1
	[0187.512] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1
	[0187.512] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.512] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0187.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0187.512] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0187.512] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0187.514] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0187.514] WriteFile (in: hFile=0x344, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0187.515] CloseHandle (hObject=0x344) returned 1
	[0187.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local" (normalized: "c:\\users\\default\\appdata\\local"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0187.587] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local" (normalized: "c:\\users\\default\\appdata\\local"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.587] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0187.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66fe9c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x93e4774a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0187.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0187.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1
	[0187.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0187.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0187.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0187.624] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.624] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0187.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0187.625] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0187.625] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0187.627] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0187.627] WriteFile (in: hFile=0x344, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0187.628] CloseHandle (hObject=0x344) returned 1
	[0187.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data" (normalized: "c:\\users\\default\\appdata\\local\\application data"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0187.629] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data" (normalized: "c:\\users\\default\\appdata\\local\\application data"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x344
	[0187.629] GetFileInformationByHandle (in: hFile=0x344, lpFileInformation=0x1276ba84 | out: lpFileInformation=0x1276ba84) returned 1
	[0187.629] GetFileInformationByHandleEx (in: hFile=0x344, FileInformationClass=0x9, lpFileInformation=0x1276ba7c, dwBufferSize=0x8 | out: lpFileInformation=0x1276ba7c) returned 1
	[0187.629] CloseHandle (hObject=0x344) returned 1
	[0187.629] SetEvent (hEvent=0x2e8) returned 1
	[0187.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History" (normalized: "c:\\users\\default\\appdata\\local\\history"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0187.630] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\History" (normalized: "c:\\users\\default\\appdata\\local\\history"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x344
	[0187.630] GetFileInformationByHandle (in: hFile=0x344, lpFileInformation=0x1276ba84 | out: lpFileInformation=0x1276ba84) returned 1
	[0187.631] GetFileInformationByHandleEx (in: hFile=0x344, FileInformationClass=0x9, lpFileInformation=0x1276ba7c, dwBufferSize=0x8 | out: lpFileInformation=0x1276ba7c) returned 1
	[0187.631] CloseHandle (hObject=0x344) returned 1
	[0187.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0)) returned 1
	[0187.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft" (normalized: "c:\\users\\default\\appdata\\local\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0187.673] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft" (normalized: "c:\\users\\default\\appdata\\local\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.673] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0187.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0187.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0187.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0187.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0187.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0187.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0187.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1
	[0187.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1
	[0187.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0187.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.837] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0187.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0187.839] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0187.840] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0187.841] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0187.841] WriteFile (in: hFile=0x344, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0187.843] CloseHandle (hObject=0x344) returned 1
	[0187.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0187.948] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.949] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0187.949] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.949] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.949] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0187.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0187.950] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0187.950] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\credentials\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0187.959] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0187.959] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0187.961] CloseHandle (hObject=0x344) returned 1
	[0187.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0187.962] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.962] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0188.063] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.063] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
	[0188.063] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1
	[0188.063] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
	[0188.063] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0188.063] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0188.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0188.065] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0188.065] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0188.067] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0188.067] WriteFile (in: hFile=0x344, lpBuffer=0x1298e000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1298e000*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0188.068] CloseHandle (hObject=0x344) returned 1
	[0188.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0188.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.077] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0188.077] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0188.120] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.120] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1
	[0188.120] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1
	[0188.120] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1
	[0188.120] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0188.120] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0188.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0188.122] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0188.122] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0188.124] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0188.124] WriteFile (in: hFile=0x344, lpBuffer=0x1298f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x1298f300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0188.125] CloseHandle (hObject=0x344) returned 1
	[0188.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0188.177] SetEvent (hEvent=0x2f4) returned 1
	[0188.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0188.217] SetEvent (hEvent=0x318) returned 1
	[0188.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0188.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.219] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0188.219] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0188.219] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.219] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1
	[0188.219] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0188.219] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0188.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0188.219] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0188.219] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0188.222] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0188.222] WriteFile (in: hFile=0x344, lpBuffer=0x12990600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12990600*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0188.223] CloseHandle (hObject=0x344) returned 1
	[0188.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.273] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0188.273] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0188.274] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.274] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1
	[0188.274] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0188.274] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0188.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0188.274] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0188.274] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0188.276] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0188.276] WriteFile (in: hFile=0x34c, lpBuffer=0x12991900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12991900*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0188.277] CloseHandle (hObject=0x34c) returned 1
	[0188.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0188.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.279] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0188.279] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0188.333] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.333] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1
	[0188.333] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1
	[0188.333] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1
	[0188.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0188.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0188.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1
	[0188.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0188.334] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0188.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0188.335] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0188.336] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0188.337] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0188.337] WriteFile (in: hFile=0x34c, lpBuffer=0x128cc000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x128cc000*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0188.338] CloseHandle (hObject=0x34c) returned 1
	[0188.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.340] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0188.340] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0188.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0188.341] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0188.341] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0188.341] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0188.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0188.341] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0188.341] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0188.342] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0188.342] WriteFile (in: hFile=0x34c, lpBuffer=0x128cd300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x128cd300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0188.343] CloseHandle (hObject=0x34c) returned 1
	[0188.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0188.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.383] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0188.383] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0188.383] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.383] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0188.383] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0188.383] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0188.383] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0188.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0188.384] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0188.384] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0188.386] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0188.386] WriteFile (in: hFile=0x34c, lpBuffer=0x128ce600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x128ce600*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0188.387] CloseHandle (hObject=0x34c) returned 1
	[0188.387] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0188.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.389] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0188.440] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0188.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0188.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0188.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744070 | out: pbBuffer=0x12744070) returned 1
	[0188.440] ReadFile (in: hFile=0x34c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12769d1c*=0x43, lpOverlapped=0x0) returned 1
	[0188.442] GetFileType (hFile=0x34c) returned 0x1
	[0188.442] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.443] WriteFile (in: hFile=0x34c, lpBuffer=0x1271a1e0*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1271a1e0*, lpNumberOfBytesWritten=0x12769d00*=0x43, lpOverlapped=0x12769d0c) returned 1
	[0188.443] GetFileType (hFile=0x34c) returned 0x1
	[0188.443] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8201 | out: pbBuffer=0x127e8201) returned 1
	[0188.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8301 | out: pbBuffer=0x127e8301) returned 1
	[0188.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8401 | out: pbBuffer=0x127e8401) returned 1
	[0188.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744188 | out: pbBuffer=0x12744188) returned 1
	[0188.444] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0188.444] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0188.444] WriteFile (in: hFile=0x33c, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0188.444] CloseHandle (hObject=0x33c) returned 1
	[0188.444] CloseHandle (hObject=0x34c) returned 1
	[0188.444] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0188.651] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0188.651] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0188.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.652] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0188.652] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0188.652] ReadFile (in: hFile=0x34c, lpBuffer=0x12848000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12848000*, lpNumberOfBytesRead=0x12769d1c*=0x0, lpOverlapped=0x0) returned 1
	[0188.652] CloseHandle (hObject=0x34c) returned 1
	[0188.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0188.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0189.338] SetEvent (hEvent=0xa0) returned 1
	[0189.338] SetEvent (hEvent=0x2e8) returned 1
	[0189.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0189.339] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0189.340] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0189.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96e13f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1
	[0189.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1
	[0189.340] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0189.340] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0189.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0189.340] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0189.340] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0189.342] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0189.342] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0189.344] CloseHandle (hObject=0x34c) returned 1
	[0189.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9)) returned 1
	[0189.478] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0189.611] SetEvent (hEvent=0x320) returned 1
	[0189.611] SetEvent (hEvent=0x318) returned 1
	[0189.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9)) returned 1
	[0189.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0189.614] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0189.614] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0189.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1
	[0189.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1
	[0189.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1
	[0189.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0189.656] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0189.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0189.658] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0189.658] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0189.659] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0189.659] WriteFile (in: hFile=0x2dc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0189.660] CloseHandle (hObject=0x2dc) returned 1
	[0189.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000)) returned 1
	[0189.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd856f385, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1106c)) returned 1
	[0189.702] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0189.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0189.794] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0189.794] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0189.794] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.794] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0189.794] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0189.794] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0189.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0189.794] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0189.795] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0189.796] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0189.796] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0189.797] CloseHandle (hObject=0x33c) returned 1
	[0189.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0189.798] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0189.798] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0189.799] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.799] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1
	[0189.799] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0189.799] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0189.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0189.799] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0189.799] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0189.801] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0189.801] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0189.802] CloseHandle (hObject=0x33c) returned 1
	[0189.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0189.803] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0189.803] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
	[0189.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0189.851] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0189.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0189.853] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0189.853] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0189.855] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0189.855] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0189.856] CloseHandle (hObject=0x33c) returned 1
	[0189.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0189.857] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0189.857] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0189.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x1271fad0 | out: lpFileInformation=0x1271fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8679d27, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x105000)) returned 1
	[0189.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e440 | out: pbBuffer=0x1240e440) returned 1
	[0189.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e0 | out: pbBuffer=0x124103e0) returned 1
	[0189.858] ReadFile (in: hFile=0x33c, lpBuffer=0x12846000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1271fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12846000*, lpNumberOfBytesRead=0x1271fd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0189.919] GetFileType (hFile=0x33c) returned 0x1
	[0189.919] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0189.919] WriteFile (in: hFile=0x33c, lpBuffer=0x12694000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1271fd00, lpOverlapped=0x1271fd0c | out: lpBuffer=0x12694000*, lpNumberOfBytesWritten=0x1271fd00*=0x20000, lpOverlapped=0x1271fd0c) returned 1
	[0189.920] GetFileType (hFile=0x33c) returned 0x1
	[0189.920] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0189.924] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0189.924] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0189.924] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0189.925] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b8 | out: pbBuffer=0x124104b8) returned 1
	[0189.925] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0189.925] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0189.925] WriteFile (in: hFile=0x1e4, lpBuffer=0x1283e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1271fd0c, lpOverlapped=0x0 | out: lpBuffer=0x1283e000*, lpNumberOfBytesWritten=0x1271fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.115] CloseHandle (hObject=0x1e4) returned 1
	[0190.115] CloseHandle (hObject=0x33c) returned 1
	[0190.115] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.118] SetEvent (hEvent=0x2e8) returned 1
	[0190.118] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0190.372] SetEvent (hEvent=0x30c) returned 1
	[0190.372] SetEvent (hEvent=0x70) returned 1
	[0190.372] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0190.376] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0190.594] SwitchToThread () returned 1
	[0190.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.596] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.596] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.596] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.596] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0190.597] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0190.597] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.597] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.597] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.597] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.603] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0190.603] WriteFile (in: hFile=0x34c, lpBuffer=0x12634000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12634000*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0190.604] CloseHandle (hObject=0x34c) returned 1
	[0190.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0190.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1
	[0190.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming" (normalized: "c:\\users\\default\\appdata\\roaming"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.607] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming" (normalized: "c:\\users\\default\\appdata\\roaming"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.607] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.607] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1
	[0190.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0190.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.608] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.608] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.608] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.610] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0190.610] WriteFile (in: hFile=0x34c, lpBuffer=0x12635300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12635300*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0190.611] CloseHandle (hObject=0x34c) returned 1
	[0190.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities" (normalized: "c:\\users\\default\\appdata\\roaming\\identities"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.612] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities" (normalized: "c:\\users\\default\\appdata\\roaming\\identities"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.612] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1
	[0190.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.612] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.613] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.613] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.614] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0190.614] WriteFile (in: hFile=0x34c, lpBuffer=0x12636600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12636600*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0190.616] CloseHandle (hObject=0x34c) returned 1
	[0190.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.620] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.620] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.620] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.620] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.620] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.620] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.620] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\identities\\{31810c36-5d23-4cce-a3b4-316ded195c38}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.622] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0190.622] WriteFile (in: hFile=0x34c, lpBuffer=0x12637900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12637900*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0190.626] CloseHandle (hObject=0x34c) returned 1
	[0190.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.628] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.628] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.630] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.630] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0190.630] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0190.631] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0190.631] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1
	[0190.631] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1
	[0190.631] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0190.631] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.631] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.637] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.637] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.639] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0190.640] WriteFile (in: hFile=0x2dc, lpBuffer=0x12638c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12638c00*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0190.641] CloseHandle (hObject=0x2dc) returned 1
	[0190.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.642] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.642] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.643] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.643] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.643] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.643] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.643] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\credentials\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.645] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0190.645] WriteFile (in: hFile=0x2dc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0190.646] CloseHandle (hObject=0x2dc) returned 1
	[0190.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.647] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.647] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.647] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.648] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0190.648] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.648] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.648] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.648] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.650] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0190.650] WriteFile (in: hFile=0x2dc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0190.651] CloseHandle (hObject=0x2dc) returned 1
	[0190.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.652] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.652] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.652] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x5af83960, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.652] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.652] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.653] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.653] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\crypto\\rsa\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.654] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0190.654] WriteFile (in: hFile=0x2dc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0190.656] CloseHandle (hObject=0x2dc) returned 1
	[0190.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.657] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.657] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.657] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda27f60, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.657] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1
	[0190.657] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.657] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.657] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.658] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.659] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0190.659] WriteFile (in: hFile=0x2dc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0190.661] CloseHandle (hObject=0x2dc) returned 1
	[0190.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.662] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.663] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0190.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1
	[0190.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1
	[0190.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0190.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.681] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.683] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.683] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.688] SetEvent (hEvent=0xa0) returned 1
	[0190.688] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0190.688] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0190.690] CloseHandle (hObject=0x33c) returned 1
	[0190.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de234aa, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1
	[0190.691] SetEvent (hEvent=0x68) returned 1
	[0190.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.692] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.692] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.692] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.692] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1
	[0190.692] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1
	[0190.692] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.692] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.692] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.693] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.704] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0190.704] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0190.706] CloseHandle (hObject=0x33c) returned 1
	[0190.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.707] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.707] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.707] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.707] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.707] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.708] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.708] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.710] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0190.710] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0190.711] CloseHandle (hObject=0x33c) returned 1
	[0190.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.712] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.712] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.715] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6477260, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.715] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0190.715] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1
	[0190.715] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1
	[0190.715] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0190.715] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.715] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.717] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.717] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.719] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0190.719] WriteFile (in: hFile=0x33c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0190.722] CloseHandle (hObject=0x33c) returned 1
	[0190.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9)) returned 1
	[0190.723] SetEvent (hEvent=0x320) returned 1
	[0190.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1
	[0190.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b)) returned 1
	[0190.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3)) returned 1
	[0190.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1
	[0190.727] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.728] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x123526f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xd3)) returned 1
	[0190.728] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732220 | out: pbBuffer=0x12732220) returned 1
	[0190.728] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744410 | out: pbBuffer=0x12744410) returned 1
	[0190.728] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1276dd1c*=0xd3, lpOverlapped=0x0) returned 1
	[0190.733] GetFileType (hFile=0x33c) returned 0x1
	[0190.733] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.734] WriteFile (in: hFile=0x33c, lpBuffer=0x1244aee0*, nNumberOfBytesToWrite=0xd3, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1244aee0*, lpNumberOfBytesWritten=0x1276dd00*=0xd3, lpOverlapped=0x1276dd0c) returned 1
	[0190.734] GetFileType (hFile=0x33c) returned 0x1
	[0190.734] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd3, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0190.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0190.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0190.735] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444c8 | out: pbBuffer=0x127444c8) returned 1
	[0190.735] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.735] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.736] WriteFile (in: hFile=0x344, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.736] CloseHandle (hObject=0x344) returned 1
	[0190.736] CloseHandle (hObject=0x33c) returned 1
	[0190.736] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.738] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.739] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7de6f76b, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1
	[0190.739] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732440 | out: pbBuffer=0x12732440) returned 1
	[0190.739] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127444e0 | out: pbBuffer=0x127444e0) returned 1
	[0190.739] ReadFile (in: hFile=0x33c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1276dd1c*=0x110, lpOverlapped=0x0) returned 1
	[0190.741] GetFileType (hFile=0x33c) returned 0x1
	[0190.741] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.741] WriteFile (in: hFile=0x33c, lpBuffer=0x1262d9e0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1262d9e0*, lpNumberOfBytesWritten=0x1276dd00*=0x110, lpOverlapped=0x1276dd0c) returned 1
	[0190.741] GetFileType (hFile=0x33c) returned 0x1
	[0190.741] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0190.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0190.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0190.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744598 | out: pbBuffer=0x12744598) returned 1
	[0190.742] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.742] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.742] WriteFile (in: hFile=0x344, lpBuffer=0x12772500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12772500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.742] CloseHandle (hObject=0x344) returned 1
	[0190.743] CloseHandle (hObject=0x33c) returned 1
	[0190.743] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92)) returned 1
	[0190.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.756] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.756] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.757] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.757] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1
	[0190.757] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1
	[0190.757] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.757] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.757] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.757] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.759] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0190.759] WriteFile (in: hFile=0x33c, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0190.761] CloseHandle (hObject=0x33c) returned 1
	[0190.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0190.762] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.764] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de4960a, ftCreationTime.dwHighDateTime=0x1ca043e, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e1692f0, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x92)) returned 1
	[0190.764] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732680 | out: pbBuffer=0x12732680) returned 1
	[0190.764] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127445f0 | out: pbBuffer=0x127445f0) returned 1
	[0190.764] ReadFile (in: hFile=0x33c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1276dd1c*=0x92, lpOverlapped=0x0) returned 1
	[0190.784] GetFileType (hFile=0x33c) returned 0x1
	[0190.784] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.784] WriteFile (in: hFile=0x33c, lpBuffer=0x129908c0*, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x129908c0*, lpNumberOfBytesWritten=0x1276dd00*=0x92, lpOverlapped=0x1276dd0c) returned 1
	[0190.784] GetFileType (hFile=0x33c) returned 0x1
	[0190.784] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x92, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.784] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f01 | out: pbBuffer=0x12434f01) returned 1
	[0190.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435001 | out: pbBuffer=0x12435001) returned 1
	[0190.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435101 | out: pbBuffer=0x12435101) returned 1
	[0190.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446a8 | out: pbBuffer=0x127446a8) returned 1
	[0190.785] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.785] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.785] WriteFile (in: hFile=0x34c, lpBuffer=0x12772a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12772a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.785] CloseHandle (hObject=0x34c) returned 1
	[0190.786] CloseHandle (hObject=0x33c) returned 1
	[0190.786] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.789] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.789] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0190.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b)) returned 1
	[0190.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127328a0 | out: pbBuffer=0x127328a0) returned 1
	[0190.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446c0 | out: pbBuffer=0x127446c0) returned 1
	[0190.790] ReadFile (in: hFile=0x33c, lpBuffer=0x12944000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12944000*, lpNumberOfBytesRead=0x1242bd1c*=0x60b, lpOverlapped=0x0) returned 1
	[0190.799] GetFileType (hFile=0x33c) returned 0x1
	[0190.799] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.799] WriteFile (in: hFile=0x33c, lpBuffer=0x12518700*, nNumberOfBytesToWrite=0x60b, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12518700*, lpNumberOfBytesWritten=0x1242bd00*=0x60b, lpOverlapped=0x1242bd0c) returned 1
	[0190.799] GetFileType (hFile=0x33c) returned 0x1
	[0190.799] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x60b, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435301 | out: pbBuffer=0x12435301) returned 1
	[0190.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435401 | out: pbBuffer=0x12435401) returned 1
	[0190.800] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435501 | out: pbBuffer=0x12435501) returned 1
	[0190.800] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744778 | out: pbBuffer=0x12744778) returned 1
	[0190.800] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.800] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0190.800] WriteFile (in: hFile=0x344, lpBuffer=0x12772f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12772f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.800] CloseHandle (hObject=0x344) returned 1
	[0190.801] CloseHandle (hObject=0x33c) returned 1
	[0190.801] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.811] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0190.822] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0190.851] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0190.860] SetEvent (hEvent=0x320) returned 1
	[0190.860] SetEvent (hEvent=0x68) returned 1
	[0190.860] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0190.902] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.903] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e)) returned 1
	[0190.903] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e640 | out: pbBuffer=0x1240e640) returned 1
	[0190.903] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0190.903] ReadFile (in: hFile=0x33c, lpBuffer=0x12844000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12844000*, lpNumberOfBytesRead=0x12767d1c*=0x10b1e, lpOverlapped=0x0) returned 1
	[0190.919] GetFileType (hFile=0x33c) returned 0x1
	[0190.919] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.919] WriteFile (in: hFile=0x33c, lpBuffer=0x1271c000*, nNumberOfBytesToWrite=0x10b1e, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1271c000*, lpNumberOfBytesWritten=0x12767d00*=0x10b1e, lpOverlapped=0x12767d0c) returned 1
	[0190.920] GetFileType (hFile=0x33c) returned 0x1
	[0190.920] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x10b1e, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0190.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0190.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0190.921] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0190.921] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.921] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.921] WriteFile (in: hFile=0x34c, lpBuffer=0x128d4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x128d4500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.921] CloseHandle (hObject=0x34c) returned 1
	[0190.928] CloseHandle (hObject=0x33c) returned 1
	[0190.973] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\Default\\Contacts\\Administrator.contact.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\contacts\\administrator.contact.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.026] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0191.035] SetEvent (hEvent=0x68) returned 1
	[0191.035] SwitchToThread () returned 1
	[0191.208] SetEvent (hEvent=0x68) returned 1
	[0191.209] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0191.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.214] SetEvent (hEvent=0x70) returned 1
	[0191.214] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0191.249] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0191.250] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0191.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0191.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0191.250] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12767d1c*=0x85, lpOverlapped=0x0) returned 1
	[0191.252] GetFileType (hFile=0x344) returned 0x1
	[0191.252] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.252] WriteFile (in: hFile=0x344, lpBuffer=0x1264a000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1264a000*, lpNumberOfBytesWritten=0x12767d00*=0x85, lpOverlapped=0x12767d0c) returned 1
	[0191.252] GetFileType (hFile=0x344) returned 0x1
	[0191.252] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0191.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0191.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0191.255] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0191.255] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.256] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0191.256] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.256] CloseHandle (hObject=0x33c) returned 1
	[0191.256] CloseHandle (hObject=0x344) returned 1
	[0191.256] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.260] SwitchToThread () returned 1
	[0191.267] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0191.959] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0192.004] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0192.042] SetEvent (hEvent=0x2e8) returned 1
	[0192.042] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0192.098] SetEvent (hEvent=0x2e8) returned 1
	[0192.098] SetEvent (hEvent=0x318) returned 1
	[0192.099] GetFileType (hFile=0x34c) returned 0x1
	[0192.099] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.099] WriteFile (in: hFile=0x34c, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x125e7d00, lpOverlapped=0x125e7d0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x125e7d00*=0x20000, lpOverlapped=0x125e7d0c) returned 1
	[0192.102] GetFileType (hFile=0x34c) returned 0x1
	[0192.102] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0192.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0192.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0192.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0192.102] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0192.103] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0192.103] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x125e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0192.103] CloseHandle (hObject=0x33c) returned 1
	[0192.103] CloseHandle (hObject=0x34c) returned 1
	[0192.103] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\ntuser.dat.log1.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0192.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NetHood" (normalized: "c:\\users\\default\\nethood"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.108] CreateFileW (lpFileName="C:\\Users\\Default\\NetHood" (normalized: "c:\\users\\default\\nethood"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x34c
	[0192.108] GetFileInformationByHandle (in: hFile=0x34c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0192.108] GetFileInformationByHandleEx (in: hFile=0x34c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0192.108] CloseHandle (hObject=0x34c) returned 1
	[0192.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Pictures" (normalized: "c:\\users\\default\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.109] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures" (normalized: "c:\\users\\default\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.109] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0192.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0192.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0192.110] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0192.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\pictures\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0192.111] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0192.196] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0192.201] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0192.201] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0192.203] CloseHandle (hObject=0x34c) returned 1
	[0192.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Pictures\\desktop.ini" (normalized: "c:\\users\\default\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0192.204] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\PrintHood" (normalized: "c:\\users\\default\\printhood"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.205] CreateFileW (lpFileName="C:\\Users\\Default\\PrintHood" (normalized: "c:\\users\\default\\printhood"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x34c
	[0192.205] GetFileInformationByHandle (in: hFile=0x34c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0192.205] GetFileInformationByHandleEx (in: hFile=0x34c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0192.205] CloseHandle (hObject=0x34c) returned 1
	[0192.205] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\desktop.ini" (normalized: "c:\\users\\default\\pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0192.206] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0192.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Pictures\\desktop.ini" (normalized: "c:\\users\\default\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e7ad0 | out: lpFileInformation=0x125e7ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0192.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c2a0 | out: pbBuffer=0x1244c2a0) returned 1
	[0192.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788128 | out: pbBuffer=0x12788128) returned 1
	[0192.206] ReadFile (in: hFile=0x34c, lpBuffer=0x127ae000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x127ae000*, lpNumberOfBytesRead=0x125e7d1c*=0x1f8, lpOverlapped=0x0) returned 1
	[0192.208] GetFileType (hFile=0x34c) returned 0x1
	[0192.208] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.208] WriteFile (in: hFile=0x34c, lpBuffer=0x12464000*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x125e7d00, lpOverlapped=0x125e7d0c | out: lpBuffer=0x12464000*, lpNumberOfBytesWritten=0x125e7d00*=0x1f8, lpOverlapped=0x125e7d0c) returned 1
	[0192.208] GetFileType (hFile=0x34c) returned 0x1
	[0192.208] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0192.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0192.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0192.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881e0 | out: pbBuffer=0x127881e0) returned 1
	[0192.209] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\desktop.ini" (normalized: "c:\\users\\default\\pictures\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0192.209] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0192.209] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x125e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0192.210] CloseHandle (hObject=0x33c) returned 1
	[0192.210] CloseHandle (hObject=0x34c) returned 1
	[0192.210] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Pictures\\desktop.ini" (normalized: "c:\\users\\default\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Pictures\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\pictures\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.212] CreateFileW (lpFileName="C:\\Users\\Default\\PrintHood" (normalized: "c:\\users\\default\\printhood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.213] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x125e7a44 | out: lpFindFileData=0x125e7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0192.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Recent" (normalized: "c:\\users\\default\\recent"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.214] CreateFileW (lpFileName="C:\\Users\\Default\\Recent" (normalized: "c:\\users\\default\\recent"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x34c
	[0192.214] GetFileInformationByHandle (in: hFile=0x34c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0192.214] GetFileInformationByHandleEx (in: hFile=0x34c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0192.214] CloseHandle (hObject=0x34c) returned 1
	[0192.214] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Saved Games" (normalized: "c:\\users\\default\\saved games"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.215] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games" (normalized: "c:\\users\\default\\saved games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.339] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0192.339] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.339] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0192.339] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0192.339] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0192.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Saved Games\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\saved games\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0192.339] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\saved games\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0192.339] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\saved games\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0192.341] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0192.341] WriteFile (in: hFile=0x34c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0192.343] CloseHandle (hObject=0x34c) returned 1
	[0192.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Saved Games\\desktop.ini" (normalized: "c:\\users\\default\\saved games\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0192.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches" (normalized: "c:\\users\\default\\searches"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.345] CreateFileW (lpFileName="C:\\Users\\Default\\Searches" (normalized: "c:\\users\\default\\searches"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.345] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Searches\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0192.398] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.399] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0192.399] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0192.399] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0192.399] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0192.399] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0192.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\searches\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0192.401] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\searches\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0192.401] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\searches\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0192.402] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0192.402] WriteFile (in: hFile=0x34c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0192.404] CloseHandle (hObject=0x34c) returned 1
	[0192.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1
	[0192.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1
	[0192.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\desktop.ini" (normalized: "c:\\users\\default\\searches\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c)) returned 1
	[0192.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\SendTo" (normalized: "c:\\users\\default\\sendto"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.407] CreateFileW (lpFileName="C:\\Users\\Default\\SendTo" (normalized: "c:\\users\\default\\sendto"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x34c
	[0192.407] GetFileInformationByHandle (in: hFile=0x34c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0192.407] GetFileInformationByHandleEx (in: hFile=0x34c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0192.407] CloseHandle (hObject=0x34c) returned 1
	[0192.407] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\desktop.ini" (normalized: "c:\\users\\default\\searches\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0192.408] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0192.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Searches\\desktop.ini" (normalized: "c:\\users\\default\\searches\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x20c)) returned 1
	[0192.408] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c5a0 | out: pbBuffer=0x1244c5a0) returned 1
	[0192.408] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882a0 | out: pbBuffer=0x127882a0) returned 1
	[0192.415] ReadFile (in: hFile=0x34c, lpBuffer=0x12994000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12994000*, lpNumberOfBytesRead=0x12429d1c*=0x20c, lpOverlapped=0x0) returned 1
	[0192.417] GetFileType (hFile=0x34c) returned 0x1
	[0192.417] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.417] WriteFile (in: hFile=0x34c, lpBuffer=0x128d4000*, nNumberOfBytesToWrite=0x20c, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x128d4000*, lpNumberOfBytesWritten=0x12429d00*=0x20c, lpOverlapped=0x12429d0c) returned 1
	[0192.417] GetFileType (hFile=0x34c) returned 0x1
	[0192.417] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x20c, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0192.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0192.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0192.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788358 | out: pbBuffer=0x12788358) returned 1
	[0192.418] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\desktop.ini" (normalized: "c:\\users\\default\\searches\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0192.418] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0192.418] WriteFile (in: hFile=0x2dc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0192.419] CloseHandle (hObject=0x2dc) returned 1
	[0192.419] CloseHandle (hObject=0x34c) returned 1
	[0192.419] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Searches\\desktop.ini" (normalized: "c:\\users\\default\\searches\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Searches\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\searches\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.421] CreateFileW (lpFileName="C:\\Users\\Default\\SendTo" (normalized: "c:\\users\\default\\sendto"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.422] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0192.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Start Menu" (normalized: "c:\\users\\default\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.423] CreateFileW (lpFileName="C:\\Users\\Default\\Start Menu" (normalized: "c:\\users\\default\\start menu"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x34c
	[0192.423] GetFileInformationByHandle (in: hFile=0x34c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0192.423] GetFileInformationByHandleEx (in: hFile=0x34c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0192.423] CloseHandle (hObject=0x34c) returned 1
	[0192.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Templates" (normalized: "c:\\users\\default\\templates"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x30702f92, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x30702f92, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x30702f92, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.459] CreateFileW (lpFileName="C:\\Users\\Default\\Templates" (normalized: "c:\\users\\default\\templates"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x34c
	[0192.459] GetFileInformationByHandle (in: hFile=0x34c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0192.459] GetFileInformationByHandleEx (in: hFile=0x34c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0192.459] CloseHandle (hObject=0x34c) returned 1
	[0192.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Videos" (normalized: "c:\\users\\default\\videos"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.460] CreateFileW (lpFileName="C:\\Users\\Default\\Videos" (normalized: "c:\\users\\default\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.460] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0192.460] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.460] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0192.460] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0192.461] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0192.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\videos\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0192.461] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\videos\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0192.461] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\videos\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0192.462] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0192.462] WriteFile (in: hFile=0x34c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0192.463] CloseHandle (hObject=0x34c) returned 1
	[0192.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Videos\\desktop.ini" (normalized: "c:\\users\\default\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0192.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1
	[0192.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default User" (normalized: "c:\\users\\default user"), fInfoLevelId=0x0, lpFileInformation=0x1276bc20 | out: lpFileInformation=0x1276bc20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.466] CreateFileW (lpFileName="C:\\Users\\Default User" (normalized: "c:\\users\\default user"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x34c
	[0192.466] GetFileInformationByHandle (in: hFile=0x34c, lpFileInformation=0x1276bbb0 | out: lpFileInformation=0x1276bbb0) returned 1
	[0192.466] GetFileInformationByHandleEx (in: hFile=0x34c, FileInformationClass=0x9, lpFileInformation=0x1276bba8, dwBufferSize=0x8 | out: lpFileInformation=0x1276bba8) returned 1
	[0192.466] CloseHandle (hObject=0x34c) returned 1
	[0192.466] CreateFileW (lpFileName="C:\\Users\\Default\\ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0192.467] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0192.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1
	[0192.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c860 | out: pbBuffer=0x1244c860) returned 1
	[0192.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127883d0 | out: pbBuffer=0x127883d0) returned 1
	[0192.467] ReadFile (in: hFile=0x34c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x14, lpOverlapped=0x0) returned 1
	[0192.469] GetFileType (hFile=0x34c) returned 0x1
	[0192.469] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.469] WriteFile (in: hFile=0x34c, lpBuffer=0x1244c880*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1244c880*, lpNumberOfBytesWritten=0x12429d00*=0x14, lpOverlapped=0x12429d0c) returned 1
	[0192.469] GetFileType (hFile=0x34c) returned 0x1
	[0192.469] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x14, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.469] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0192.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0192.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0192.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788558 | out: pbBuffer=0x12788558) returned 1
	[0192.470] CreateFileW (lpFileName="C:\\Users\\Default\\ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0192.470] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0192.470] WriteFile (in: hFile=0x2dc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0192.470] CloseHandle (hObject=0x2dc) returned 1
	[0192.471] CloseHandle (hObject=0x34c) returned 1
	[0192.471] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), lpNewFileName="C:\\Users\\Default\\ntuser.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\ntuser.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.715] SwitchToThread () returned 1
	[0192.816] SetEvent (hEvent=0x68) returned 1
	[0192.816] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0193.315] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0194.555] SetEvent (hEvent=0x2e8) returned 1
	[0194.555] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0194.555] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0194.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2)) returned 1
	[0194.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0194.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410048 | out: pbBuffer=0x12410048) returned 1
	[0194.556] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0194.621] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0194.621] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb28, ulCount=0x10, ulNumEntriesRemoved=0x327ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb28, ulNumEntriesRemoved=0x327ffb0c) returned 0
	[0194.621] SetEvent (hEvent=0xa0) returned 1
	[0194.622] SetEvent (hEvent=0x2e8) returned 1
	[0194.622] ReadFile (in: hFile=0x344, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0194.675] SetEvent (hEvent=0x2e8) returned 1
	[0194.675] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0194.712] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0194.712] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0194.732] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0194.732] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x102
	[0194.732] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0194.732] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x327ffb30, ulCount=0x10, ulNumEntriesRemoved=0x327ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x327ffb30, ulNumEntriesRemoved=0x327ffb14) returned 0
	[0194.732] SetEvent (hEvent=0x2e8) returned 1
	[0194.732] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0x1) returned 0x0
	[0194.739] GetFileType (hFile=0x344) returned 0x1
	[0194.739] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.739] WriteFile (in: hFile=0x344, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x1276dd00*=0x20000, lpOverlapped=0x1276dd0c) returned 1
	[0194.740] GetFileType (hFile=0x344) returned 0x1
	[0194.740] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.740] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0194.740] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0194.740] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0194.740] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0194.741] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0194.741] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0194.741] WriteFile (in: hFile=0x1e4, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0194.751] CloseHandle (hObject=0x1e4) returned 1
	[0194.751] CloseHandle (hObject=0x344) returned 1
	[0194.752] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0194.756] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0194.757] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0194.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1
	[0194.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0194.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0194.757] ReadFile (in: hFile=0x344, lpBuffer=0x128e4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e4000*, lpNumberOfBytesRead=0x12769d1c*=0x17c, lpOverlapped=0x0) returned 1
	[0194.759] GetFileType (hFile=0x344) returned 0x1
	[0194.759] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.759] WriteFile (in: hFile=0x344, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x12769d00*=0x17c, lpOverlapped=0x12769d0c) returned 1
	[0194.759] GetFileType (hFile=0x344) returned 0x1
	[0194.759] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0194.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0194.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0194.760] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0194.760] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0194.761] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0194.761] WriteFile (in: hFile=0x1e4, lpBuffer=0x127aa500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x127aa500*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0194.761] CloseHandle (hObject=0x1e4) returned 1
	[0194.761] CloseHandle (hObject=0x344) returned 1
	[0194.761] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Music\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\music\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0194.808] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0194.808] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0194.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554)) returned 1
	[0194.808] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324c0 | out: pbBuffer=0x127324c0) returned 1
	[0194.808] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e708 | out: pbBuffer=0x1251e708) returned 1
	[0194.808] ReadFile (in: hFile=0x344, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x125e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0194.840] SetEvent (hEvent=0xa0) returned 1
	[0194.841] GetFileType (hFile=0x344) returned 0x1
	[0194.841] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.841] WriteFile (in: hFile=0x344, lpBuffer=0x12904000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x12904000*, lpNumberOfBytesWritten=0x125e5d00*=0x20000, lpOverlapped=0x125e5d0c) returned 1
	[0194.841] GetFileType (hFile=0x344) returned 0x1
	[0194.841] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.842] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0194.842] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0194.842] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f01 | out: pbBuffer=0x12400f01) returned 1
	[0194.842] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e860 | out: pbBuffer=0x1251e860) returned 1
	[0194.842] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0194.842] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0194.842] WriteFile (in: hFile=0x1e4, lpBuffer=0x127aaa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127aaa00*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0195.189] CloseHandle (hObject=0x1e4) returned 1
	[0195.189] CloseHandle (hObject=0x344) returned 1
	[0195.190] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0195.193] SetEvent (hEvent=0x68) returned 1
	[0195.193] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0195.194] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0195.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f)) returned 1
	[0195.195] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732920 | out: pbBuffer=0x12732920) returned 1
	[0195.195] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e988 | out: pbBuffer=0x1251e988) returned 1
	[0195.195] ReadFile (in: hFile=0x344, lpBuffer=0x1287a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1287a000*, lpNumberOfBytesRead=0x125e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0195.283] GetFileType (hFile=0x344) returned 0x1
	[0195.283] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0195.283] WriteFile (in: hFile=0x344, lpBuffer=0x128ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x128ba000*, lpNumberOfBytesWritten=0x125e5d00*=0x20000, lpOverlapped=0x125e5d0c) returned 1
	[0195.284] GetFileType (hFile=0x344) returned 0x1
	[0195.284] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0195.284] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9101 | out: pbBuffer=0x127e9101) returned 1
	[0195.284] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9201 | out: pbBuffer=0x127e9201) returned 1
	[0195.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9301 | out: pbBuffer=0x127e9301) returned 1
	[0195.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744580 | out: pbBuffer=0x12744580) returned 1
	[0195.285] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0195.285] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0195.285] WriteFile (in: hFile=0x2dc, lpBuffer=0x127e2a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2a00*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0195.319] CloseHandle (hObject=0x2dc) returned 1
	[0195.565] SetEvent (hEvent=0xa0) returned 1
	[0195.565] CloseHandle (hObject=0x344) returned 1
	[0195.565] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0195.568] SetEvent (hEvent=0x320) returned 1
	[0195.568] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0195.569] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0195.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1
	[0195.569] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732080 | out: pbBuffer=0x12732080) returned 1
	[0195.569] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0195.570] ReadFile (in: hFile=0x344, lpBuffer=0x1289a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1289a000*, lpNumberOfBytesRead=0x125e5d1c*=0x460, lpOverlapped=0x0) returned 1
	[0195.574] GetFileType (hFile=0x344) returned 0x1
	[0195.574] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0195.574] WriteFile (in: hFile=0x344, lpBuffer=0x12490480*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x12490480*, lpNumberOfBytesWritten=0x125e5d00*=0x460, lpOverlapped=0x125e5d0c) returned 1
	[0195.574] GetFileType (hFile=0x344) returned 0x1
	[0195.574] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x460, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0195.574] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0195.574] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0195.574] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0195.575] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0f0 | out: pbBuffer=0x1251e0f0) returned 1
	[0195.575] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0195.575] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0195.575] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0195.575] CloseHandle (hObject=0x2cc) returned 1
	[0195.575] CloseHandle (hObject=0x344) returned 1
	[0195.575] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0195.577] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0195.578] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0195.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1
	[0195.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322a0 | out: pbBuffer=0x127322a0) returned 1
	[0195.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0195.579] ReadFile (in: hFile=0x344, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x125e5d1c*=0x17c, lpOverlapped=0x0) returned 1
	[0195.580] GetFileType (hFile=0x344) returned 0x1
	[0195.580] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0195.580] WriteFile (in: hFile=0x344, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x125e5d00*=0x17c, lpOverlapped=0x125e5d0c) returned 1
	[0195.581] GetFileType (hFile=0x344) returned 0x1
	[0195.581] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0195.581] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0195.581] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0195.581] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0195.581] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0195.581] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0195.581] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0195.581] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0195.582] CloseHandle (hObject=0x2cc) returned 1
	[0195.582] CloseHandle (hObject=0x344) returned 1
	[0195.582] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Pictures\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\pictures\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0195.594] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0195.618] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0196.363] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0196.405] SetEvent (hEvent=0x2e8) returned 1
	[0196.405] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) returned 0x0
	[0196.459] SetEvent (hEvent=0x30c) returned 1
	[0196.459] SetEvent (hEvent=0x68) returned 1
	[0196.459] WaitForSingleObject (hHandle=0x80, dwMilliseconds=0xffffffff) 

Thread:
	id = 6
	os_tid = 0xb04


Thread:
	id = 7
	os_tid = 0x81c

	[0082.801] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3324ff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3324ff38*=0x118) returned 1
	[0082.801] VirtualQuery (in: lpAddress=0x3324ff48, lpBuffer=0x3324ff48, dwLength=0x1c | out: lpBuffer=0x3324ff48*(BaseAddress=0x3324f000, AllocationBase=0x33150000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0082.801] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x11c
	[0082.801] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0106.454] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x124321c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2c4
	[0106.496] CloseHandle (hObject=0x2c4) returned 1
	[0106.497] SetEvent (hEvent=0x80) returned 1
	[0106.498] GetAddrInfoW (in: pNodeName="extreme-ip-lookup.com", pServiceName=0x0, pHints=0x12421f94*(ai_flags=0, ai_family=0, ai_socktype=1, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x12421f50 | out: ppResult=0x12421f50*=0x33685038*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x3365c320*(sa_family=2, sin_port=0x0, sin_addr="37.48.65.182"), ai_next=0x33685010*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x3365c4d0*(sa_family=2, sin_port=0x0, sin_addr="109.236.91.3"), ai_next=0x0))) returned 0
	[0106.781] FreeAddrInfoW (pAddrInfo=0x33685038*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x3365c320*(sa_family=2, sin_port=0x0, sin_addr="37.48.65.182"), ai_next=0x33685010*(ai_flags=0, ai_family=2, ai_socktype=1, ai_protocol=0, ai_addrlen=0x10, ai_canonname=0x0, ai_addr=0x3365c4d0*(sa_family=2, sin_port=0x0, sin_addr="109.236.91.3"), ai_next=0x0))) 
	[0106.782] WSASocketW (af=2, type=1, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x81) returned 0x2f8
	[0106.782] setsockopt (s=0x2f8, level=65535, optname=32, optval="\x01", optlen=4) returned -1
	[0106.782] CreateIoCompletionPort (FileHandle=0x2f8, ExistingCompletionPort=0x10c, CompletionKey=0x0, NumberOfConcurrentThreads=0x0) returned 0x10c
	[0106.782] SetFileCompletionNotificationModes (FileHandle=0x2f8, Flags=0x3) returned 1
	[0106.783] bind (s=0x2f8, addr=0x1240fd28*(sa_family=2, sin_port=0x0, sin_addr="0.0.0.0"), namelen=16) returned 0
	[0106.784] ConnectEx (in: s=0x2f8, name=0x1240fd08*(sa_family=2, sin_port=0x50, sin_addr="37.48.65.182"), namelen=16, lpSendBuffer=0x0, dwSendDataLength=0x0, lpdwBytesSent=0x0, lpOverlapped=0x12510c88 | out: lpdwBytesSent=0x0) returned 0
	[0106.786] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0106.822] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0106.860] SetEvent (hEvent=0x2e8) returned 1
	[0106.860] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.860] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.860] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.860] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.860] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.861] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.861] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0106.892] SetEvent (hEvent=0x2f4) returned 1
	[0106.892] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.892] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.893] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0106.907] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0106.925] SetEvent (hEvent=0x2f4) returned 1
	[0106.925] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.925] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.925] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.925] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.925] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0106.960] SetEvent (hEvent=0x2f4) returned 1
	[0106.960] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.961] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.961] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.962] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.962] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0107.548] SetEvent (hEvent=0x2f4) returned 1
	[0107.548] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.548] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.549] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.549] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.549] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0107.572] SetEvent (hEvent=0x2f4) returned 1
	[0107.572] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.572] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.572] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.572] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.572] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0107.587] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.587] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.587] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.587] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui\\*", lpFindFileData=0x124f7a44 | out: lpFindFileData=0x124f7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.587] ReadFile (in: hFile=0x30c, lpBuffer=0x127c8000, nNumberOfBytesToRead=0x8000, lpNumberOfBytesRead=0x124e0ef4, lpOverlapped=0x0 | out: lpBuffer=0x127c8000, lpNumberOfBytesRead=0x124e0ef4*=0x0, lpOverlapped=0x0) returned 0
	[0109.141] CloseHandle (hObject=0x30c) returned 1
	[0109.141] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0112.885] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0113.022] SetEvent (hEvent=0x30c) returned 1
	[0113.022] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0113.058] SetEvent (hEvent=0x30c) returned 1
	[0113.058] SetEvent (hEvent=0x2e4) returned 1
	[0113.059] GetFileType (hFile=0x338) returned 0x1
	[0113.059] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.059] WriteFile (in: hFile=0x338, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0x5aa, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x126ebd00*=0x5aa, lpOverlapped=0x126ebd0c) returned 1
	[0113.059] GetFileType (hFile=0x338) returned 0x1
	[0113.059] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x5aa, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.059] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0113.059] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0113.059] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0113.060] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0113.060] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0113.060] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0113.060] WriteFile (in: hFile=0x328, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0113.060] CloseHandle (hObject=0x328) returned 1
	[0113.084] CloseHandle (hObject=0x338) returned 1
	[0113.085] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PublisherMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publishermui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0113.086] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0113.086] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0113.086] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1
	[0113.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0113.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0113.087] ReadFile (in: hFile=0x338, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x126ebd1c*=0x648, lpOverlapped=0x0) returned 1
	[0113.142] GetFileType (hFile=0x338) returned 0x1
	[0113.142] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.142] WriteFile (in: hFile=0x338, lpBuffer=0x12518700*, nNumberOfBytesToWrite=0x648, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x12518700*, lpNumberOfBytesWritten=0x126ebd00*=0x648, lpOverlapped=0x126ebd0c) returned 1
	[0113.142] GetFileType (hFile=0x338) returned 0x1
	[0113.142] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x648, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0113.143] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0113.143] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0113.143] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0113.143] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0113.337] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0113.337] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0113.337] CloseHandle (hObject=0x33c) returned 1
	[0113.357] CloseHandle (hObject=0x338) returned 1
	[0113.358] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0113.358] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0113.555] SetEvent (hEvent=0x2e4) returned 1
	[0113.555] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0113.555] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0113.555] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00)) returned 1
	[0113.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e200 | out: pbBuffer=0x1252e200) returned 1
	[0113.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0e8 | out: pbBuffer=0x1251e0e8) returned 1
	[0113.556] ReadFile (in: hFile=0x32c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0113.831] GetFileType (hFile=0x32c) returned 0x1
	[0113.831] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.831] WriteFile (in: hFile=0x32c, lpBuffer=0x12884000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x12884000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0113.832] GetFileType (hFile=0x32c) returned 0x1
	[0113.832] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.832] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0113.832] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0113.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0113.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410580 | out: pbBuffer=0x12410580) returned 1
	[0113.833] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0113.833] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0113.833] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0113.936] CloseHandle (hObject=0x33c) returned 1
	[0114.345] CloseHandle (hObject=0x32c) returned 1
	[0114.347] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0114.348] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0114.348] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0114.348] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd)) returned 1
	[0114.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c480 | out: pbBuffer=0x1244c480) returned 1
	[0114.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0114.349] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0x1) returned 0x102
	[0114.449] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.449] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3324fb28, ulCount=0x10, ulNumEntriesRemoved=0x3324fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3324fb28, ulNumEntriesRemoved=0x3324fb0c) returned 0
	[0114.449] SetEvent (hEvent=0xa0) returned 1
	[0114.449] SetEvent (hEvent=0x308) returned 1
	[0114.449] ReadFile (in: hFile=0x32c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0114.503] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.570] SetEvent (hEvent=0x30c) returned 1
	[0114.570] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.628] SetEvent (hEvent=0x30c) returned 1
	[0114.628] SetEvent (hEvent=0x2e4) returned 1
	[0114.629] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00)) returned 1
	[0114.629] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1
	[0114.634] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0114.635] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0114.635] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00)) returned 1
	[0114.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0114.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0114.635] ReadFile (in: hFile=0x304, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0114.940] GetFileType (hFile=0x304) returned 0x1
	[0114.940] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0114.940] WriteFile (in: hFile=0x304, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0114.941] GetFileType (hFile=0x304) returned 0x1
	[0114.941] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0114.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0114.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0114.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0114.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0114.941] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0114.942] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0114.942] WriteFile (in: hFile=0x33c, lpBuffer=0x12636000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12636000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0115.018] CloseHandle (hObject=0x33c) returned 1
	[0115.260] CloseHandle (hObject=0x304) returned 1
	[0115.261] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0115.261] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0115.313] SetEvent (hEvent=0x70) returned 1
	[0115.313] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0115.313] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0115.313] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed)) returned 1
	[0115.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0115.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0115.313] ReadFile (in: hFile=0x304, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0115.872] SetEvent (hEvent=0xa0) returned 1
	[0115.873] GetFileType (hFile=0x304) returned 0x1
	[0115.874] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0115.874] WriteFile (in: hFile=0x304, lpBuffer=0x1270c000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1270c000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0115.874] GetFileType (hFile=0x304) returned 0x1
	[0115.874] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0115.874] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0115.875] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0115.875] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0115.875] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0115.875] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0115.875] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0115.875] WriteFile (in: hFile=0x338, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0115.973] CloseHandle (hObject=0x338) returned 1
	[0117.430] CloseHandle (hObject=0x304) returned 1
	[0117.431] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0117.432] SetEvent (hEvent=0x30c) returned 1
	[0117.432] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0117.432] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0117.432] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf2bd90c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b2)) returned 1
	[0117.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0117.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788020 | out: pbBuffer=0x12788020) returned 1
	[0117.433] ReadFile (in: hFile=0x304, lpBuffer=0x12922000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12922000*, lpNumberOfBytesRead=0x12429d1c*=0x5b2, lpOverlapped=0x0) returned 1
	[0118.162] GetFileType (hFile=0x304) returned 0x1
	[0118.162] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0118.162] WriteFile (in: hFile=0x304, lpBuffer=0x124b4000*, nNumberOfBytesToWrite=0x5b2, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124b4000*, lpNumberOfBytesWritten=0x12429d00*=0x5b2, lpOverlapped=0x12429d0c) returned 1
	[0118.162] GetFileType (hFile=0x304) returned 0x1
	[0118.162] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x5b2, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0118.163] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0118.163] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0118.163] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0118.163] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0118.163] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0118.164] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0118.164] WriteFile (in: hFile=0x338, lpBuffer=0x12620000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12620000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0118.164] CloseHandle (hObject=0x338) returned 1
	[0118.169] CloseHandle (hObject=0x304) returned 1
	[0118.169] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0119.876] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0119.913] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0119.913] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f5a94 | out: lpFindFileData=0x124f5a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0119.970] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc138cb0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfc3e6570, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfc3e6570, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0119.971] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0119.971] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32MUI.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0119.971] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32LR.cab", cAlternateFileName="")) returned 1
	[0119.971] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0119.971] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0119.971] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0119.973] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f575c | out: lpFileInformation=0x124f575c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0119.974] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0119.975] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0119.976] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f596c | out: lpMode=0x124f596c) returned 0
	[0119.976] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f596c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f596c*=0x1180, lpOverlapped=0x0) returned 1
	[0119.978] CloseHandle (hObject=0x2cc) returned 1
	[0119.978] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\OWOW32LR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\owow32lr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc301560, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2cb13b)) returned 1
	[0119.979] SetEvent (hEvent=0x68) returned 1
	[0119.979] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600)) returned 1
	[0119.979] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1
	[0119.980] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0119.980] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7d0c | out: lpMode=0x124f7d0c) returned 0
	[0119.981] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7ad0 | out: lpFileInformation=0x124f7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc138cb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5600)) returned 1
	[0119.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0119.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410678 | out: pbBuffer=0x12410678) returned 1
	[0119.982] ReadFile (in: hFile=0x2cc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f7d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0120.025] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0120.157] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0120.864] SetEvent (hEvent=0x70) returned 1
	[0120.864] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0120.961] SetEvent (hEvent=0x68) returned 1
	[0120.962] SetEvent (hEvent=0x30c) returned 1
	[0120.962] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0x1) returned 0x0
	[0120.969] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3324fb30, ulCount=0x10, ulNumEntriesRemoved=0x3324fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3324fb30, ulNumEntriesRemoved=0x3324fb14) returned 0
	[0120.970] SetEvent (hEvent=0x2f4) returned 1
	[0120.970] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0x1) returned 0x0
	[0120.972] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.984] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.077] SetEvent (hEvent=0x68) returned 1
	[0121.077] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0x13860) returned 0x0
	[0176.876] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0x270e) returned 0x102
	[0188.062] SetEvent (hEvent=0x2f4) returned 1
	[0188.062] SetEvent (hEvent=0x2e8) returned 1
	[0188.062] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0x13857) returned 0x0
	[0188.257] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0x26e3) returned 0x102
	[0199.432] SetEvent (hEvent=0xa0) returned 1
	[0199.432] SetEvent (hEvent=0x68) returned 1
	[0199.432] SetEvent (hEvent=0x318) returned 1
	[0199.432] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0x1386b) 

Thread:
	id = 8
	os_tid = 0x83c


Thread:
	id = 9
	os_tid = 0x84c


Thread:
	id = 10
	os_tid = 0x87c


Thread:
	id = 50
	os_tid = 0x95c

	[0106.538] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x3388ff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x3388ff38*=0x2e0) returned 1
	[0106.538] VirtualQuery (in: lpAddress=0x3388ff48, lpBuffer=0x3388ff48, dwLength=0x1c | out: lpBuffer=0x3388ff48*(BaseAddress=0x3388f000, AllocationBase=0x33790000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0106.538] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2e4
	[0106.538] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0106.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x12432380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2e8
	[0106.703] CloseHandle (hObject=0x2e8) returned 1
	[0106.703] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0107.589] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0107.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x12426fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x310
	[0107.621] CloseHandle (hObject=0x310) returned 1
	[0107.621] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.621] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.621] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.622] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.622] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.622] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.622] CreateFileW (lpFileName="C:\\Documents and Settings" (normalized: "c:\\documents and settings"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.622] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x124f7a44 | out: lpFindFileData=0x124f7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.635] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0107.689] SetEvent (hEvent=0x308) returned 1
	[0107.689] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0107.690] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0107.690] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x393df700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x393df700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xed035930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x102fcbb)) returned 1
	[0107.690] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127902e0 | out: pbBuffer=0x127902e0) returned 1
	[0107.690] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788360 | out: pbBuffer=0x12788360) returned 1
	[0107.690] VirtualAlloc (lpAddress=0x12800000, dwSize=0x400000, flAllocationType=0x1000, flProtect=0x4) returned 0x12800000
	[0107.707] VirtualAlloc (lpAddress=0x2161000, dwSize=0x41000, flAllocationType=0x1000, flProtect=0x4) returned 0x2161000
	[0107.709] VirtualFree (lpAddress=0x127e6000, dwSize=0x1a000, dwFreeType=0x4000) returned 1
	[0107.710] ReadFile (in: hFile=0x2fc, lpBuffer=0x12800000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x12800000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0107.826] VirtualAlloc (lpAddress=0x12840000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x12840000
	[0107.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x12427180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x318
	[0107.838] CloseHandle (hObject=0x318) returned 1
	[0107.838] SetEvent (hEvent=0x308) returned 1
	[0107.838] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0107.870] SetEvent (hEvent=0x308) returned 1
	[0107.870] SetEvent (hEvent=0x320) returned 1
	[0107.870] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0107.926] VirtualAlloc (lpAddress=0x127f0000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x127f0000
	[0107.928] SetEvent (hEvent=0x318) returned 1
	[0107.928] SetEvent (hEvent=0x320) returned 1
	[0107.928] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0107.953] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0107.954] SetEvent (hEvent=0x308) returned 1
	[0107.957] GetFileType (hFile=0x2fc) returned 0x1
	[0107.957] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0107.957] WriteFile (in: hFile=0x2fc, lpBuffer=0x12840000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x12840000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0107.959] GetFileType (hFile=0x2fc) returned 0x1
	[0107.959] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0107.959] VirtualAlloc (lpAddress=0x127f8000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x127f8000
	[0107.961] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0107.961] VirtualAlloc (lpAddress=0x12860000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12860000
	[0107.961] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x3e0000
	[0107.962] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0107.962] VirtualAlloc (lpAddress=0x12862000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12862000
	[0107.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0107.963] VirtualAlloc (lpAddress=0x12864000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12864000
	[0107.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788420 | out: pbBuffer=0x12788420) returned 1
	[0107.964] VirtualAlloc (lpAddress=0x12866000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12866000
	[0107.964] VirtualAlloc (lpAddress=0x12868000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12868000
	[0107.965] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0107.965] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0107.965] WriteFile (in: hFile=0x32c, lpBuffer=0x12868000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12868000*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0107.974] CloseHandle (hObject=0x32c) returned 1
	[0110.054] SetEvent (hEvent=0xa0) returned 1
	[0110.054] CloseHandle (hObject=0x2fc) returned 1
	[0110.055] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excellr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0110.056] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0112.751] SetEvent (hEvent=0x70) returned 1
	[0112.751] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0112.752] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0112.752] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc47e320, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x97f3f4)) returned 1
	[0112.752] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732160 | out: pbBuffer=0x12732160) returned 1
	[0112.752] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744108 | out: pbBuffer=0x12744108) returned 1
	[0112.752] VirtualAlloc (lpAddress=0x128f4000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x128f4000
	[0112.753] VirtualAlloc (lpAddress=0x12914000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x12914000
	[0112.754] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0112.790] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0112.790] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0112.791] SetEvent (hEvent=0xa0) returned 1
	[0112.791] SetEvent (hEvent=0x70) returned 1
	[0112.791] SetEvent (hEvent=0x30c) returned 1
	[0112.791] ReadFile (in: hFile=0x304, lpBuffer=0x128f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128f4000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0113.011] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0113.141] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0113.636] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0113.759] SetEvent (hEvent=0x68) returned 1
	[0113.759] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0113.975] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0113.975] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f5a94 | out: lpFindFileData=0x124f5a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0113.975] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfc8a9170, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfe076d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0113.975] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0113.975] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordLR.cab", cAlternateFileName="")) returned 1
	[0113.975] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x267e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.msi", cAlternateFileName="")) returned 1
	[0113.975] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708, dwReserved0=0x0, dwReserved1=0x0, cFileName="WordMUI.xml", cAlternateFileName="")) returned 1
	[0113.975] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0113.976] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0113.976] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f575c | out: lpFileInformation=0x124f575c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0113.976] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0113.976] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0114.113] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f596c | out: lpMode=0x124f596c) returned 0
	[0114.113] WriteFile (in: hFile=0x2fc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f596c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f596c*=0x1180, lpOverlapped=0x0) returned 1
	[0114.114] CloseHandle (hObject=0x2fc) returned 1
	[0114.115] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978)) returned 1
	[0114.294] SetEvent (hEvent=0x308) returned 1
	[0114.294] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2fb48f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2fb48f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc967850, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x29c6dbd)) returned 1
	[0114.294] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0114.294] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0114.294] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfe076d70, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x978)) returned 1
	[0114.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127320e0 | out: pbBuffer=0x127320e0) returned 1
	[0114.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0114.295] ReadFile (in: hFile=0x2fc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12429d1c*=0x978, lpOverlapped=0x0) returned 1
	[0114.392] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0114.536] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0114.779] SetEvent (hEvent=0x2f4) returned 1
	[0114.781] GetFileType (hFile=0x32c) returned 0x1
	[0114.781] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0114.781] WriteFile (in: hFile=0x32c, lpBuffer=0x1285a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x1285a000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0114.864] GetFileType (hFile=0x32c) returned 0x1
	[0114.864] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0114.864] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0114.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0114.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0114.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0114.865] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0114.865] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0114.866] WriteFile (in: hFile=0x328, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0114.909] CloseHandle (hObject=0x328) returned 1
	[0116.156] CloseHandle (hObject=0x32c) returned 1
	[0116.158] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordlr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0116.159] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0116.159] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0116.159] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200)) returned 1
	[0116.159] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0116.159] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788288 | out: pbBuffer=0x12788288) returned 1
	[0116.160] ReadFile (in: hFile=0x32c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0116.262] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0116.581] SetEvent (hEvent=0x68) returned 1
	[0116.582] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0118.073] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0119.652] SetEvent (hEvent=0x30c) returned 1
	[0119.652] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b)) returned 1
	[0119.653] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0119.877] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.059] SetEvent (hEvent=0x68) returned 1
	[0120.059] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.109] SetEvent (hEvent=0x30c) returned 1
	[0120.109] SetEvent (hEvent=0x11c) returned 1
	[0120.110] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.212] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.357] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.473] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.563] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.863] SetEvent (hEvent=0x11c) returned 1
	[0120.863] SetEvent (hEvent=0x68) returned 1
	[0120.863] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0121.620] SetEvent (hEvent=0x68) returned 1
	[0121.620] SetEvent (hEvent=0x80) returned 1
	[0121.620] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0121.903] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0122.492] SetEvent (hEvent=0x70) returned 1
	[0122.492] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0123.248] SetEvent (hEvent=0x2e8) returned 1
	[0123.249] SetEvent (hEvent=0x68) returned 1
	[0123.249] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0123.253] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0123.253] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0123.253] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb30, ulCount=0x10, ulNumEntriesRemoved=0x3388fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb30, ulNumEntriesRemoved=0x3388fb14) returned 0
	[0123.253] SetEvent (hEvent=0x318) returned 1
	[0123.253] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0123.255] GetFileType (hFile=0x33c) returned 0x1
	[0123.255] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.255] WriteFile (in: hFile=0x33c, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x3a7c, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x124f3d00*=0x3a7c, lpOverlapped=0x124f3d0c) returned 1
	[0123.255] GetFileType (hFile=0x33c) returned 0x1
	[0123.255] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3a7c, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.255] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0123.255] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0123.256] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0123.256] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0123.256] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0123.256] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0123.256] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.256] CloseHandle (hObject=0x2cc) returned 1
	[0123.256] CloseHandle (hObject=0x33c) returned 1
	[0123.257] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), lpNewFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.932] SetEvent (hEvent=0x2e8) returned 1
	[0123.932] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0123.932] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0123.932] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160)) returned 1
	[0123.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127325a0 | out: pbBuffer=0x127325a0) returned 1
	[0123.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881e8 | out: pbBuffer=0x127881e8) returned 1
	[0123.932] ReadFile (in: hFile=0x33c, lpBuffer=0x1270c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1270c000*, lpNumberOfBytesRead=0x124f3d1c*=0xc160, lpOverlapped=0x0) returned 1
	[0124.007] GetFileType (hFile=0x33c) returned 0x1
	[0124.008] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.008] WriteFile (in: hFile=0x33c, lpBuffer=0x127d8000*, nNumberOfBytesToWrite=0xc160, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127d8000*, lpNumberOfBytesWritten=0x124f3d00*=0xc160, lpOverlapped=0x124f3d0c) returned 1
	[0124.008] GetFileType (hFile=0x33c) returned 0x1
	[0124.008] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xc160, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9081 | out: pbBuffer=0x127e9081) returned 1
	[0124.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9181 | out: pbBuffer=0x127e9181) returned 1
	[0124.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9281 | out: pbBuffer=0x127e9281) returned 1
	[0124.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788500 | out: pbBuffer=0x12788500) returned 1
	[0124.009] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.009] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.010] WriteFile (in: hFile=0x32c, lpBuffer=0x12786500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12786500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.010] CloseHandle (hObject=0x32c) returned 1
	[0124.010] CloseHandle (hObject=0x33c) returned 1
	[0124.010] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.236] SetEvent (hEvent=0x30c) returned 1
	[0124.237] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.237] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.237] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60)) returned 1
	[0124.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127330c0 | out: pbBuffer=0x127330c0) returned 1
	[0124.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788518 | out: pbBuffer=0x12788518) returned 1
	[0124.237] ReadFile (in: hFile=0x33c, lpBuffer=0x12950000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12950000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.244] GetFileType (hFile=0x33c) returned 0x1
	[0124.244] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.244] WriteFile (in: hFile=0x33c, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0124.245] GetFileType (hFile=0x33c) returned 0x1
	[0124.245] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.245] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9381 | out: pbBuffer=0x127e9381) returned 1
	[0124.245] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9481 | out: pbBuffer=0x127e9481) returned 1
	[0124.245] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9581 | out: pbBuffer=0x127e9581) returned 1
	[0124.246] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127885d0 | out: pbBuffer=0x127885d0) returned 1
	[0124.246] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.246] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.246] WriteFile (in: hFile=0x2fc, lpBuffer=0x12786a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12786a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.249] CloseHandle (hObject=0x2fc) returned 1
	[0124.249] CloseHandle (hObject=0x33c) returned 1
	[0124.250] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.274] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0124.276] SetEvent (hEvent=0x318) returned 1
	[0124.276] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0124.276] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.276] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60)) returned 1
	[0124.276] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0124.276] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0124.276] ReadFile (in: hFile=0x2cc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.284] GetFileType (hFile=0x2cc) returned 0x1
	[0124.284] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.284] WriteFile (in: hFile=0x2cc, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0124.285] GetFileType (hFile=0x2cc) returned 0x1
	[0124.285] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0124.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0124.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0124.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0f0 | out: pbBuffer=0x1251e0f0) returned 1
	[0124.286] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.286] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.286] WriteFile (in: hFile=0x338, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.286] CloseHandle (hObject=0x338) returned 1
	[0124.286] CloseHandle (hObject=0x2cc) returned 1
	[0124.287] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.307] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0124.308] SetEvent (hEvent=0x318) returned 1
	[0124.308] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.308] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.308] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60)) returned 1
	[0124.308] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0124.308] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0124.308] ReadFile (in: hFile=0x340, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x126e5d1c*=0x2b60, lpOverlapped=0x0) returned 1
	[0124.427] GetFileType (hFile=0x340) returned 0x1
	[0124.427] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.427] WriteFile (in: hFile=0x340, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x2b60, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x126e5d00*=0x2b60, lpOverlapped=0x126e5d0c) returned 1
	[0124.428] GetFileType (hFile=0x340) returned 0x1
	[0124.428] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x2b60, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0124.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0124.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0124.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127442a0 | out: pbBuffer=0x127442a0) returned 1
	[0124.429] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.429] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.429] WriteFile (in: hFile=0x32c, lpBuffer=0x1245aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245aa00*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.429] CloseHandle (hObject=0x32c) returned 1
	[0124.430] CloseHandle (hObject=0x340) returned 1
	[0124.430] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.431] SetEvent (hEvent=0x80) returned 1
	[0124.431] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.431] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.431] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360)) returned 1
	[0124.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0124.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127442b8 | out: pbBuffer=0x127442b8) returned 1
	[0124.431] ReadFile (in: hFile=0x340, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x126e5d1c*=0x1a360, lpOverlapped=0x0) returned 1
	[0124.454] GetFileType (hFile=0x340) returned 0x1
	[0124.454] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.454] WriteFile (in: hFile=0x340, lpBuffer=0x12974000*, nNumberOfBytesToWrite=0x1a360, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12974000*, lpNumberOfBytesWritten=0x126e5d00*=0x1a360, lpOverlapped=0x126e5d0c) returned 1
	[0124.455] GetFileType (hFile=0x340) returned 0x1
	[0124.455] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x1a360, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0124.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0124.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0124.456] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444e0 | out: pbBuffer=0x127444e0) returned 1
	[0124.456] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0124.456] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.456] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245b400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245b400*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.456] CloseHandle (hObject=0x2cc) returned 1
	[0124.467] CloseHandle (hObject=0x340) returned 1
	[0124.468] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.479] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0124.480] SetEvent (hEvent=0x70) returned 1
	[0124.480] SwitchToThread () returned 1
	[0124.513] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0124.527] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0124.532] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.532] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.532] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160)) returned 1
	[0124.532] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0124.532] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0124.532] ReadFile (in: hFile=0x32c, lpBuffer=0x1270c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1270c000*, lpNumberOfBytesRead=0x124f5d1c*=0x4160, lpOverlapped=0x0) returned 1
	[0124.535] GetFileType (hFile=0x32c) returned 0x1
	[0124.535] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.536] WriteFile (in: hFile=0x32c, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x4160, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f5d00*=0x4160, lpOverlapped=0x124f5d0c) returned 1
	[0124.536] GetFileType (hFile=0x32c) returned 0x1
	[0124.536] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x4160, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.536] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0124.536] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0124.536] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0124.537] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0124.537] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.537] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.537] WriteFile (in: hFile=0x2fc, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.537] CloseHandle (hObject=0x2fc) returned 1
	[0124.538] CloseHandle (hObject=0x32c) returned 1
	[0124.539] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.569] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0124.587] SetEvent (hEvent=0x80) returned 1
	[0124.587] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.587] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.587] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60)) returned 1
	[0124.587] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0124.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0124.588] ReadFile (in: hFile=0x2fc, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.595] GetFileType (hFile=0x2fc) returned 0x1
	[0124.596] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.596] WriteFile (in: hFile=0x2fc, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0124.596] GetFileType (hFile=0x2fc) returned 0x1
	[0124.597] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0124.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0124.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0124.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441b0 | out: pbBuffer=0x127441b0) returned 1
	[0124.597] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.598] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.598] WriteFile (in: hFile=0x32c, lpBuffer=0x12780500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12780500*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.598] CloseHandle (hObject=0x32c) returned 1
	[0124.598] CloseHandle (hObject=0x2fc) returned 1
	[0124.599] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.638] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0124.638] SetEvent (hEvent=0x80) returned 1
	[0124.638] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.639] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0124.639] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960)) returned 1
	[0124.639] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0124.639] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744298 | out: pbBuffer=0x12744298) returned 1
	[0124.639] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0124.640] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0124.640] SetEvent (hEvent=0x80) returned 1
	[0124.641] ReadFile (in: hFile=0x2fc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.652] GetFileType (hFile=0x2fc) returned 0x1
	[0124.653] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.653] WriteFile (in: hFile=0x2fc, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0124.653] GetFileType (hFile=0x2fc) returned 0x1
	[0124.653] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0124.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0124.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0124.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0124.654] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.655] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0124.655] WriteFile (in: hFile=0x32c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.661] CloseHandle (hObject=0x32c) returned 1
	[0124.662] SwitchToThread () returned 1
	[0124.663] CloseHandle (hObject=0x2fc) returned 1
	[0124.665] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.750] SetEvent (hEvent=0x318) returned 1
	[0124.750] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0124.755] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0124.757] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb30, ulCount=0x10, ulNumEntriesRemoved=0x3388fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb30, ulNumEntriesRemoved=0x3388fb14) returned 0
	[0124.757] SetEvent (hEvent=0x30c) returned 1
	[0124.757] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0124.761] GetFileType (hFile=0x33c) returned 0x1
	[0124.761] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.761] WriteFile (in: hFile=0x33c, lpBuffer=0x126ec000*, nNumberOfBytesToWrite=0x16f60, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x126ec000*, lpNumberOfBytesWritten=0x124f5d00*=0x16f60, lpOverlapped=0x124f5d0c) returned 1
	[0124.762] GetFileType (hFile=0x33c) returned 0x1
	[0124.762] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x16f60, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.762] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0124.762] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0124.763] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0124.763] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0124.763] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.763] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.763] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.763] CloseHandle (hObject=0x2fc) returned 1
	[0124.764] CloseHandle (hObject=0x33c) returned 1
	[0124.764] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.778] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.779] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.779] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960)) returned 1
	[0124.780] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0124.780] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0124.780] ReadFile (in: hFile=0x33c, lpBuffer=0x12704000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12704000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.803] GetFileType (hFile=0x33c) returned 0x1
	[0124.803] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.804] WriteFile (in: hFile=0x33c, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0124.804] GetFileType (hFile=0x33c) returned 0x1
	[0124.804] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0124.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0124.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0124.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441b0 | out: pbBuffer=0x127441b0) returned 1
	[0124.805] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0124.805] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.805] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.805] CloseHandle (hObject=0x2cc) returned 1
	[0124.806] CloseHandle (hObject=0x33c) returned 1
	[0124.806] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.807] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.807] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.807] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560)) returned 1
	[0124.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c460 | out: pbBuffer=0x1244c460) returned 1
	[0124.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441c8 | out: pbBuffer=0x127441c8) returned 1
	[0124.807] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.865] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0124.927] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0124.928] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.928] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960)) returned 1
	[0124.928] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0124.928] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0124.928] ReadFile (in: hFile=0x2cc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x126ebd1c*=0x6960, lpOverlapped=0x0) returned 1
	[0124.937] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0124.952] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0124.960] SetEvent (hEvent=0x80) returned 1
	[0124.962] GetFileType (hFile=0x340) returned 0x1
	[0124.962] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.962] WriteFile (in: hFile=0x340, lpBuffer=0x12962000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12962000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0124.962] GetFileType (hFile=0x340) returned 0x1
	[0124.962] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0124.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0124.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0124.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0124.963] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.963] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.963] WriteFile (in: hFile=0x32c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.977] CloseHandle (hObject=0x32c) returned 1
	[0124.978] CloseHandle (hObject=0x340) returned 1
	[0124.978] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.979] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.979] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.979] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1
	[0124.979] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e2e0 | out: pbBuffer=0x1252e2e0) returned 1
	[0124.979] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104f8 | out: pbBuffer=0x124104f8) returned 1
	[0124.979] ReadFile (in: hFile=0x340, lpBuffer=0x126ec000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ec000*, lpNumberOfBytesRead=0x124f3d1c*=0x3960, lpOverlapped=0x0) returned 1
	[0125.001] GetFileType (hFile=0x340) returned 0x1
	[0125.001] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.001] WriteFile (in: hFile=0x340, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x3960, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x124f3d00*=0x3960, lpOverlapped=0x124f3d0c) returned 1
	[0125.001] GetFileType (hFile=0x340) returned 0x1
	[0125.001] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x3960, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0125.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0125.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0125.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0125.002] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0125.002] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.002] WriteFile (in: hFile=0x32c, lpBuffer=0x127e2a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.002] CloseHandle (hObject=0x32c) returned 1
	[0125.003] CloseHandle (hObject=0x340) returned 1
	[0125.003] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.004] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0125.043] SetEvent (hEvent=0x68) returned 1
	[0125.043] SetEvent (hEvent=0x2e8) returned 1
	[0125.043] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0125.043] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb30, ulCount=0x10, ulNumEntriesRemoved=0x3388fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb30, ulNumEntriesRemoved=0x3388fb14) returned 0
	[0125.044] SetEvent (hEvent=0x2e8) returned 1
	[0125.044] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0125.048] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.048] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.048] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c015050, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0x63c5e40, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x469bd5)) returned 1
	[0125.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0125.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0125.048] ReadFile (in: hFile=0x338, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0125.057] GetFileType (hFile=0x338) returned 0x1
	[0125.057] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.057] WriteFile (in: hFile=0x338, lpBuffer=0x126ec000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x126ec000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0125.057] GetFileType (hFile=0x338) returned 0x1
	[0125.057] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.058] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0125.058] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0125.058] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0125.058] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0125.058] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.058] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.058] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.070] CloseHandle (hObject=0x2fc) returned 1
	[0125.070] CloseHandle (hObject=0x338) returned 1
	[0125.071] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\tokens.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.078] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.079] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.079] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee2dd40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x34a04590, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1
	[0125.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322c0 | out: pbBuffer=0x127322c0) returned 1
	[0125.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0125.079] ReadFile (in: hFile=0x338, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0125.083] GetFileType (hFile=0x338) returned 0x1
	[0125.083] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.083] WriteFile (in: hFile=0x338, lpBuffer=0x1270c000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1270c000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0125.084] GetFileType (hFile=0x338) returned 0x1
	[0125.084] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.084] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0125.084] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0125.084] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0125.085] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0125.085] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.085] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.085] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.128] CloseHandle (hObject=0x2fc) returned 1
	[0125.128] CloseHandle (hObject=0x338) returned 1
	[0125.128] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), lpNewFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 0
	[0125.129] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0125.146] SetEvent (hEvent=0x68) returned 1
	[0125.146] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7BE4.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7be4.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.146] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.146] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7BE4.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7be4.tmp"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf01cf20, ftCreationTime.dwHighDateTime=0x1d62440, ftLastAccessTime.dwLowDateTime=0xf01cf20, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xf043080, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1
	[0125.146] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324e0 | out: pbBuffer=0x127324e0) returned 1
	[0125.146] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d0 | out: pbBuffer=0x127881d0) returned 1
	[0125.146] ReadFile (in: hFile=0x2fc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f1d1c*=0x5000, lpOverlapped=0x0) returned 1
	[0125.153] GetFileType (hFile=0x2fc) returned 0x1
	[0125.153] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.154] WriteFile (in: hFile=0x2fc, lpBuffer=0x12456000*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12456000*, lpNumberOfBytesWritten=0x124f1d00*=0x5000, lpOverlapped=0x124f1d0c) returned 1
	[0125.154] GetFileType (hFile=0x2fc) returned 0x1
	[0125.154] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x5000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0125.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0125.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0125.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127882b8 | out: pbBuffer=0x127882b8) returned 1
	[0125.155] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7BE4.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7be4.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.155] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.155] WriteFile (in: hFile=0x338, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.155] CloseHandle (hObject=0x338) returned 1
	[0125.155] CloseHandle (hObject=0x2fc) returned 1
	[0125.155] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7BE4.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7be4.tmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7BE4.tmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7be4.tmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 0
	[0125.156] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0125.193] SetEvent (hEvent=0x68) returned 1
	[0125.193] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.194] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0125.194] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.194] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732700 | out: pbBuffer=0x12732700) returned 1
	[0125.194] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882d8 | out: pbBuffer=0x127882d8) returned 1
	[0125.194] ReadFile (in: hFile=0x338, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x126ebd1c*=0x0, lpOverlapped=0x0) returned 1
	[0125.194] CloseHandle (hObject=0x338) returned 1
	[0125.194] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0125.217] SetEvent (hEvent=0x68) returned 1
	[0125.218] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.218] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp\\*", lpFindFileData=0x126e5a44 | out: lpFindFileData=0x126e5a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.218] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.218] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.218] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.218] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.218] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.218] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.219] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0125.224] SetEvent (hEvent=0x68) returned 1
	[0125.224] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.224] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp\\*", lpFindFileData=0x126e5a44 | out: lpFindFileData=0x126e5a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.224] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.224] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.225] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.225] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.225] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.225] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.225] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0125.233] SetEvent (hEvent=0x68) returned 1
	[0125.233] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.233] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp\\*", lpFindFileData=0x126e5a44 | out: lpFindFileData=0x126e5a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.233] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.233] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.234] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.234] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.234] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.234] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.234] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0125.248] SetEvent (hEvent=0x30c) returned 1
	[0125.249] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.249] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp\\*", lpFindFileData=0x126e5a44 | out: lpFindFileData=0x126e5a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.249] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.249] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.249] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO" (normalized: "c:\\programdata\\microsoft\\visio"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.255] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\VISIO" (normalized: "c:\\programdata\\microsoft\\visio"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.255] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.255] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.255] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.255] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.255] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\visio\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.255] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\visio\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.256] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\VISIO\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\visio\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.256] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.256] WriteFile (in: hFile=0x2fc, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.258] CloseHandle (hObject=0x2fc) returned 1
	[0125.258] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault" (normalized: "c:\\programdata\\microsoft\\vault"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.258] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault" (normalized: "c:\\programdata\\microsoft\\vault"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.258] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.259] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.259] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\vault\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.259] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\vault\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.259] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\vault\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.260] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.260] WriteFile (in: hFile=0x2fc, lpBuffer=0x125bb300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x125bb300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.261] CloseHandle (hObject=0x2fc) returned 1
	[0125.262] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows" (normalized: "c:\\programdata\\microsoft\\windows"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0125.262] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows" (normalized: "c:\\programdata\\microsoft\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.262] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd5be7172, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIT", cAlternateFileName="")) returned 1
	[0125.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x283ea490, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x9b86da60, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x9b86da60, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1
	[0125.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1
	[0125.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x80020c30, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80020c30, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80020c30, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1
	[0125.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1
	[0125.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80e53620, ftLastAccessTime.dwHighDateTime=0x1d305f5, ftLastWriteTime.dwLowDateTime=0x80e53620, ftLastWriteTime.dwHighDateTime=0x1d305f5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1
	[0125.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8038cbd7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8038cbd7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1
	[0125.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x60ae73a0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1
	[0125.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1cc35f15, ftLastAccessTime.dwHighDateTime=0x1ca0440, ftLastWriteTime.dwLowDateTime=0x1cc35f15, ftLastWriteTime.dwHighDateTime=0x1ca0440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0125.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9dbcac, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeea3462, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0125.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9dbcac, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfda01e06, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1
	[0125.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.263] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.263] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender" (normalized: "c:\\programdata\\microsoft\\windows defender"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0125.263] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender" (normalized: "c:\\programdata\\microsoft\\windows defender"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.263] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1fb3099, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x1fb3099, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Definition Updates", cAlternateFileName="DEFINI~1")) returned 1
	[0125.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalCopy", cAlternateFileName="LOCALC~1")) returned 1
	[0125.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quarantine", cAlternateFileName="QUARAN~1")) returned 1
	[0125.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7690f9e4, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7690f9e4, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scans", cAlternateFileName="")) returned 1
	[0125.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x76792c22, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x76792c22, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Support", cAlternateFileName="")) returned 1
	[0125.264] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.264] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.264] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT" (normalized: "c:\\programdata\\microsoft\\windows nt"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.264] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT" (normalized: "c:\\programdata\\microsoft\\windows nt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.264] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.264] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.265] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1
	[0125.265] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1
	[0125.265] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.265] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.265] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc" (normalized: "c:\\programdata\\microsoft\\wwansvc"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.266] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc" (normalized: "c:\\programdata\\microsoft\\wwansvc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.266] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.267] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.267] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
	[0125.267] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.267] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.267] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\wwansvc\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.267] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\wwansvc\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.267] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\wwansvc\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.268] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.268] WriteFile (in: hFile=0x2fc, lpBuffer=0x125bc600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x125bc600*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.269] CloseHandle (hObject=0x2fc) returned 1
	[0125.269] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.270] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.270] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.270] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.270] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.270] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.270] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.270] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.270] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.272] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\# M0rphine Help #.hta\\*", lpFindFileData=0x124f7640 | out: lpFindFileData=0x124f7640*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.272] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome" (normalized: "c:\\programdata\\microsoft\\ehome"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.273] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome" (normalized: "c:\\programdata\\microsoft\\ehome"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.273] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.273] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.273] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1
	[0125.273] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.273] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.273] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\ehome\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.273] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\ehome\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.274] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\ehome\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.275] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.275] WriteFile (in: hFile=0x2fc, lpBuffer=0x125bec00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x125bec00*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.278] CloseHandle (hObject=0x2fc) returned 1
	[0125.278] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs" (normalized: "c:\\programdata\\microsoft\\ehome\\logs"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.278] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs" (normalized: "c:\\programdata\\microsoft\\ehome\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.278] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.278] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.279] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.279] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.279] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.279] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.279] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\eHome\\logs\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\ehome\\logs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.279] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.280] WriteFile (in: hFile=0x2fc, lpBuffer=0x125c2000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x125c2000*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.281] CloseHandle (hObject=0x2fc) returned 1
	[0125.281] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help" (normalized: "c:\\programdata\\microsoft help"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.283] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help" (normalized: "c:\\programdata\\microsoft help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.283] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\*", lpFindFileData=0x124f7af8 | out: lpFindFileData=0x124f7af8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.285] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe79db030, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xed25d0a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xed25d0a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hx.hxn", cAlternateFileName="")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.14.1033.hxn", cAlternateFileName="MSEXCE~1.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.EXCEL.DEV.14.1033.hxn", cAlternateFileName="MSEXCE~2.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GRAPH.14.1033.hxn", cAlternateFileName="MSGRAP~1.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.GROOVE.14.1033.hxn", cAlternateFileName="MSGROO~1.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATH.14.1033.hxn", cAlternateFileName="MSINFO~1.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.INFOPATHEDITOR.14.1033.hxn", cAlternateFileName="MSINFO~2.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.14.1033.hxn", cAlternateFileName="MSMSAC~1.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSACCESS.DEV.14.1033.hxn", cAlternateFileName="MSMSAC~2.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSOUC.14.1033.hxn", cAlternateFileName="MSMSOU~1.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.14.1033.hxn", cAlternateFileName="MSMSPU~1.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSPUB.DEV.14.1033.hxn", cAlternateFileName="MSMSPU~2.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.MSTORE.14.1033.hxn", cAlternateFileName="MSMSTO~1.HXN")) returned 1
	[0125.287] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OIS.14.1033.hxn", cAlternateFileName="MSOIS1~1.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.ONENOTE.14.1033.hxn", cAlternateFileName="MSONEN~1.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.14.1033.hxn", cAlternateFileName="MSOUTL~1.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.OUTLOOK.DEV.14.1033.hxn", cAlternateFileName="MSOUTL~2.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.14.1033.hxn", cAlternateFileName="MSPOWE~1.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.POWERPNT.DEV.14.1033.hxn", cAlternateFileName="MSPOWE~2.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.SETLANG.14.1033.hxn", cAlternateFileName="MSSETL~1.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.14.1033.hxn", cAlternateFileName="MSVISI~1.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.DEV.14.1033.hxn", cAlternateFileName="MSVISI~3.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO.SHAPESHEET.14.1033.hxn", cAlternateFileName="MSVISI~4.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_PRM.14.1033.hxn", cAlternateFileName="MSE1C9~1.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.VISIO_STD.14.1033.hxn", cAlternateFileName="MSVISI~2.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.14.1033.hxn", cAlternateFileName="MSWINP~1.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINPROJ.DEV.14.1033.hxn", cAlternateFileName="MSWINP~2.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.14.1033.hxn", cAlternateFileName="MSWINW~1.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.WINWORD.DEV.14.1033.hxn", cAlternateFileName="MSWINW~2.HXN")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="nslist.hxl", cAlternateFileName="")) returned 1
	[0125.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.289] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.290] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft help\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f77c0 | out: lpFileInformation=0x124f77c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.291] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft help\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.291] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft help\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.292] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f79d0 | out: lpMode=0x124f79d0) returned 0
	[0125.292] WriteFile (in: hFile=0x2fc, lpBuffer=0x125c3300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f79d0, lpOverlapped=0x0 | out: lpBuffer=0x125c3300*, lpNumberOfBytesWritten=0x124f79d0*=0x1180, lpOverlapped=0x0) returned 1
	[0125.293] CloseHandle (hObject=0x2fc) returned 1
	[0125.293] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0125.298] SetEvent (hEvent=0x30c) returned 1
	[0125.298] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0125.300] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0125.308] SetEvent (hEvent=0x30c) returned 1
	[0125.308] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0125.309] SetEvent (hEvent=0x30c) returned 1
	[0125.309] SetEvent (hEvent=0x68) returned 1
	[0125.309] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa755d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa755d70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0125.309] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0125.320] SetEvent (hEvent=0x2e8) returned 1
	[0125.321] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1
	[0125.329] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x11446a50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1
	[0125.340] SetEvent (hEvent=0x68) returned 1
	[0125.340] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1
	[0125.347] SetEvent (hEvent=0x2e8) returned 1
	[0125.347] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1
	[0125.354] SetEvent (hEvent=0x30c) returned 1
	[0125.354] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1
	[0125.363] SetEvent (hEvent=0x68) returned 1
	[0125.364] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0125.371] SetEvent (hEvent=0x2e8) returned 1
	[0125.371] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0125.378] SetEvent (hEvent=0x30c) returned 1
	[0125.378] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0125.389] SetEvent (hEvent=0x68) returned 1
	[0125.389] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1
	[0125.397] SetEvent (hEvent=0x2e8) returned 1
	[0125.397] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a)) returned 1
	[0125.448] SetEvent (hEvent=0xa0) returned 1
	[0125.448] SetEvent (hEvent=0x30c) returned 1
	[0125.448] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xc997810, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xc997810, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc9e3ad0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0125.455] SetEvent (hEvent=0x68) returned 1
	[0125.455] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0125.463] SetEvent (hEvent=0x2e8) returned 1
	[0125.463] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1
	[0125.468] SetEvent (hEvent=0x30c) returned 1
	[0125.468] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1
	[0125.477] SetEvent (hEvent=0x318) returned 1
	[0125.477] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1
	[0125.484] SetEvent (hEvent=0x2e8) returned 1
	[0125.484] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0125.497] SetEvent (hEvent=0x30c) returned 1
	[0125.497] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0125.519] SetEvent (hEvent=0x318) returned 1
	[0125.519] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0125.524] SetEvent (hEvent=0x2e8) returned 1
	[0125.525] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188)) returned 1
	[0125.545] SetEvent (hEvent=0xa0) returned 1
	[0125.545] SetEvent (hEvent=0x30c) returned 1
	[0125.545] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0125.554] SetEvent (hEvent=0x318) returned 1
	[0125.554] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0125.586] SetEvent (hEvent=0x2e8) returned 1
	[0125.586] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0125.593] SetEvent (hEvent=0x30c) returned 1
	[0125.593] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1
	[0125.600] SetEvent (hEvent=0x318) returned 1
	[0125.600] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0125.607] SetEvent (hEvent=0x2e8) returned 1
	[0125.607] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1
	[0125.614] SetEvent (hEvent=0x30c) returned 1
	[0125.614] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc)) returned 1
	[0125.622] SetEvent (hEvent=0x318) returned 1
	[0125.622] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Mozilla" (normalized: "c:\\programdata\\mozilla"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.623] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla" (normalized: "c:\\programdata\\mozilla"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.623] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\*", lpFindFileData=0x124f7af8 | out: lpFindFileData=0x124f7af8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1
	[0125.623] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.623] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.623] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Mozilla\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\mozilla\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f77c0 | out: lpFileInformation=0x124f77c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.623] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\mozilla\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.624] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\mozilla\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.624] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f79d0 | out: lpMode=0x124f79d0) returned 0
	[0125.624] WriteFile (in: hFile=0x2fc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f79d0, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f79d0*=0x1180, lpOverlapped=0x0) returned 1
	[0125.629] CloseHandle (hObject=0x2fc) returned 1
	[0125.629] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs" (normalized: "c:\\programdata\\mozilla\\logs"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.633] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs" (normalized: "c:\\programdata\\mozilla\\logs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.633] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xaf8556a0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1
	[0125.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.633] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.633] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\mozilla\\logs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.634] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\mozilla\\logs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.634] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\mozilla\\logs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.636] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.636] WriteFile (in: hFile=0x338, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.637] CloseHandle (hObject=0x338) returned 1
	[0125.637] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4)) returned 1
	[0125.639] SetEvent (hEvent=0x70) returned 1
	[0125.639] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle" (normalized: "c:\\programdata\\oracle"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eea3160, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.639] CreateFileW (lpFileName="C:\\ProgramData\\Oracle" (normalized: "c:\\programdata\\oracle"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.639] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x124f7af8 | out: lpFindFileData=0x124f7af8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e3c6d00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7e3c6d00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eea3160, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.640] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.640] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\oracle\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f77c0 | out: lpFileInformation=0x124f77c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.640] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\oracle\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.640] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\oracle\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.641] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f79d0 | out: lpMode=0x124f79d0) returned 0
	[0125.641] WriteFile (in: hFile=0x338, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f79d0, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f79d0*=0x1180, lpOverlapped=0x0) returned 1
	[0125.643] CloseHandle (hObject=0x338) returned 1
	[0125.643] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache" (normalized: "c:\\programdata\\package cache"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.645] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache" (normalized: "c:\\programdata\\package cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.645] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x124f7af8 | out: lpFindFileData=0x124f7af8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.686] SetEvent (hEvent=0xa0) returned 1
	[0125.686] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xecce51e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0x4819be0, ftLastAccessTime.dwHighDateTime=0x1d2fc28, ftLastWriteTime.dwLowDateTime=0x4819be0, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.771] SetEvent (hEvent=0xa0) returned 1
	[0125.771] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="42D5BEC7DDFBD49E76467529CBC2868987BF8460", cAlternateFileName="42D5BE~1")) returned 1
	[0125.771] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="54050A5F8AE7F0C56E553F0090146C17A1D2BF8D", cAlternateFileName="54050A~1")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a199880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a1e5b40, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a1e5b40, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd7d760, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedbebcc0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfaaff840, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfab71c60, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabbdf20, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabbdf20, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa93425b0, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa9368710, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa9368710, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcbbb880, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1
	[0125.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.772] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.774] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f77c0 | out: lpFileInformation=0x124f77c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.775] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.775] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.775] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f79d0 | out: lpMode=0x124f79d0) returned 0
	[0125.775] WriteFile (in: hFile=0x338, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f79d0, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f79d0*=0x1180, lpOverlapped=0x0) returned 1
	[0125.777] CloseHandle (hObject=0x338) returned 1
	[0125.777] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.777] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.777] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.777] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2924cac0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.778] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0125.778] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.778] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.778] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.778] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.778] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.778] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.778] WriteFile (in: hFile=0x338, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.780] CloseHandle (hObject=0x338) returned 1
	[0125.780] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.780] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.780] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.780] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.780] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1
	[0125.781] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.781] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.781] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.781] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.781] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.783] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.783] WriteFile (in: hFile=0x338, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.784] CloseHandle (hObject=0x338) returned 1
	[0125.784] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.784] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.784] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.785] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.785] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
	[0125.785] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.785] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.785] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.785] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.785] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.785] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0125.786] WriteFile (in: hFile=0x338, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0125.788] CloseHandle (hObject=0x338) returned 1
	[0125.788] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.788] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.788] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29272c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x29272c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x29272c20, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0125.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.788] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.789] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.789] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.789] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.789] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0125.789] WriteFile (in: hFile=0x338, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0125.803] CloseHandle (hObject=0x338) returned 1
	[0125.803] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139)) returned 1
	[0125.809] SetEvent (hEvent=0x318) returned 1
	[0125.810] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.813] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0125.837] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0126.240] SetEvent (hEvent=0x318) returned 1
	[0126.240] SetEvent (hEvent=0x70) returned 1
	[0126.240] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0126.869] SetEvent (hEvent=0x2e8) returned 1
	[0126.869] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0126.903] SetEvent (hEvent=0x2e8) returned 1
	[0126.903] SetEvent (hEvent=0x30c) returned 1
	[0126.904] GetFileType (hFile=0x338) returned 0x1
	[0126.904] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.904] WriteFile (in: hFile=0x338, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0126.905] GetFileType (hFile=0x338) returned 0x1
	[0126.905] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0126.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0126.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0126.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0126.905] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.906] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0126.906] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.950] CloseHandle (hObject=0x2fc) returned 1
	[0126.950] CloseHandle (hObject=0x338) returned 1
	[0126.950] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.951] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.952] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0126.952] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a1afc00, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x5a1afc00, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x5a1afc00, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1
	[0126.952] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0126.952] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0126.952] ReadFile (in: hFile=0x338, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0127.012] GetFileType (hFile=0x338) returned 0x1
	[0127.013] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.013] WriteFile (in: hFile=0x338, lpBuffer=0x128d8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x128d8000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0127.013] GetFileType (hFile=0x338) returned 0x1
	[0127.013] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0127.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0127.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0127.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788190 | out: pbBuffer=0x12788190) returned 1
	[0127.014] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0127.014] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0127.014] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0127.015] CloseHandle (hObject=0x2fc) returned 1
	[0127.015] CloseHandle (hObject=0x338) returned 1
	[0127.015] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0127.016] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0127.135] SetEvent (hEvent=0x2e8) returned 1
	[0127.135] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0127.135] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0127.135] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36fed00, ftCreationTime.dwHighDateTime=0x1d28825, ftLastAccessTime.dwLowDateTime=0x36fed00, ftLastAccessTime.dwHighDateTime=0x1d28825, ftLastWriteTime.dwLowDateTime=0x36fed00, ftLastWriteTime.dwHighDateTime=0x1d28825, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0127.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732500 | out: pbBuffer=0x12732500) returned 1
	[0127.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881a8 | out: pbBuffer=0x127881a8) returned 1
	[0127.136] ReadFile (in: hFile=0x338, lpBuffer=0x12938000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12938000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0127.181] GetFileType (hFile=0x338) returned 0x1
	[0127.182] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.182] WriteFile (in: hFile=0x338, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0127.182] GetFileType (hFile=0x338) returned 0x1
	[0127.182] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.182] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0127.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0127.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0127.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788260 | out: pbBuffer=0x12788260) returned 1
	[0127.183] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0127.183] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0127.183] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0127.243] CloseHandle (hObject=0x2cc) returned 1
	[0127.243] CloseHandle (hObject=0x338) returned 1
	[0127.243] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0127.244] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0127.389] SetEvent (hEvent=0x2e8) returned 1
	[0127.390] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0127.390] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0127.390] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f9b3800, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x4f9b3800, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x4f9b3800, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0127.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e460 | out: pbBuffer=0x1252e460) returned 1
	[0127.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0127.390] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0127.428] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0127.429] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0127.429] SetEvent (hEvent=0xa0) returned 1
	[0127.429] SetEvent (hEvent=0x2e8) returned 1
	[0127.429] ReadFile (in: hFile=0x2fc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0127.478] GetFileType (hFile=0x2fc) returned 0x1
	[0127.479] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.479] WriteFile (in: hFile=0x2fc, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0127.479] GetFileType (hFile=0x2fc) returned 0x1
	[0127.480] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a01 | out: pbBuffer=0x127e8a01) returned 1
	[0127.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0127.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0127.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410590 | out: pbBuffer=0x12410590) returned 1
	[0127.480] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0127.480] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0127.481] WriteFile (in: hFile=0x2cc, lpBuffer=0x12724a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12724a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0127.481] CloseHandle (hObject=0x2cc) returned 1
	[0127.481] CloseHandle (hObject=0x2fc) returned 1
	[0127.481] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0127.482] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0127.516] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0127.516] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0127.549] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0127.549] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb30, ulCount=0x10, ulNumEntriesRemoved=0x3388fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb30, ulNumEntriesRemoved=0x3388fb14) returned 0
	[0127.549] SetEvent (hEvent=0x70) returned 1
	[0127.549] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0127.586] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0127.586] WriteFile (in: hFile=0x338, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0127.587] CloseHandle (hObject=0x338) returned 1
	[0127.588] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfe3882c0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e)) returned 1
	[0127.623] SetEvent (hEvent=0x70) returned 1
	[0127.623] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfaaff840, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfaaff840, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf0a0a700, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f398)) returned 1
	[0127.623] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0127.671] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0127.671] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0127.671] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa912d270, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.672] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0127.672] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1
	[0127.672] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0127.672] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0127.672] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.672] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0127.673] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0127.789] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0127.789] WriteFile (in: hFile=0x338, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0127.790] CloseHandle (hObject=0x338) returned 1
	[0127.790] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0x968d5df0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xbee38)) returned 1
	[0127.791] SetEvent (hEvent=0x2e8) returned 1
	[0127.791] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe)) returned 1
	[0127.791] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0127.898] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0127.898] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0127.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcad7040, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0127.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0127.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
	[0127.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0127.898] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0127.898] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0127.898] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0127.898] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0127.934] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0127.934] WriteFile (in: hFile=0x338, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0127.935] CloseHandle (hObject=0x338) returned 1
	[0127.935] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1
	[0127.935] SetEvent (hEvent=0x30c) returned 1
	[0127.935] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080)) returned 1
	[0128.296] SetEvent (hEvent=0xa0) returned 1
	[0128.296] SetEvent (hEvent=0x70) returned 1
	[0128.296] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.351] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.352] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.352] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf93efac0, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.352] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0128.352] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1
	[0128.352] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.352] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.352] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.352] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.352] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.397] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0128.397] WriteFile (in: hFile=0x340, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0128.399] CloseHandle (hObject=0x340) returned 1
	[0128.399] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xf93c9960, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93c9960, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xedfa2720, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0xbee30)) returned 1
	[0128.433] SetEvent (hEvent=0x70) returned 1
	[0128.433] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe)) returned 1
	[0128.434] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Start Menu" (normalized: "c:\\programdata\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.434] CreateFileW (lpFileName="C:\\ProgramData\\Start Menu" (normalized: "c:\\programdata\\start menu"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x340
	[0128.434] GetFileInformationByHandle (in: hFile=0x340, lpFileInformation=0x124f7bb0 | out: lpFileInformation=0x124f7bb0) returned 1
	[0128.434] GetFileInformationByHandleEx (in: hFile=0x340, FileInformationClass=0x9, lpFileInformation=0x124f7ba8, dwBufferSize=0x8 | out: lpFileInformation=0x124f7ba8) returned 1
	[0128.434] CloseHandle (hObject=0x340) returned 1
	[0128.434] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun" (normalized: "c:\\programdata\\sun"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.479] CreateFileW (lpFileName="C:\\ProgramData\\Sun" (normalized: "c:\\programdata\\sun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.479] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\*", lpFindFileData=0x124f7af8 | out: lpFindFileData=0x124f7af8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.480] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.480] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0128.480] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.480] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.480] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\sun\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f77c0 | out: lpFileInformation=0x124f77c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.480] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\sun\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.480] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\sun\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.481] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f79d0 | out: lpMode=0x124f79d0) returned 0
	[0128.481] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f79d0, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f79d0*=0x1180, lpOverlapped=0x0) returned 1
	[0128.482] CloseHandle (hObject=0x2cc) returned 1
	[0128.482] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun\\Java" (normalized: "c:\\programdata\\sun\\java"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.520] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java" (normalized: "c:\\programdata\\sun\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.520] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.520] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.520] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1
	[0128.520] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.521] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.521] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\sun\\java\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.521] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\sun\\java\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.521] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\sun\\java\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.521] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0128.521] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0128.523] CloseHandle (hObject=0x340) returned 1
	[0128.523] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update" (normalized: "c:\\programdata\\sun\\java\\java update"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.523] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update" (normalized: "c:\\programdata\\sun\\java\\java update"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.523] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.523] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.524] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureglist.xml", cAlternateFileName="JAUREG~1.XML")) returned 1
	[0128.524] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.524] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.524] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\sun\\java\\java update\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.524] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\sun\\java\\java update\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.524] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\sun\\java\\java update\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.550] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0128.560] SetEvent (hEvent=0x30c) returned 1
	[0128.560] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0128.560] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0128.560] SetEvent (hEvent=0x30c) returned 1
	[0128.560] SetEvent (hEvent=0x318) returned 1
	[0128.560] CreateFileW (lpFileName="C:\\ProgramData\\Start Menu" (normalized: "c:\\programdata\\start menu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.561] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*", lpFindFileData=0x12629a44 | out: lpFindFileData=0x12629a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0128.562] GetFileType (hFile=0x338) returned 0x1
	[0128.562] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.562] WriteFile (in: hFile=0x338, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0128.563] GetFileType (hFile=0x338) returned 0x1
	[0128.563] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0128.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0128.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0128.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c8 | out: pbBuffer=0x127880c8) returned 1
	[0128.564] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.564] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0128.564] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.604] CloseHandle (hObject=0x2cc) returned 1
	[0128.604] CloseHandle (hObject=0x338) returned 1
	[0128.604] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.605] SetEvent (hEvent=0x70) returned 1
	[0128.605] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0128.605] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0128.605] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000)) returned 1
	[0128.605] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e520 | out: pbBuffer=0x1240e520) returned 1
	[0128.605] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0e8 | out: pbBuffer=0x1251e0e8) returned 1
	[0128.606] ReadFile (in: hFile=0x338, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0128.770] GetFileType (hFile=0x338) returned 0x1
	[0128.770] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.770] WriteFile (in: hFile=0x338, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0128.771] GetFileType (hFile=0x338) returned 0x1
	[0128.771] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.771] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0128.771] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0128.771] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0128.771] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788190 | out: pbBuffer=0x12788190) returned 1
	[0128.771] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.771] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0128.772] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.774] CloseHandle (hObject=0x2cc) returned 1
	[0128.793] CloseHandle (hObject=0x338) returned 1
	[0128.793] MoveFileExW (lpExistingFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), lpNewFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.820] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0128.849] SetEvent (hEvent=0x80) returned 1
	[0128.849] SetEvent (hEvent=0x68) returned 1
	[0128.849] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0128.985] SetEvent (hEvent=0x318) returned 1
	[0128.985] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.025] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.038] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2e30)) returned 1
	[0129.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0129.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104e8 | out: pbBuffer=0x124104e8) returned 1
	[0129.038] ReadFile (in: hFile=0x338, lpBuffer=0x128ee000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128ee000*, lpNumberOfBytesRead=0x124f1d1c*=0x2e30, lpOverlapped=0x0) returned 1
	[0129.066] GetFileType (hFile=0x338) returned 0x1
	[0129.066] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.066] WriteFile (in: hFile=0x338, lpBuffer=0x127de000*, nNumberOfBytesToWrite=0x2e30, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127de000*, lpNumberOfBytesWritten=0x124f1d00*=0x2e30, lpOverlapped=0x124f1d0c) returned 1
	[0129.067] GetFileType (hFile=0x338) returned 0x1
	[0129.067] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x2e30, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.067] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb01 | out: pbBuffer=0x124ecb01) returned 1
	[0129.067] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc01 | out: pbBuffer=0x124ecc01) returned 1
	[0129.067] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd01 | out: pbBuffer=0x124ecd01) returned 1
	[0129.067] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410678 | out: pbBuffer=0x12410678) returned 1
	[0129.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.068] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.068] WriteFile (in: hFile=0x32c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.068] CloseHandle (hObject=0x32c) returned 1
	[0129.068] CloseHandle (hObject=0x338) returned 1
	[0129.068] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.manifest.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.069] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.099] SetEvent (hEvent=0x70) returned 1
	[0129.099] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.101] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1
	[0129.101] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732420 | out: pbBuffer=0x12732420) returned 1
	[0129.101] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251eb40 | out: pbBuffer=0x1251eb40) returned 1
	[0129.101] ReadFile (in: hFile=0x338, lpBuffer=0x12702000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12702000*, lpNumberOfBytesRead=0x12429d1c*=0x28, lpOverlapped=0x0) returned 1
	[0129.103] GetFileType (hFile=0x338) returned 0x1
	[0129.103] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.103] WriteFile (in: hFile=0x338, lpBuffer=0x12466390*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12466390*, lpNumberOfBytesWritten=0x12429d00*=0x28, lpOverlapped=0x12429d0c) returned 1
	[0129.103] GetFileType (hFile=0x338) returned 0x1
	[0129.103] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x28, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.103] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a01 | out: pbBuffer=0x127e8a01) returned 1
	[0129.103] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0129.103] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0129.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ec08 | out: pbBuffer=0x1251ec08) returned 1
	[0129.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.104] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.104] WriteFile (in: hFile=0x32c, lpBuffer=0x12980500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12980500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.104] CloseHandle (hObject=0x32c) returned 1
	[0129.104] CloseHandle (hObject=0x338) returned 1
	[0129.104] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.109] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.175] SetEvent (hEvent=0x70) returned 1
	[0129.175] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.176] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.176] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1
	[0129.176] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0129.176] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0129.176] ReadFile (in: hFile=0x32c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0129.226] GetFileType (hFile=0x32c) returned 0x1
	[0129.226] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.226] WriteFile (in: hFile=0x32c, lpBuffer=0x12694000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12694000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0129.227] GetFileType (hFile=0x32c) returned 0x1
	[0129.227] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0129.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0129.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0129.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0129.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.228] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.228] WriteFile (in: hFile=0x2fc, lpBuffer=0x1261e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261e000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.272] CloseHandle (hObject=0x2fc) returned 1
	[0129.272] CloseHandle (hObject=0x32c) returned 1
	[0129.272] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.280] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.318] SetEvent (hEvent=0x2e8) returned 1
	[0129.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.319] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6)) returned 1
	[0129.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732740 | out: pbBuffer=0x12732740) returned 1
	[0129.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0129.320] ReadFile (in: hFile=0x32c, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x1277dd1c*=0x1d6, lpOverlapped=0x0) returned 1
	[0129.321] GetFileType (hFile=0x32c) returned 0x1
	[0129.321] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.321] WriteFile (in: hFile=0x32c, lpBuffer=0x124c81e0*, nNumberOfBytesToWrite=0x1d6, lpNumberOfBytesWritten=0x1277dd00, lpOverlapped=0x1277dd0c | out: lpBuffer=0x124c81e0*, lpNumberOfBytesWritten=0x1277dd00*=0x1d6, lpOverlapped=0x1277dd0c) returned 1
	[0129.321] GetFileType (hFile=0x32c) returned 0x1
	[0129.321] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x1d6, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0129.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0129.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0129.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e720 | out: pbBuffer=0x1251e720) returned 1
	[0129.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.322] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.322] WriteFile (in: hFile=0x2fc, lpBuffer=0x1261ea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1261ea00*, lpNumberOfBytesWritten=0x1277dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.323] CloseHandle (hObject=0x2fc) returned 1
	[0129.324] CloseHandle (hObject=0x32c) returned 1
	[0129.325] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\current session.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.350] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.356] SetEvent (hEvent=0x2e8) returned 1
	[0129.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.357] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82adc050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82adc050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0129.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0129.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0129.357] ReadFile (in: hFile=0x340, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f5d1c*=0x10, lpOverlapped=0x0) returned 1
	[0129.358] GetFileType (hFile=0x340) returned 0x1
	[0129.358] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.358] WriteFile (in: hFile=0x340, lpBuffer=0x12788020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12788020*, lpNumberOfBytesWritten=0x124f5d00*=0x10, lpOverlapped=0x124f5d0c) returned 1
	[0129.358] GetFileType (hFile=0x340) returned 0x1
	[0129.359] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0129.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0129.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0129.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880e0 | out: pbBuffer=0x127880e0) returned 1
	[0129.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.359] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.359] WriteFile (in: hFile=0x32c, lpBuffer=0x12784000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12784000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.360] CloseHandle (hObject=0x32c) returned 1
	[0129.360] CloseHandle (hObject=0x340) returned 1
	[0129.361] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.368] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8dae37f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9a)) returned 1
	[0129.368] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0129.368] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788118 | out: pbBuffer=0x12788118) returned 1
	[0129.368] ReadFile (in: hFile=0x340, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x124f1d1c*=0x9a, lpOverlapped=0x0) returned 1
	[0129.369] GetFileType (hFile=0x340) returned 0x1
	[0129.369] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.370] WriteFile (in: hFile=0x340, lpBuffer=0x12464140*, nNumberOfBytesToWrite=0x9a, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12464140*, lpNumberOfBytesWritten=0x124f1d00*=0x9a, lpOverlapped=0x124f1d0c) returned 1
	[0129.377] GetFileType (hFile=0x340) returned 0x1
	[0129.377] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x9a, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0129.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0129.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0129.378] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881d0 | out: pbBuffer=0x127881d0) returned 1
	[0129.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.378] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.378] WriteFile (in: hFile=0x338, lpBuffer=0x12784500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12784500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.378] CloseHandle (hObject=0x338) returned 1
	[0129.378] CloseHandle (hObject=0x340) returned 1
	[0129.378] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.383] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82adc050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0129.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0129.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881e8 | out: pbBuffer=0x127881e8) returned 1
	[0129.383] ReadFile (in: hFile=0x340, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x1277dd1c*=0x29, lpOverlapped=0x0) returned 1
	[0129.384] GetFileType (hFile=0x340) returned 0x1
	[0129.384] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.384] WriteFile (in: hFile=0x340, lpBuffer=0x1240a330*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x1277dd00, lpOverlapped=0x1277dd0c | out: lpBuffer=0x1240a330*, lpNumberOfBytesWritten=0x1277dd00*=0x29, lpOverlapped=0x1277dd0c) returned 1
	[0129.385] GetFileType (hFile=0x340) returned 0x1
	[0129.385] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x29, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0129.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0129.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0129.386] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127882a0 | out: pbBuffer=0x127882a0) returned 1
	[0129.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.386] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.386] WriteFile (in: hFile=0x338, lpBuffer=0x12784a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12784a00*, lpNumberOfBytesWritten=0x1277dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.386] CloseHandle (hObject=0x338) returned 1
	[0129.386] CloseHandle (hObject=0x340) returned 1
	[0129.386] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.387] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.416] SetEvent (hEvent=0x2e8) returned 1
	[0129.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.416] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824ad030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x824ad030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.416] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0129.416] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882b8 | out: pbBuffer=0x127882b8) returned 1
	[0129.416] ReadFile (in: hFile=0x32c, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x124f1d1c*=0x0, lpOverlapped=0x0) returned 1
	[0129.417] CloseHandle (hObject=0x32c) returned 1
	[0129.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.417] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82556720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6f3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4ad)) returned 1
	[0129.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6c0 | out: pbBuffer=0x1252e6c0) returned 1
	[0129.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882c8 | out: pbBuffer=0x127882c8) returned 1
	[0129.418] ReadFile (in: hFile=0x32c, lpBuffer=0x12918000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12918000*, lpNumberOfBytesRead=0x12429d1c*=0x4ad, lpOverlapped=0x0) returned 1
	[0129.423] GetFileType (hFile=0x32c) returned 0x1
	[0129.423] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.423] WriteFile (in: hFile=0x32c, lpBuffer=0x12784f00*, nNumberOfBytesToWrite=0x4ad, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12784f00*, lpNumberOfBytesWritten=0x12429d00*=0x4ad, lpOverlapped=0x12429d0c) returned 1
	[0129.423] GetFileType (hFile=0x32c) returned 0x1
	[0129.423] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x4ad, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.423] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0129.423] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0129.423] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0129.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788390 | out: pbBuffer=0x12788390) returned 1
	[0129.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.424] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.424] WriteFile (in: hFile=0x338, lpBuffer=0x12785400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12785400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.424] CloseHandle (hObject=0x338) returned 1
	[0129.424] CloseHandle (hObject=0x32c) returned 1
	[0129.424] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.426] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.464] SetEvent (hEvent=0x2e8) returned 1
	[0129.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.464] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.464] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857953d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1
	[0129.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8e0 | out: pbBuffer=0x1252e8e0) returned 1
	[0129.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127883a8 | out: pbBuffer=0x127883a8) returned 1
	[0129.464] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0129.465] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.465] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0129.465] SetEvent (hEvent=0x2e8) returned 1
	[0129.466] ReadFile (in: hFile=0x338, lpBuffer=0x12958000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12958000*, lpNumberOfBytesRead=0x1277dd1c*=0x101, lpOverlapped=0x0) returned 1
	[0129.467] GetFileType (hFile=0x338) returned 0x1
	[0129.467] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.467] WriteFile (in: hFile=0x338, lpBuffer=0x1271a480*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x1277dd00, lpOverlapped=0x1277dd0c | out: lpBuffer=0x1271a480*, lpNumberOfBytesWritten=0x1277dd00*=0x101, lpOverlapped=0x1277dd0c) returned 1
	[0129.467] GetFileType (hFile=0x338) returned 0x1
	[0129.468] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x101, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0129.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0129.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0129.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788460 | out: pbBuffer=0x12788460) returned 1
	[0129.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.468] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.468] WriteFile (in: hFile=0x340, lpBuffer=0x12785900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12785900*, lpNumberOfBytesWritten=0x1277dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.469] CloseHandle (hObject=0x340) returned 1
	[0129.469] CloseHandle (hObject=0x338) returned 1
	[0129.469] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.471] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0129.471] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0129.472] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb30, ulCount=0x10, ulNumEntriesRemoved=0x3388fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb30, ulNumEntriesRemoved=0x3388fb14) returned 0
	[0129.472] SetEvent (hEvent=0x70) returned 1
	[0129.472] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0129.473] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.506] SetEvent (hEvent=0x68) returned 1
	[0129.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.506] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0129.506] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0129.506] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0129.506] ReadFile (in: hFile=0x32c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1242bd1c*=0xe0, lpOverlapped=0x0) returned 1
	[0129.507] GetFileType (hFile=0x32c) returned 0x1
	[0129.507] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.508] WriteFile (in: hFile=0x32c, lpBuffer=0x1248c000*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1248c000*, lpNumberOfBytesWritten=0x1242bd00*=0xe0, lpOverlapped=0x1242bd0c) returned 1
	[0129.508] GetFileType (hFile=0x32c) returned 0x1
	[0129.508] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0129.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0129.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0129.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0129.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.509] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.509] WriteFile (in: hFile=0x338, lpBuffer=0x12784000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12784000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.509] CloseHandle (hObject=0x338) returned 1
	[0129.509] CloseHandle (hObject=0x32c) returned 1
	[0129.509] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.511] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857bb530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x857bc4d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0129.511] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0129.511] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0129.511] ReadFile (in: hFile=0x32c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0xe0, lpOverlapped=0x0) returned 1
	[0129.512] GetFileType (hFile=0x32c) returned 0x1
	[0129.512] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.512] WriteFile (in: hFile=0x32c, lpBuffer=0x1248c380*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1248c380*, lpNumberOfBytesWritten=0x124f5d00*=0xe0, lpOverlapped=0x124f5d0c) returned 1
	[0129.512] GetFileType (hFile=0x32c) returned 0x1
	[0129.512] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.512] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0129.513] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0129.513] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0129.513] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0129.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.513] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.513] WriteFile (in: hFile=0x338, lpBuffer=0x12784500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12784500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.513] CloseHandle (hObject=0x338) returned 1
	[0129.513] CloseHandle (hObject=0x32c) returned 1
	[0129.513] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.514] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.533] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.540] SetEvent (hEvent=0x68) returned 1
	[0129.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.540] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1
	[0129.541] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0129.541] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0129.541] ReadFile (in: hFile=0x32c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1242bd1c*=0xd6, lpOverlapped=0x0) returned 1
	[0129.542] GetFileType (hFile=0x32c) returned 0x1
	[0129.542] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.543] WriteFile (in: hFile=0x32c, lpBuffer=0x1248c700*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1248c700*, lpNumberOfBytesWritten=0x1242bd00*=0xd6, lpOverlapped=0x1242bd0c) returned 1
	[0129.545] GetFileType (hFile=0x32c) returned 0x1
	[0129.545] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xd6, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.545] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0129.545] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0129.546] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0129.546] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0129.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.546] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.546] WriteFile (in: hFile=0x33c, lpBuffer=0x12784a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12784a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.549] CloseHandle (hObject=0x33c) returned 1
	[0129.549] CloseHandle (hObject=0x32c) returned 1
	[0129.554] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.559] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.569] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.585] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.604] SetEvent (hEvent=0x2e8) returned 1
	[0129.604] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.604] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0129.604] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0129.604] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0129.605] ReadFile (in: hFile=0x2fc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1242bd1c*=0xe0, lpOverlapped=0x0) returned 1
	[0129.606] GetFileType (hFile=0x2fc) returned 0x1
	[0129.606] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.606] WriteFile (in: hFile=0x2fc, lpBuffer=0x1276a000*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1276a000*, lpNumberOfBytesWritten=0x1242bd00*=0xe0, lpOverlapped=0x1242bd0c) returned 1
	[0129.606] GetFileType (hFile=0x2fc) returned 0x1
	[0129.606] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.607] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0129.607] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0129.607] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0129.607] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0129.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.607] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.607] WriteFile (in: hFile=0x340, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.607] CloseHandle (hObject=0x340) returned 1
	[0129.607] CloseHandle (hObject=0x2fc) returned 1
	[0129.608] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.609] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0129.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0129.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0129.610] ReadFile (in: hFile=0x2fc, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f3d1c*=0xde, lpOverlapped=0x0) returned 1
	[0129.611] GetFileType (hFile=0x2fc) returned 0x1
	[0129.611] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.611] WriteFile (in: hFile=0x2fc, lpBuffer=0x1276a2a0*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1276a2a0*, lpNumberOfBytesWritten=0x124f3d00*=0xde, lpOverlapped=0x124f3d0c) returned 1
	[0129.611] GetFileType (hFile=0x2fc) returned 0x1
	[0129.611] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xde, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0129.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0129.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0129.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0129.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.612] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.612] WriteFile (in: hFile=0x340, lpBuffer=0x12610a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12610a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.612] CloseHandle (hObject=0x340) returned 1
	[0129.612] CloseHandle (hObject=0x2fc) returned 1
	[0129.612] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.613] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.645] SetEvent (hEvent=0x2e8) returned 1
	[0129.645] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.645] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0129.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0129.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0129.645] ReadFile (in: hFile=0x2fc, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1242bd1c*=0xe6, lpOverlapped=0x0) returned 1
	[0129.647] GetFileType (hFile=0x2fc) returned 0x1
	[0129.647] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.647] WriteFile (in: hFile=0x2fc, lpBuffer=0x1297e2d0*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1297e2d0*, lpNumberOfBytesWritten=0x1242bd00*=0xe6, lpOverlapped=0x1242bd0c) returned 1
	[0129.647] GetFileType (hFile=0x2fc) returned 0x1
	[0129.647] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xe6, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0129.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0129.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0129.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445f0 | out: pbBuffer=0x127445f0) returned 1
	[0129.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.648] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.648] WriteFile (in: hFile=0x340, lpBuffer=0x12610f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12610f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.648] CloseHandle (hObject=0x340) returned 1
	[0129.649] CloseHandle (hObject=0x2fc) returned 1
	[0129.649] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.650] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.650] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1
	[0129.651] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732760 | out: pbBuffer=0x12732760) returned 1
	[0129.651] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744608 | out: pbBuffer=0x12744608) returned 1
	[0129.651] ReadFile (in: hFile=0x2fc, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f3d1c*=0xd0, lpOverlapped=0x0) returned 1
	[0129.675] GetFileType (hFile=0x2fc) returned 0x1
	[0129.675] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.676] WriteFile (in: hFile=0x2fc, lpBuffer=0x1271e000*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1271e000*, lpNumberOfBytesWritten=0x124f3d00*=0xd0, lpOverlapped=0x124f3d0c) returned 1
	[0129.676] GetFileType (hFile=0x2fc) returned 0x1
	[0129.676] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0129.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0129.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0129.677] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446c0 | out: pbBuffer=0x127446c0) returned 1
	[0129.677] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.677] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.677] WriteFile (in: hFile=0x340, lpBuffer=0x12611400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12611400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.677] CloseHandle (hObject=0x340) returned 1
	[0129.677] CloseHandle (hObject=0x2fc) returned 1
	[0129.677] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.679] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.690] SetEvent (hEvent=0x68) returned 1
	[0129.690] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.697] SetEvent (hEvent=0x70) returned 1
	[0129.697] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.921] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.927] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.928] SetEvent (hEvent=0x2e8) returned 1
	[0129.928] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0129.932] SetEvent (hEvent=0x2e8) returned 1
	[0129.932] SetEvent (hEvent=0x70) returned 1
	[0129.932] WriteFile (in: hFile=0x340, lpBuffer=0x12770600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12770600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.935] CloseHandle (hObject=0x340) returned 1
	[0129.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0129.936] SetEvent (hEvent=0x70) returned 1
	[0129.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.937] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.937] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.937] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.937] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.937] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.942] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.942] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.945] CloseHandle (hObject=0x2fc) returned 1
	[0129.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0129.946] SetEvent (hEvent=0x68) returned 1
	[0129.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.951] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.951] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.951] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.951] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.951] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.955] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.955] WriteFile (in: hFile=0x2fc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.957] CloseHandle (hObject=0x2fc) returned 1
	[0129.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0129.958] SetEvent (hEvent=0x70) returned 1
	[0129.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.959] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.959] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.959] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b01370, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.959] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.959] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.959] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.959] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.959] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.963] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.963] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.967] CloseHandle (hObject=0x33c) returned 1
	[0129.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b01b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0129.968] SetEvent (hEvent=0x68) returned 1
	[0129.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.972] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.972] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b01370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.972] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.972] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.972] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.976] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.976] WriteFile (in: hFile=0x33c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.978] CloseHandle (hObject=0x33c) returned 1
	[0129.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0129.979] SetEvent (hEvent=0x70) returned 1
	[0129.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.980] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.980] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.981] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.985] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.985] WriteFile (in: hFile=0x340, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0129.989] CloseHandle (hObject=0x340) returned 1
	[0129.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10e)) returned 1
	[0129.990] SetEvent (hEvent=0x68) returned 1
	[0129.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0129.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.995] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.996] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.996] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.999] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0129.999] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.001] CloseHandle (hObject=0x340) returned 1
	[0130.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1
	[0130.003] SetEvent (hEvent=0x70) returned 1
	[0130.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.003] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.003] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b274d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b274d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.003] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.003] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.003] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.007] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.007] WriteFile (in: hFile=0x2fc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.011] CloseHandle (hObject=0x2fc) returned 1
	[0130.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b274d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b28c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0130.012] SetEvent (hEvent=0x68) returned 1
	[0130.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.016] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.017] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85b4d630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.017] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.017] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.017] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.020] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.020] WriteFile (in: hFile=0x2fc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.023] CloseHandle (hObject=0x2fc) returned 1
	[0130.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b4d630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0130.024] SetEvent (hEvent=0x70) returned 1
	[0130.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85d166b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0130.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0130.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.029] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.034] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0130.034] WriteFile (in: hFile=0x340, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0130.036] CloseHandle (hObject=0x340) returned 1
	[0130.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85d166b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85d166b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1
	[0130.038] SetEvent (hEvent=0x68) returned 1
	[0130.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1
	[0130.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c)) returned 1
	[0130.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1
	[0130.039] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.039] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0130.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd2c)) returned 1
	[0130.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3a0 | out: pbBuffer=0x1240e3a0) returned 1
	[0130.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e748 | out: pbBuffer=0x1251e748) returned 1
	[0130.039] ReadFile (in: hFile=0x2fc, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x12429d1c*=0xd2c, lpOverlapped=0x0) returned 1
	[0130.043] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0130.047] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0130.050] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0130.051] SetEvent (hEvent=0x2e8) returned 1
	[0130.051] SetEvent (hEvent=0x68) returned 1
	[0130.051] GetFileType (hFile=0x2fc) returned 0x1
	[0130.051] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.051] WriteFile (in: hFile=0x2fc, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0xd2c, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x12429d00*=0xd2c, lpOverlapped=0x12429d0c) returned 1
	[0130.051] GetFileType (hFile=0x2fc) returned 0x1
	[0130.051] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd2c, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0130.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0130.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0130.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0130.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.052] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0130.052] WriteFile (in: hFile=0x340, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.052] CloseHandle (hObject=0x340) returned 1
	[0130.052] CloseHandle (hObject=0x2fc) returned 1
	[0130.053] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.054] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85cca3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1
	[0130.054] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c640 | out: pbBuffer=0x1244c640) returned 1
	[0130.054] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744398 | out: pbBuffer=0x12744398) returned 1
	[0130.054] ReadFile (in: hFile=0x2fc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f5d1c*=0xa0, lpOverlapped=0x0) returned 1
	[0130.055] GetFileType (hFile=0x2fc) returned 0x1
	[0130.055] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.055] WriteFile (in: hFile=0x2fc, lpBuffer=0x12618140*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12618140*, lpNumberOfBytesWritten=0x124f5d00*=0xa0, lpOverlapped=0x124f5d0c) returned 1
	[0130.056] GetFileType (hFile=0x2fc) returned 0x1
	[0130.056] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.056] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0130.056] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0130.056] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0130.056] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744510 | out: pbBuffer=0x12744510) returned 1
	[0130.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.056] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0130.057] WriteFile (in: hFile=0x340, lpBuffer=0x125fea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fea00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.057] CloseHandle (hObject=0x340) returned 1
	[0130.057] CloseHandle (hObject=0x2fc) returned 1
	[0130.057] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b4d630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b74730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1
	[0130.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1
	[0130.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857953d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1
	[0130.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.059] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.059] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.059] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1
	[0130.060] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.060] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.061] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0130.061] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0130.062] CloseHandle (hObject=0x2fc) returned 1
	[0130.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.076] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.076] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.084] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.084] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
	[0130.084] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
	[0130.084] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1
	[0130.084] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1
	[0130.084] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0130.084] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0130.084] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0130.084] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.084] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.087] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0130.087] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0130.088] CloseHandle (hObject=0x33c) returned 1
	[0130.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.093] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0130.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86585990, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865abaf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865abaf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865d1c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865d1c50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865d1c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f7db0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865f7db0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8661df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86644070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8666a1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0130.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86690330, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86690330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0130.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0130.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866b6490, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0130.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0130.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0130.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0130.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866dc5f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x866dc5f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0130.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0130.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0130.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0130.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86702750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0130.097] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.097] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.100] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0130.100] WriteFile (in: hFile=0x2fc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0130.102] CloseHandle (hObject=0x2fc) returned 1
	[0130.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.103] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.103] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.103] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.103] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.103] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.104] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.104] WriteFile (in: hFile=0x2fc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.106] CloseHandle (hObject=0x2fc) returned 1
	[0130.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1
	[0130.106] SetEvent (hEvent=0x30c) returned 1
	[0130.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.106] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.106] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.107] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.107] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.107] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.108] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.108] WriteFile (in: hFile=0x2fc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.109] CloseHandle (hObject=0x2fc) returned 1
	[0130.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0130.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.117] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.117] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.117] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.117] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.118] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.118] WriteFile (in: hFile=0x2fc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.120] CloseHandle (hObject=0x2fc) returned 1
	[0130.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1
	[0130.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.120] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.121] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864c72b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.121] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.121] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.121] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.122] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.122] WriteFile (in: hFile=0x2fc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.123] CloseHandle (hObject=0x2fc) returned 1
	[0130.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0130.145] SetEvent (hEvent=0x2e8) returned 1
	[0130.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.145] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.145] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.145] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.146] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.146] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.146] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.147] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.147] WriteFile (in: hFile=0x32c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.148] CloseHandle (hObject=0x32c) returned 1
	[0130.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0130.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.149] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.149] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.149] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.149] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.149] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.150] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.150] WriteFile (in: hFile=0x32c, lpBuffer=0x1291a000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1291a000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.152] CloseHandle (hObject=0x32c) returned 1
	[0130.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0130.154] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0130.163] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0130.163] SetEvent (hEvent=0x2e8) returned 1
	[0130.163] SetEvent (hEvent=0x318) returned 1
	[0130.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.164] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.164] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12975ad0 | out: lpFileInformation=0x12975ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0130.164] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0130.164] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0130.164] ReadFile (in: hFile=0x340, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12975d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12975d1c*=0xd8, lpOverlapped=0x0) returned 1
	[0130.165] GetFileType (hFile=0x340) returned 0x1
	[0130.165] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.165] WriteFile (in: hFile=0x340, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x12975d00, lpOverlapped=0x12975d0c | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x12975d00*=0xd8, lpOverlapped=0x12975d0c) returned 1
	[0130.166] GetFileType (hFile=0x340) returned 0x1
	[0130.166] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.166] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0130.166] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0130.166] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0130.166] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0130.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.167] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.167] WriteFile (in: hFile=0x32c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12975d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12975d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.167] CloseHandle (hObject=0x32c) returned 1
	[0130.167] CloseHandle (hObject=0x340) returned 1
	[0130.167] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\da\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.168] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.169] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ed410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x864ed410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.169] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.169] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.169] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.170] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.170] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.171] CloseHandle (hObject=0x340) returned 1
	[0130.171] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0130.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.172] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.173] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.173] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.173] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.173] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.174] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.174] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.175] CloseHandle (hObject=0x340) returned 1
	[0130.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1
	[0130.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.202] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.202] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.202] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.202] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.202] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.203] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.203] WriteFile (in: hFile=0x340, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.205] CloseHandle (hObject=0x340) returned 1
	[0130.205] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0130.212] SetEvent (hEvent=0x2e8) returned 1
	[0130.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.212] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.213] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.213] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.213] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.213] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.214] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.214] WriteFile (in: hFile=0x2fc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.215] CloseHandle (hObject=0x2fc) returned 1
	[0130.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0130.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.216] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.216] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865396d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x865396d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.216] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.216] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.216] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.217] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.217] WriteFile (in: hFile=0x2fc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.219] CloseHandle (hObject=0x2fc) returned 1
	[0130.223] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0130.226] SetEvent (hEvent=0x70) returned 1
	[0130.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.227] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.227] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.227] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.266] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.266] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.270] CloseHandle (hObject=0x340) returned 1
	[0130.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0130.272] SetEvent (hEvent=0x318) returned 1
	[0130.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.272] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.272] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.272] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.272] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.272] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.272] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.277] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.277] WriteFile (in: hFile=0x33c, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.281] CloseHandle (hObject=0x33c) returned 1
	[0130.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0130.284] SetEvent (hEvent=0x70) returned 1
	[0130.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.284] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.284] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.284] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.284] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.284] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.288] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.288] WriteFile (in: hFile=0x33c, lpBuffer=0x1276f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.291] CloseHandle (hObject=0x33c) returned 1
	[0130.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1
	[0130.292] SetEvent (hEvent=0x318) returned 1
	[0130.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.293] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.293] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655f830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8655f830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.293] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.293] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.293] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.295] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0130.298] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.298] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0130.678] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0130.683] SetEvent (hEvent=0x30c) returned 1
	[0130.683] SetEvent (hEvent=0x80) returned 1
	[0130.683] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0130.684] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb30, ulCount=0x10, ulNumEntriesRemoved=0x3388fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb30, ulNumEntriesRemoved=0x3388fb14) returned 0
	[0130.684] SetEvent (hEvent=0x68) returned 1
	[0130.684] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0130.685] SetEvent (hEvent=0x2e8) returned 1
	[0130.685] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0130.729] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0130.801] SetEvent (hEvent=0x80) returned 1
	[0130.801] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0130.806] SetEvent (hEvent=0x320) returned 1
	[0130.806] SetEvent (hEvent=0x70) returned 1
	[0130.806] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.968] SetEvent (hEvent=0x70) returned 1
	[0135.968] SetEvent (hEvent=0x68) returned 1
	[0135.968] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0136.399] SetEvent (hEvent=0x68) returned 1
	[0136.400] SetEvent (hEvent=0x80) returned 1
	[0136.400] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0136.493] SetEvent (hEvent=0x68) returned 1
	[0136.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.494] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a80e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828aa7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x112dc)) returned 1
	[0136.494] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0136.494] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0136.494] ReadFile (in: hFile=0x32c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1242bd1c*=0x112dc, lpOverlapped=0x0) returned 1
	[0136.512] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0136.520] SwitchToThread () returned 1
	[0136.547] SetEvent (hEvent=0x80) returned 1
	[0136.547] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0136.557] SetEvent (hEvent=0x80) returned 1
	[0136.557] SwitchToThread () returned 1
	[0136.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.569] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.570] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x814d6d00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.570] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.1_0", cAlternateFileName="")) returned 1
	[0136.570] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.570] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.571] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0136.571] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0136.573] CloseHandle (hObject=0x32c) returned 1
	[0136.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.595] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x180f, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
	[0136.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x869b0fb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0136.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0136.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ae0b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ae0b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0136.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.598] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.602] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0136.602] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0136.603] CloseHandle (hObject=0x33c) returned 1
	[0136.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86d1bfb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x180f)) returned 1
	[0136.605] SetEvent (hEvent=0x68) returned 1
	[0136.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.606] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.611] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0136.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="se", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0136.613] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.614] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.617] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0136.617] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0136.619] CloseHandle (hObject=0x33c) returned 1
	[0136.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.624] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.625] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.625] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.625] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.625] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.626] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.626] WriteFile (in: hFile=0x32c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.628] CloseHandle (hObject=0x32c) returned 1
	[0136.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x138)) returned 1
	[0136.633] SetEvent (hEvent=0x68) returned 1
	[0136.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.633] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.633] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.640] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.641] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.641] WriteFile (in: hFile=0x32c, lpBuffer=0x12638000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12638000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.643] CloseHandle (hObject=0x32c) returned 1
	[0136.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124)) returned 1
	[0136.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.710] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.710] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.710] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.710] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.710] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.712] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.712] WriteFile (in: hFile=0x32c, lpBuffer=0x12639300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12639300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.720] CloseHandle (hObject=0x32c) returned 1
	[0136.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0136.725] SetEvent (hEvent=0x68) returned 1
	[0136.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.728] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0136.735] SetEvent (hEvent=0x68) returned 1
	[0136.735] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0136.735] SetEvent (hEvent=0x68) returned 1
	[0136.735] SetEvent (hEvent=0x80) returned 1
	[0136.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.736] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.737] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.737] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.739] CloseHandle (hObject=0x32c) returned 1
	[0136.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1
	[0136.741] SetEvent (hEvent=0x80) returned 1
	[0136.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.748] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.749] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.749] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.749] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.749] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.750] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.750] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.751] CloseHandle (hObject=0x32c) returned 1
	[0136.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1
	[0136.753] SetEvent (hEvent=0x68) returned 1
	[0136.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.763] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.763] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.763] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.763] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.764] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.764] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.765] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.765] WriteFile (in: hFile=0x32c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.766] CloseHandle (hObject=0x32c) returned 1
	[0136.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xef)) returned 1
	[0136.767] SetEvent (hEvent=0x80) returned 1
	[0136.767] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.775] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.775] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.775] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.776] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.777] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.777] WriteFile (in: hFile=0x32c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.780] CloseHandle (hObject=0x32c) returned 1
	[0136.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1
	[0136.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.782] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.782] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.782] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.782] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.783] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.784] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.784] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.786] CloseHandle (hObject=0x32c) returned 1
	[0136.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0136.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.787] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.787] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.787] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.787] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.788] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.788] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.788] WriteFile (in: hFile=0x32c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.790] CloseHandle (hObject=0x32c) returned 1
	[0136.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10d)) returned 1
	[0136.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.808] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.808] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.808] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.808] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.809] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.809] WriteFile (in: hFile=0x32c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.810] CloseHandle (hObject=0x32c) returned 1
	[0136.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1
	[0136.812] SetEvent (hEvent=0x30c) returned 1
	[0136.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.819] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.819] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a94850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.819] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.819] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.819] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.820] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.820] WriteFile (in: hFile=0x32c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.822] CloseHandle (hObject=0x32c) returned 1
	[0136.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1
	[0136.824] SetEvent (hEvent=0x68) returned 1
	[0136.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.824] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.824] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.824] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.824] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.824] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.826] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.826] WriteFile (in: hFile=0x32c, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.835] CloseHandle (hObject=0x32c) returned 1
	[0136.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1
	[0136.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.836] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869b0010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a22430, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a22430, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.837] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.838] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.838] WriteFile (in: hFile=0x32c, lpBuffer=0x12613300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12613300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.840] CloseHandle (hObject=0x32c) returned 1
	[0136.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a21490, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x121)) returned 1
	[0136.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.840] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.841] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869fc2d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6e6f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a6e6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.841] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.841] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.841] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.841] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.841] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.842] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.842] WriteFile (in: hFile=0x32c, lpBuffer=0x12614600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12614600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.844] CloseHandle (hObject=0x32c) returned 1
	[0136.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0136.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.845] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.845] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x869d6170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.845] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.845] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.845] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.846] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.846] WriteFile (in: hFile=0x32c, lpBuffer=0x12615900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12615900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.848] CloseHandle (hObject=0x32c) returned 1
	[0136.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0136.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.849] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.849] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86a22430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86aba9b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86aba9b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.849] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.849] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.850] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.851] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.851] WriteFile (in: hFile=0x32c, lpBuffer=0x12616c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12616c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.852] CloseHandle (hObject=0x32c) returned 1
	[0136.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1
	[0136.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.853] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.854] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0136.854] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0136.854] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410b20 | out: pbBuffer=0x12410b20) returned 1
	[0136.854] ReadFile (in: hFile=0x32c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f1d1c*=0xe2, lpOverlapped=0x0) returned 1
	[0136.855] GetFileType (hFile=0x32c) returned 0x1
	[0136.855] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.855] WriteFile (in: hFile=0x32c, lpBuffer=0x125f6000*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x125f6000*, lpNumberOfBytesWritten=0x124f1d00*=0xe2, lpOverlapped=0x124f1d0c) returned 1
	[0136.856] GetFileType (hFile=0x32c) returned 0x1
	[0136.856] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.856] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0136.856] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0136.856] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0136.856] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410be8 | out: pbBuffer=0x12410be8) returned 1
	[0136.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.857] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.857] WriteFile (in: hFile=0x33c, lpBuffer=0x127dc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x127dc000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.857] CloseHandle (hObject=0x33c) returned 1
	[0136.857] CloseHandle (hObject=0x32c) returned 1
	[0136.857] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\hu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.859] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1
	[0136.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0136.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410c00 | out: pbBuffer=0x12410c00) returned 1
	[0136.859] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0136.874] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0136.874] SetEvent (hEvent=0xa0) returned 1
	[0136.874] SetEvent (hEvent=0x30c) returned 1
	[0136.875] ReadFile (in: hFile=0x32c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f1d1c*=0xf2, lpOverlapped=0x0) returned 1
	[0136.891] GetFileType (hFile=0x32c) returned 0x1
	[0136.891] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.892] WriteFile (in: hFile=0x32c, lpBuffer=0x127d7000*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127d7000*, lpNumberOfBytesWritten=0x124f1d00*=0xf2, lpOverlapped=0x124f1d0c) returned 1
	[0136.892] GetFileType (hFile=0x32c) returned 0x1
	[0136.892] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.892] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0136.892] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0136.893] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0136.893] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410d18 | out: pbBuffer=0x12410d18) returned 1
	[0136.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.893] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.893] WriteFile (in: hFile=0x33c, lpBuffer=0x127dc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x127dc500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.893] CloseHandle (hObject=0x33c) returned 1
	[0136.893] CloseHandle (hObject=0x32c) returned 1
	[0136.894] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\id\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.903] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0136.904] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0136.905] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb30, ulCount=0x10, ulNumEntriesRemoved=0x3388fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb30, ulNumEntriesRemoved=0x3388fb14) returned 0
	[0136.905] SetEvent (hEvent=0x68) returned 1
	[0136.905] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0136.928] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0136.961] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0136.994] SetEvent (hEvent=0x30c) returned 1
	[0136.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.995] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee)) returned 1
	[0136.995] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0136.995] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0136.995] ReadFile (in: hFile=0x33c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f1d1c*=0xee, lpOverlapped=0x0) returned 1
	[0136.997] GetFileType (hFile=0x33c) returned 0x1
	[0136.997] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.997] WriteFile (in: hFile=0x33c, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x124f1d00*=0xee, lpOverlapped=0x124f1d0c) returned 1
	[0136.997] GetFileType (hFile=0x33c) returned 0x1
	[0136.997] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.997] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0136.997] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0136.998] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0136.998] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0136.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.998] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.998] WriteFile (in: hFile=0x34c, lpBuffer=0x12990000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12990000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.998] CloseHandle (hObject=0x34c) returned 1
	[0136.998] CloseHandle (hObject=0x33c) returned 1
	[0136.999] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.000] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12985d0c | out: lpMode=0x12985d0c) returned 0
	[0137.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12985ad0 | out: lpFileInformation=0x12985ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a94850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a94080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd)) returned 1
	[0137.000] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0137.000] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0137.001] ReadFile (in: hFile=0x33c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12985d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x12985d1c*=0xfd, lpOverlapped=0x0) returned 1
	[0137.002] GetFileType (hFile=0x33c) returned 0x1
	[0137.002] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12985ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.002] WriteFile (in: hFile=0x33c, lpBuffer=0x12619000*, nNumberOfBytesToWrite=0xfd, lpNumberOfBytesWritten=0x12985d00, lpOverlapped=0x12985d0c | out: lpBuffer=0x12619000*, lpNumberOfBytesWritten=0x12985d00*=0xfd, lpOverlapped=0x12985d0c) returned 1
	[0137.002] GetFileType (hFile=0x33c) returned 0x1
	[0137.002] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xfd, lpNewFilePointer=0x0, dwMoveMethod=0x12985ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0137.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0137.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0137.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0137.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.003] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12985d0c | out: lpMode=0x12985d0c) returned 0
	[0137.003] WriteFile (in: hFile=0x34c, lpBuffer=0x12990500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12985d0c, lpOverlapped=0x0 | out: lpBuffer=0x12990500*, lpNumberOfBytesWritten=0x12985d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.003] CloseHandle (hObject=0x34c) returned 1
	[0137.004] CloseHandle (hObject=0x33c) returned 1
	[0137.004] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\lt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.005] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12989d0c | out: lpMode=0x12989d0c) returned 0
	[0137.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12989ad0 | out: lpFileInformation=0x12989ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a48590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a48590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0137.005] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0137.005] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0137.005] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0137.006] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0137.006] SetEvent (hEvent=0xa0) returned 1
	[0137.006] SetEvent (hEvent=0x30c) returned 1
	[0137.007] SetEvent (hEvent=0x80) returned 1
	[0137.007] ReadFile (in: hFile=0x33c, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12989d1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x12989d1c*=0xe8, lpOverlapped=0x0) returned 1
	[0137.009] GetFileType (hFile=0x33c) returned 0x1
	[0137.009] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12989ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.009] WriteFile (in: hFile=0x33c, lpBuffer=0x1277c0f0*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x12989d00, lpOverlapped=0x12989d0c | out: lpBuffer=0x1277c0f0*, lpNumberOfBytesWritten=0x12989d00*=0xe8, lpOverlapped=0x12989d0c) returned 1
	[0137.009] GetFileType (hFile=0x33c) returned 0x1
	[0137.010] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x12989ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0137.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0137.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0137.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0137.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.010] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12989d0c | out: lpMode=0x12989d0c) returned 0
	[0137.010] WriteFile (in: hFile=0x34c, lpBuffer=0x12990a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12989d0c, lpOverlapped=0x0 | out: lpBuffer=0x12990a00*, lpNumberOfBytesWritten=0x12989d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.011] CloseHandle (hObject=0x34c) returned 1
	[0137.011] CloseHandle (hObject=0x33c) returned 1
	[0137.011] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\nl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.012] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0137.014] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb30, ulCount=0x10, ulNumEntriesRemoved=0x3388fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb30, ulNumEntriesRemoved=0x3388fb14) returned 0
	[0137.014] SetEvent (hEvent=0x68) returned 1
	[0137.014] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0137.015] GetFileType (hFile=0x32c) returned 0x1
	[0137.015] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.015] WriteFile (in: hFile=0x32c, lpBuffer=0x12514900*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12514900*, lpNumberOfBytesWritten=0x12429d00*=0x108, lpOverlapped=0x12429d0c) returned 1
	[0137.016] GetFileType (hFile=0x32c) returned 0x1
	[0137.016] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.016] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8101 | out: pbBuffer=0x127e8101) returned 1
	[0137.016] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8201 | out: pbBuffer=0x127e8201) returned 1
	[0137.016] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8301 | out: pbBuffer=0x127e8301) returned 1
	[0137.016] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0137.017] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.017] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.017] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.017] CloseHandle (hObject=0x33c) returned 1
	[0137.017] CloseHandle (hObject=0x32c) returned 1
	[0137.017] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\pl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.018] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0137.110] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0137.136] SetEvent (hEvent=0x80) returned 1
	[0137.136] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0137.142] SetEvent (hEvent=0x80) returned 1
	[0137.142] SetEvent (hEvent=0x68) returned 1
	[0137.142] SwitchToThread () returned 1
	[0137.143] SetEvent (hEvent=0x80) returned 1
	[0137.143] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0137.172] SetEvent (hEvent=0x30c) returned 1
	[0137.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.172] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ae0b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86adfb70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xdd12c400, ftLastWriteTime.dwHighDateTime=0x1d0683e, nFileSizeHigh=0x0, nFileSizeLow=0x2686)) returned 1
	[0137.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0137.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0137.172] ReadFile (in: hFile=0x32c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12429d1c*=0x2686, lpOverlapped=0x0) returned 1
	[0137.182] GetFileType (hFile=0x32c) returned 0x1
	[0137.182] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.183] WriteFile (in: hFile=0x32c, lpBuffer=0x12458000*, nNumberOfBytesToWrite=0x2686, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12458000*, lpNumberOfBytesWritten=0x12429d00*=0x2686, lpOverlapped=0x12429d0c) returned 1
	[0137.183] GetFileType (hFile=0x32c) returned 0x1
	[0137.183] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x2686, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0137.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0137.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0137.184] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0137.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.184] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0137.184] WriteFile (in: hFile=0x34c, lpBuffer=0x12768000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.184] CloseHandle (hObject=0x34c) returned 1
	[0137.192] CloseHandle (hObject=0x32c) returned 1
	[0137.192] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_metadata\\verified_contents.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.202] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0137.242] SetEvent (hEvent=0x80) returned 1
	[0137.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.243] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12981d0c | out: lpMode=0x12981d0c) returned 0
	[0137.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12981ad0 | out: lpFileInformation=0x12981ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x833eb5b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x833eb5b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397d230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4827)) returned 1
	[0137.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0137.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0137.243] ReadFile (in: hFile=0x34c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12981d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12981d1c*=0x4827, lpOverlapped=0x0) returned 1
	[0137.251] GetFileType (hFile=0x34c) returned 0x1
	[0137.251] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12981ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.251] WriteFile (in: hFile=0x34c, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0x4827, lpNumberOfBytesWritten=0x12981d00, lpOverlapped=0x12981d0c | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x12981d00*=0x4827, lpOverlapped=0x12981d0c) returned 1
	[0137.252] GetFileType (hFile=0x34c) returned 0x1
	[0137.252] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x4827, lpNewFilePointer=0x0, dwMoveMethod=0x12981ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0137.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0137.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0137.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0137.252] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.253] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12981d0c | out: lpMode=0x12981d0c) returned 0
	[0137.253] WriteFile (in: hFile=0x33c, lpBuffer=0x12768500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12981d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768500*, lpNumberOfBytesWritten=0x12981d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.253] CloseHandle (hObject=0x33c) returned 1
	[0137.253] CloseHandle (hObject=0x34c) returned 1
	[0137.253] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\am\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.254] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0137.300] SetEvent (hEvent=0x80) returned 1
	[0137.300] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0137.303] SetEvent (hEvent=0x2e8) returned 1
	[0137.304] SetEvent (hEvent=0x68) returned 1
	[0137.304] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0137.306] SetEvent (hEvent=0x80) returned 1
	[0137.306] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0137.514] SetEvent (hEvent=0x30c) returned 1
	[0137.514] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0137.559] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0137.788] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.789] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1277bd0c | out: lpMode=0x1277bd0c) returned 0
	[0137.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277bad0 | out: lpFileInformation=0x1277bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d)) returned 1
	[0137.789] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e460 | out: pbBuffer=0x1252e460) returned 1
	[0137.789] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744518 | out: pbBuffer=0x12744518) returned 1
	[0137.789] ReadFile (in: hFile=0x33c, lpBuffer=0x1296c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1296c000*, lpNumberOfBytesRead=0x1277bd1c*=0x3e5d, lpOverlapped=0x0) returned 1
	[0137.928] GetFileType (hFile=0x33c) returned 0x1
	[0137.928] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277bce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.928] WriteFile (in: hFile=0x33c, lpBuffer=0x125c0000*, nNumberOfBytesToWrite=0x3e5d, lpNumberOfBytesWritten=0x1277bd00, lpOverlapped=0x1277bd0c | out: lpBuffer=0x125c0000*, lpNumberOfBytesWritten=0x1277bd00*=0x3e5d, lpOverlapped=0x1277bd0c) returned 1
	[0137.928] GetFileType (hFile=0x33c) returned 0x1
	[0137.928] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3e5d, lpNewFilePointer=0x0, dwMoveMethod=0x1277bce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.929] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0137.929] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0137.929] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0137.931] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0137.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0137.931] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1277bd0c | out: lpMode=0x1277bd0c) returned 0
	[0137.931] WriteFile (in: hFile=0x2cc, lpBuffer=0x1264a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1264a000*, lpNumberOfBytesWritten=0x1277bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.932] CloseHandle (hObject=0x2cc) returned 1
	[0137.932] CloseHandle (hObject=0x33c) returned 1
	[0137.932] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.933] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0138.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.117] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1277bd0c | out: lpMode=0x1277bd0c) returned 0
	[0138.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277bad0 | out: lpFileInformation=0x1277bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a)) returned 1
	[0138.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0138.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0138.117] ReadFile (in: hFile=0x34c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1277bd1c*=0x403a, lpOverlapped=0x0) returned 1
	[0138.169] GetFileType (hFile=0x34c) returned 0x1
	[0138.169] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277bce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.169] WriteFile (in: hFile=0x34c, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x403a, lpNumberOfBytesWritten=0x1277bd00, lpOverlapped=0x1277bd0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x1277bd00*=0x403a, lpOverlapped=0x1277bd0c) returned 1
	[0138.169] GetFileType (hFile=0x34c) returned 0x1
	[0138.169] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x403a, lpNewFilePointer=0x0, dwMoveMethod=0x1277bce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0138.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0138.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0138.170] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0138.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0138.170] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1277bd0c | out: lpMode=0x1277bd0c) returned 0
	[0138.170] WriteFile (in: hFile=0x33c, lpBuffer=0x1264a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1264a500*, lpNumberOfBytesWritten=0x1277bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.171] CloseHandle (hObject=0x33c) returned 1
	[0138.171] CloseHandle (hObject=0x34c) returned 1
	[0138.171] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.173] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0138.922] SetEvent (hEvent=0x70) returned 1
	[0138.922] SetEvent (hEvent=0x68) returned 1
	[0138.922] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0138.957] SetEvent (hEvent=0x2e8) returned 1
	[0138.957] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0139.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.131] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0139.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dd670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dd670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e96)) returned 1
	[0139.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0139.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0139.131] ReadFile (in: hFile=0x34c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f3d1c*=0x3e96, lpOverlapped=0x0) returned 1
	[0139.178] GetFileType (hFile=0x34c) returned 0x1
	[0139.178] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.178] WriteFile (in: hFile=0x34c, lpBuffer=0x1257a000*, nNumberOfBytesToWrite=0x3e96, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1257a000*, lpNumberOfBytesWritten=0x124f3d00*=0x3e96, lpOverlapped=0x124f3d0c) returned 1
	[0139.178] GetFileType (hFile=0x34c) returned 0x1
	[0139.178] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x3e96, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.178] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0139.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0139.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0139.179] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0139.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0139.179] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0139.180] WriteFile (in: hFile=0x32c, lpBuffer=0x12608000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12608000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.180] CloseHandle (hObject=0x32c) returned 1
	[0139.180] CloseHandle (hObject=0x34c) returned 1
	[0139.180] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.182] SetEvent (hEvent=0x68) returned 1
	[0139.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.183] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0139.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f0ef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f0ef0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5593)) returned 1
	[0139.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0139.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0139.183] ReadFile (in: hFile=0x34c, lpBuffer=0x12584000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12584000*, lpNumberOfBytesRead=0x124f3d1c*=0x5593, lpOverlapped=0x0) returned 1
	[0139.229] GetFileType (hFile=0x34c) returned 0x1
	[0139.229] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.229] WriteFile (in: hFile=0x34c, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0x5593, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x124f3d00*=0x5593, lpOverlapped=0x124f3d0c) returned 1
	[0139.230] GetFileType (hFile=0x34c) returned 0x1
	[0139.230] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x5593, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0139.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0139.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0139.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0139.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0139.231] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0139.231] WriteFile (in: hFile=0x2cc, lpBuffer=0x12608500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12608500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.231] CloseHandle (hObject=0x2cc) returned 1
	[0139.231] CloseHandle (hObject=0x34c) returned 1
	[0139.231] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\te\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.234] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0139.324] SetEvent (hEvent=0x30c) returned 1
	[0139.324] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0139.373] SetEvent (hEvent=0x30c) returned 1
	[0139.373] SwitchToThread () returned 1
	[0139.405] SetEvent (hEvent=0x30c) returned 1
	[0139.405] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0139.438] SetEvent (hEvent=0x30c) returned 1
	[0139.438] SetEvent (hEvent=0x80) returned 1
	[0139.438] GetFileType (hFile=0x33c) returned 0x1
	[0139.438] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.438] WriteFile (in: hFile=0x33c, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x4f64, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x1276bd00*=0x4f64, lpOverlapped=0x1276bd0c) returned 1
	[0139.439] GetFileType (hFile=0x33c) returned 0x1
	[0139.439] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4f64, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.439] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0139.439] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0139.439] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0139.439] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0139.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.439] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0139.439] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.440] CloseHandle (hObject=0x34c) returned 1
	[0139.440] CloseHandle (hObject=0x33c) returned 1
	[0139.440] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0139.442] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0139.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83617ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x426b)) returned 1
	[0139.442] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0139.442] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744398 | out: pbBuffer=0x12744398) returned 1
	[0139.442] ReadFile (in: hFile=0x33c, lpBuffer=0x12836000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12836000*, lpNumberOfBytesRead=0x1276bd1c*=0x426b, lpOverlapped=0x0) returned 1
	[0139.964] SetEvent (hEvent=0xa0) returned 1
	[0139.965] GetFileType (hFile=0x33c) returned 0x1
	[0139.965] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.965] WriteFile (in: hFile=0x33c, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0x426b, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x1276bd00*=0x426b, lpOverlapped=0x1276bd0c) returned 1
	[0139.965] GetFileType (hFile=0x33c) returned 0x1
	[0139.965] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x426b, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.966] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0139.966] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0139.966] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0139.966] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0139.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0139.967] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0139.967] WriteFile (in: hFile=0x2cc, lpBuffer=0x1298c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1298c000*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.968] CloseHandle (hObject=0x2cc) returned 1
	[0139.968] CloseHandle (hObject=0x33c) returned 1
	[0139.968] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.970] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0141.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0141.996] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0141.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83637bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8363f0f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf)) returned 1
	[0141.997] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c920 | out: pbBuffer=0x1244c920) returned 1
	[0141.997] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104e8 | out: pbBuffer=0x124104e8) returned 1
	[0141.997] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0141.997] SetEvent (hEvent=0x70) returned 1
	[0141.998] ReadFile (in: hFile=0x2cc, lpBuffer=0x12896000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12896000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0142.438] SetEvent (hEvent=0xa0) returned 1
	[0142.439] GetFileType (hFile=0x2cc) returned 0x1
	[0142.439] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.439] WriteFile (in: hFile=0x2cc, lpBuffer=0x126b4000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x126b4000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0142.440] GetFileType (hFile=0x2cc) returned 0x1
	[0142.440] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0142.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0142.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0142.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0142.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0142.441] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.441] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.516] CloseHandle (hObject=0x340) returned 1
	[0142.516] CloseHandle (hObject=0x2cc) returned 1
	[0142.516] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xce17)) returned 1
	[0142.646] SetEvent (hEvent=0x2f4) returned 1
	[0142.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0142.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0142.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0142.676] SetEvent (hEvent=0xa0) returned 1
	[0142.676] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83663ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836884d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x836884d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0142.676] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.css", cAlternateFileName="")) returned 1
	[0142.676] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app.js", cAlternateFileName="")) returned 1
	[0142.676] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="cast_app_redirect.js", cAlternateFileName="CAST_A~1.JS")) returned 1
	[0142.676] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="chromecast_logo_grey.png", cAlternateFileName="CHROME~1.PNG")) returned 1
	[0142.676] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83679a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83679a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="devices.html", cAlternateFileName="DEVICE~1.HTM")) returned 1
	[0142.676] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8367c180, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8367c180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1
	[0142.676] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="offers.html", cAlternateFileName="OFFERS~1.HTM")) returned 1
	[0142.676] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.html", cAlternateFileName="SETUP~1.HTM")) returned 1
	[0142.676] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0142.676] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0142.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0142.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0142.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0142.679] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0142.679] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0142.680] CloseHandle (hObject=0x340) returned 1
	[0142.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d)) returned 1
	[0142.680] SetEvent (hEvent=0x2f4) returned 1
	[0142.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da)) returned 1
	[0142.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1
	[0142.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef)) returned 1
	[0142.686] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0142.687] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.687] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366fe30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366fe30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1
	[0142.687] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732780 | out: pbBuffer=0x12732780) returned 1
	[0142.687] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446a0 | out: pbBuffer=0x127446a0) returned 1
	[0142.687] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0142.692] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0142.692] SetEvent (hEvent=0x68) returned 1
	[0142.692] ReadFile (in: hFile=0x34c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f5d1c*=0xf2, lpOverlapped=0x0) returned 1
	[0142.693] GetFileType (hFile=0x34c) returned 0x1
	[0142.693] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.693] WriteFile (in: hFile=0x34c, lpBuffer=0x127d9000*, nNumberOfBytesToWrite=0xf2, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127d9000*, lpNumberOfBytesWritten=0x124f5d00*=0xf2, lpOverlapped=0x124f5d0c) returned 1
	[0142.694] GetFileType (hFile=0x34c) returned 0x1
	[0142.694] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xf2, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0142.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0142.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0142.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127447d8 | out: pbBuffer=0x127447d8) returned 1
	[0142.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0142.694] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.694] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245af00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245af00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.695] CloseHandle (hObject=0x2cc) returned 1
	[0142.695] CloseHandle (hObject=0x34c) returned 1
	[0142.695] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app_redirect.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0142.696] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83674c50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83674c50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1bef)) returned 1
	[0142.696] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127329a0 | out: pbBuffer=0x127329a0) returned 1
	[0142.696] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744800 | out: pbBuffer=0x12744800) returned 1
	[0142.697] ReadFile (in: hFile=0x34c, lpBuffer=0x128f6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128f6000*, lpNumberOfBytesRead=0x124f5d1c*=0x1bef, lpOverlapped=0x0) returned 1
	[0142.720] GetFileType (hFile=0x34c) returned 0x1
	[0142.720] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.720] WriteFile (in: hFile=0x34c, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x1bef, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f5d00*=0x1bef, lpOverlapped=0x124f5d0c) returned 1
	[0142.720] GetFileType (hFile=0x34c) returned 0x1
	[0142.720] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1bef, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.720] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0142.720] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0142.720] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0142.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0142.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0142.721] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.721] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.721] CloseHandle (hObject=0x33c) returned 1
	[0142.722] CloseHandle (hObject=0x34c) returned 1
	[0142.722] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\chromecast_logo_grey.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1
	[0142.735] SetEvent (hEvent=0x320) returned 1
	[0142.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0142.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0142.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0142.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8368d2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83694820, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0142.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.html", cAlternateFileName="VIEW~1.HTM")) returned 1
	[0142.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945, dwReserved0=0x0, dwReserved1=0x0, cFileName="view.js", cAlternateFileName="")) returned 1
	[0142.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0142.736] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0142.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0142.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0142.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0142.737] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0142.737] WriteFile (in: hFile=0x34c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0142.740] CloseHandle (hObject=0x34c) returned 1
	[0142.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.html"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8368fa00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368fa00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x174c)) returned 1
	[0142.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0142.741] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836884d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8368abe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1
	[0142.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0142.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788128 | out: pbBuffer=0x12788128) returned 1
	[0142.741] ReadFile (in: hFile=0x34c, lpBuffer=0x12956000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12956000*, lpNumberOfBytesRead=0x124f5d1c*=0x3b, lpOverlapped=0x0) returned 1
	[0142.742] GetFileType (hFile=0x34c) returned 0x1
	[0142.742] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.742] WriteFile (in: hFile=0x34c, lpBuffer=0x1240c180*, nNumberOfBytesToWrite=0x3b, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1240c180*, lpNumberOfBytesWritten=0x124f5d00*=0x3b, lpOverlapped=0x124f5d0c) returned 1
	[0142.742] GetFileType (hFile=0x34c) returned 0x1
	[0142.742] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x3b, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0142.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0142.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0142.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881e0 | out: pbBuffer=0x127881e0) returned 1
	[0142.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0142.743] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.743] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.743] CloseHandle (hObject=0x33c) returned 1
	[0142.744] CloseHandle (hObject=0x34c) returned 1
	[0142.744] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\setup.html.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945)) returned 1
	[0142.749] SetEvent (hEvent=0x320) returned 1
	[0142.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\common.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83696f30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83699640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc878)) returned 1
	[0142.749] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0142.749] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83694820, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83694820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x945)) returned 1
	[0142.750] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0142.750] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881f8 | out: pbBuffer=0x127881f8) returned 1
	[0142.750] ReadFile (in: hFile=0x34c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f5d1c*=0x945, lpOverlapped=0x0) returned 1
	[0142.824] SetEvent (hEvent=0xa0) returned 1
	[0142.824] GetFileType (hFile=0x34c) returned 0x1
	[0142.824] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.824] WriteFile (in: hFile=0x34c, lpBuffer=0x12644a80*, nNumberOfBytesToWrite=0x945, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12644a80*, lpNumberOfBytesWritten=0x124f5d00*=0x945, lpOverlapped=0x124f5d0c) returned 1
	[0142.824] GetFileType (hFile=0x34c) returned 0x1
	[0142.825] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x945, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0142.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0142.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0142.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127883b0 | out: pbBuffer=0x127883b0) returned 1
	[0142.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0142.825] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.825] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.826] CloseHandle (hObject=0x33c) returned 1
	[0142.826] CloseHandle (hObject=0x34c) returned 1
	[0142.826] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cloud_route_details\\view.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.827] SetEvent (hEvent=0x320) returned 1
	[0142.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0142.828] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x38a8)) returned 1
	[0142.828] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f6a0 | out: pbBuffer=0x1240f6a0) returned 1
	[0142.828] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127883c8 | out: pbBuffer=0x127883c8) returned 1
	[0142.828] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0142.828] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0142.829] SetEvent (hEvent=0x320) returned 1
	[0142.829] ReadFile (in: hFile=0x34c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f5d1c*=0x38a8, lpOverlapped=0x0) returned 1
	[0142.922] GetFileType (hFile=0x34c) returned 0x1
	[0142.922] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.922] WriteFile (in: hFile=0x34c, lpBuffer=0x12770000*, nNumberOfBytesToWrite=0x38a8, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12770000*, lpNumberOfBytesWritten=0x124f5d00*=0x38a8, lpOverlapped=0x124f5d0c) returned 1
	[0142.923] GetFileType (hFile=0x34c) returned 0x1
	[0142.923] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x38a8, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0142.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0142.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0142.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0142.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0142.923] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.923] WriteFile (in: hFile=0x348, lpBuffer=0x1262a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262a000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.924] CloseHandle (hObject=0x348) returned 1
	[0142.924] CloseHandle (hObject=0x34c) returned 1
	[0142.924] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0142.926] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b1ce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b43f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x46039)) returned 1
	[0142.926] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0142.926] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0142.926] ReadFile (in: hFile=0x34c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0143.129] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.140] GetFileType (hFile=0x34c) returned 0x1
	[0143.283] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.473] SetEvent (hEvent=0x80) returned 1
	[0143.473] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.473] WriteFile (in: hFile=0x34c, lpBuffer=0x128f8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x128f8000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0143.473] GetFileType (hFile=0x34c) returned 0x1
	[0143.474] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.474] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed281 | out: pbBuffer=0x124ed281) returned 1
	[0143.474] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed381 | out: pbBuffer=0x124ed381) returned 1
	[0143.474] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed481 | out: pbBuffer=0x124ed481) returned 1
	[0143.474] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127885f0 | out: pbBuffer=0x127885f0) returned 1
	[0143.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.474] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0143.474] WriteFile (in: hFile=0x33c, lpBuffer=0x12714000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12714000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.482] CloseHandle (hObject=0x33c) returned 1
	[0143.482] CloseHandle (hObject=0x34c) returned 1
	[0143.482] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\material_css_min.css.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.492] GetFileType (hFile=0x2cc) returned 0x1
	[0143.492] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.492] WriteFile (in: hFile=0x2cc, lpBuffer=0x12644a80*, nNumberOfBytesToWrite=0x941, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12644a80*, lpNumberOfBytesWritten=0x12429d00*=0x941, lpOverlapped=0x12429d0c) returned 1
	[0143.493] GetFileType (hFile=0x2cc) returned 0x1
	[0143.493] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x941, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.493] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0143.493] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0143.493] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0143.493] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d8 | out: pbBuffer=0x1251e0d8) returned 1
	[0143.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.493] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.493] WriteFile (in: hFile=0x34c, lpBuffer=0x12714500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12714500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.494] CloseHandle (hObject=0x34c) returned 1
	[0143.494] CloseHandle (hObject=0x2cc) returned 1
	[0143.494] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9)) returned 1
	[0143.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000)) returned 1
	[0143.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f)) returned 1
	[0143.510] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0143.511] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0143.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000)) returned 1
	[0143.512] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e260 | out: pbBuffer=0x1252e260) returned 1
	[0143.512] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e100 | out: pbBuffer=0x1251e100) returned 1
	[0143.512] ReadFile (in: hFile=0x2cc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x19000, lpOverlapped=0x0) returned 1
	[0143.536] GetFileType (hFile=0x2cc) returned 0x1
	[0143.536] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.536] WriteFile (in: hFile=0x2cc, lpBuffer=0x12938000*, nNumberOfBytesToWrite=0x19000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12938000*, lpNumberOfBytesWritten=0x124f5d00*=0x19000, lpOverlapped=0x124f5d0c) returned 1
	[0143.536] GetFileType (hFile=0x2cc) returned 0x1
	[0143.536] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x19000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.536] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0143.537] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0143.537] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0143.537] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e538 | out: pbBuffer=0x1251e538) returned 1
	[0143.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0143.537] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0143.537] WriteFile (in: hFile=0x348, lpBuffer=0x12714a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12714a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.538] CloseHandle (hObject=0x348) returned 1
	[0143.581] CloseHandle (hObject=0x2cc) returned 1
	[0143.581] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.650] SetEvent (hEvent=0x80) returned 1
	[0143.650] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.651] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.651] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0143.651] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0143.651] ReadFile (in: hFile=0x33c, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.651] CloseHandle (hObject=0x33c) returned 1
	[0143.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0143.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0143.660] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0143.660] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9048b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage", cAlternateFileName="CHROME~1.LOC")) returned 1
	[0143.660] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x904b1a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal", cAlternateFileName="CHROME~2.LOC")) returned 1
	[0143.660] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0143.660] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0143.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0143.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0143.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.664] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0143.664] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0143.665] CloseHandle (hObject=0x33c) returned 1
	[0143.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9048b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0143.667] SetEvent (hEvent=0x80) returned 1
	[0143.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x904b1a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.670] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9048b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0143.670] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0143.670] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744320 | out: pbBuffer=0x12744320) returned 1
	[0143.670] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x3000, lpOverlapped=0x0) returned 1
	[0143.677] GetFileType (hFile=0x33c) returned 0x1
	[0143.677] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.677] WriteFile (in: hFile=0x33c, lpBuffer=0x12600000*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12600000*, lpNumberOfBytesWritten=0x12429d00*=0x3000, lpOverlapped=0x12429d0c) returned 1
	[0143.677] GetFileType (hFile=0x33c) returned 0x1
	[0143.677] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.677] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0143.678] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0143.678] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0143.678] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127443f8 | out: pbBuffer=0x127443f8) returned 1
	[0143.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.678] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.678] WriteFile (in: hFile=0x34c, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.679] CloseHandle (hObject=0x34c) returned 1
	[0143.679] CloseHandle (hObject=0x33c) returned 1
	[0143.679] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.681] SetEvent (hEvent=0x80) returned 1
	[0143.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.682] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\chrome-extension_pkedcjkdefgpdelpbcmbmeomcjbeemfm_0.localstorage-journal"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90191d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x904b1a50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.682] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0143.682] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744430 | out: pbBuffer=0x12744430) returned 1
	[0143.682] ReadFile (in: hFile=0x33c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.682] CloseHandle (hObject=0x33c) returned 1
	[0143.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1
	[0143.686] SetEvent (hEvent=0x80) returned 1
	[0143.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.689] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1
	[0143.689] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322c0 | out: pbBuffer=0x127322c0) returned 1
	[0143.689] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744440 | out: pbBuffer=0x12744440) returned 1
	[0143.689] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0143.694] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.694] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0143.694] SetEvent (hEvent=0xa0) returned 1
	[0143.694] SetEvent (hEvent=0x80) returned 1
	[0143.694] ReadFile (in: hFile=0x33c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x12429d1c*=0x4800, lpOverlapped=0x0) returned 1
	[0143.699] GetFileType (hFile=0x33c) returned 0x1
	[0143.700] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.700] WriteFile (in: hFile=0x33c, lpBuffer=0x1271c000*, nNumberOfBytesToWrite=0x4800, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1271c000*, lpNumberOfBytesWritten=0x12429d00*=0x4800, lpOverlapped=0x12429d0c) returned 1
	[0143.700] GetFileType (hFile=0x33c) returned 0x1
	[0143.700] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4800, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.700] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0143.700] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0143.700] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0143.701] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744588 | out: pbBuffer=0x12744588) returned 1
	[0143.701] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.701] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.701] WriteFile (in: hFile=0x34c, lpBuffer=0x1263a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.701] CloseHandle (hObject=0x34c) returned 1
	[0143.701] CloseHandle (hObject=0x33c) returned 1
	[0143.701] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.704] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732580 | out: pbBuffer=0x12732580) returned 1
	[0143.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127445b0 | out: pbBuffer=0x127445b0) returned 1
	[0143.705] ReadFile (in: hFile=0x33c, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.705] CloseHandle (hObject=0x33c) returned 1
	[0143.705] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.722] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.740] SetEvent (hEvent=0x80) returned 1
	[0143.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.742] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.755] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.795] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.863] SetEvent (hEvent=0x70) returned 1
	[0143.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.864] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0143.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43)) returned 1
	[0143.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0143.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0143.865] ReadFile (in: hFile=0x33c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f5d1c*=0x8b43, lpOverlapped=0x0) returned 1
	[0143.906] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0143.907] SetEvent (hEvent=0x70) returned 1
	[0143.907] GetFileType (hFile=0x33c) returned 0x1
	[0143.907] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.907] WriteFile (in: hFile=0x33c, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0x8b43, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x124f5d00*=0x8b43, lpOverlapped=0x124f5d0c) returned 1
	[0143.907] GetFileType (hFile=0x33c) returned 0x1
	[0143.907] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x8b43, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0143.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0143.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0143.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0143.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.908] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0143.909] WriteFile (in: hFile=0x34c, lpBuffer=0x125ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ee000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.909] CloseHandle (hObject=0x34c) returned 1
	[0143.978] CloseHandle (hObject=0x33c) returned 1
	[0144.114] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0145.664] SetEvent (hEvent=0xa0) returned 1
	[0145.664] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0146.050] SetEvent (hEvent=0x80) returned 1
	[0146.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.051] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0146.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0146.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744188 | out: pbBuffer=0x12744188) returned 1
	[0146.052] ReadFile (in: hFile=0x344, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f5d1c*=0x0, lpOverlapped=0x0) returned 1
	[0146.052] CloseHandle (hObject=0x344) returned 1
	[0146.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.052] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0146.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8448d2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732080 | out: pbBuffer=0x12732080) returned 1
	[0146.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744198 | out: pbBuffer=0x12744198) returned 1
	[0146.052] ReadFile (in: hFile=0x344, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f3d1c*=0x0, lpOverlapped=0x0) returned 1
	[0146.053] CloseHandle (hObject=0x344) returned 1
	[0146.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1
	[0146.125] SetEvent (hEvent=0x80) returned 1
	[0146.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d8c9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81984910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1
	[0146.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.127] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0146.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d8c9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81984910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.128] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127320a0 | out: pbBuffer=0x127320a0) returned 1
	[0146.128] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441a8 | out: pbBuffer=0x127441a8) returned 1
	[0146.128] ReadFile (in: hFile=0x344, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f3d1c*=0x0, lpOverlapped=0x0) returned 1
	[0146.128] CloseHandle (hObject=0x344) returned 1
	[0146.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.128] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0146.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1
	[0146.128] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127320c0 | out: pbBuffer=0x127320c0) returned 1
	[0146.128] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127442a8 | out: pbBuffer=0x127442a8) returned 1
	[0146.128] ReadFile (in: hFile=0x344, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f3d1c*=0x278, lpOverlapped=0x0) returned 1
	[0146.135] GetFileType (hFile=0x344) returned 0x1
	[0146.135] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.136] WriteFile (in: hFile=0x344, lpBuffer=0x127d4000*, nNumberOfBytesToWrite=0x278, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127d4000*, lpNumberOfBytesWritten=0x124f3d00*=0x278, lpOverlapped=0x124f3d0c) returned 1
	[0146.136] GetFileType (hFile=0x344) returned 0x1
	[0146.136] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x278, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0146.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0146.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0146.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127443c0 | out: pbBuffer=0x127443c0) returned 1
	[0146.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0146.137] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0146.137] WriteFile (in: hFile=0x2cc, lpBuffer=0x125f6000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f6000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0146.137] CloseHandle (hObject=0x2cc) returned 1
	[0146.137] CloseHandle (hObject=0x344) returned 1
	[0146.137] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0146.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1
	[0146.165] SetEvent (hEvent=0xa0) returned 1
	[0146.165] SetEvent (hEvent=0x2e8) returned 1
	[0146.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0146.208] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0146.208] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.208] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1
	[0146.208] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0146.208] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0146.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0146.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0146.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0146.227] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0146.227] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0146.228] CloseHandle (hObject=0x2cc) returned 1
	[0146.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0146.230] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0146.231] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.231] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1
	[0146.231] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 1
	[0146.232] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0146.232] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0146.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0146.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0146.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0146.248] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0146.248] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0146.249] CloseHandle (hObject=0x33c) returned 1
	[0146.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28df6)) returned 1
	[0146.250] SetEvent (hEvent=0x2e8) returned 1
	[0146.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0146.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000)) returned 1
	[0146.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0146.271] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0146.290] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.291] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0146.291] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x804795c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
	[0146.291] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
	[0146.291] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9ab9e110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
	[0146.291] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
	[0146.291] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0146.291] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0146.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0146.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0146.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0146.294] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0146.294] WriteFile (in: hFile=0x2cc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0146.295] CloseHandle (hObject=0x2cc) returned 1
	[0146.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x804795c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0146.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9ab9e110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1
	[0146.357] SetEvent (hEvent=0xa0) returned 1
	[0146.357] SetEvent (hEvent=0x80) returned 1
	[0146.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0146.406] SetEvent (hEvent=0xa0) returned 1
	[0146.406] SetEvent (hEvent=0x80) returned 1
	[0146.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0146.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.418] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0146.790] SetEvent (hEvent=0x30c) returned 1
	[0146.790] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0147.006] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0147.076] SetEvent (hEvent=0x320) returned 1
	[0147.076] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0147.077] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0147.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1
	[0147.077] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0147.077] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0147.077] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1276bd1c*=0x1400, lpOverlapped=0x0) returned 1
	[0147.129] GetFileType (hFile=0x33c) returned 0x1
	[0147.130] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.130] WriteFile (in: hFile=0x33c, lpBuffer=0x1250d500*, nNumberOfBytesToWrite=0x1400, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x1250d500*, lpNumberOfBytesWritten=0x1276bd00*=0x1400, lpOverlapped=0x1276bd0c) returned 1
	[0147.130] GetFileType (hFile=0x33c) returned 0x1
	[0147.130] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1400, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.130] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0147.130] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0147.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0147.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103d0 | out: pbBuffer=0x124103d0) returned 1
	[0147.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0147.131] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0147.131] WriteFile (in: hFile=0x340, lpBuffer=0x1262e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262e000*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0147.131] CloseHandle (hObject=0x340) returned 1
	[0147.131] CloseHandle (hObject=0x33c) returned 1
	[0147.131] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0147.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0147.142] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0147.142] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0147.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103f8 | out: pbBuffer=0x124103f8) returned 1
	[0147.143] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f1d1c*=0x0, lpOverlapped=0x0) returned 1
	[0147.143] CloseHandle (hObject=0x33c) returned 1
	[0147.143] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0147.321] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0147.351] SetEvent (hEvent=0x30c) returned 1
	[0147.351] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0147.362] SetEvent (hEvent=0x320) returned 1
	[0147.362] SetEvent (hEvent=0x2e8) returned 1
	[0147.362] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0147.363] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0147.364] SetEvent (hEvent=0x320) returned 1
	[0147.364] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0147.364] SetEvent (hEvent=0x320) returned 1
	[0147.364] SetEvent (hEvent=0x80) returned 1
	[0147.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.365] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.373] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.373] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="FeedsStore.feedsdb-ms", cAlternateFileName="FEEDSS~1.FEE")) returned 1
	[0147.373] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Feeds~", cAlternateFileName="MICROS~1")) returned 1
	[0147.373] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~", cAlternateFileName="{5588A~1")) returned 1
	[0147.373] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.373] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0147.378] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0147.378] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0147.379] CloseHandle (hObject=0x33c) returned 1
	[0147.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0147.381] SetEvent (hEvent=0x80) returned 1
	[0147.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.382] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0148.104] SetEvent (hEvent=0xa0) returned 1
	[0148.104] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee3456d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0148.104] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Home~.feed-ms", cAlternateFileName="MICROS~2.FEE")) returned 1
	[0148.104] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft at Work~.feed-ms", cAlternateFileName="MICROS~1.FEE")) returned 1
	[0148.104] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News~.feed-ms", cAlternateFileName="MSNBCN~1.FEE")) returned 1
	[0148.104] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0148.105] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0148.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0148.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0148.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0148.108] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0148.108] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0148.109] CloseHandle (hObject=0x33c) returned 1
	[0148.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0148.110] SetEvent (hEvent=0x30c) returned 1
	[0148.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0148.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0148.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0148.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0148.112] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0148.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0148.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebSlices~", cAlternateFileName="WEBSLI~1")) returned 1
	[0148.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0148.113] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0148.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0148.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0148.113] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0148.114] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0148.114] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0148.115] CloseHandle (hObject=0x33c) returned 1
	[0148.116] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0148.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0148.116] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0148.116] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d69eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0148.117] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Suggested Sites~.feed-ms", cAlternateFileName="SUGGES~1.FEE")) returned 1
	[0148.117] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery~.feed-ms", cAlternateFileName="WEBSLI~1.FEE")) returned 1
	[0148.117] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0148.117] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0148.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0148.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0148.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0149.742] SetEvent (hEvent=0xa0) returned 1
	[0149.742] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0149.742] WriteFile (in: hFile=0x340, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0149.743] CloseHandle (hObject=0x340) returned 1
	[0149.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0149.780] SetEvent (hEvent=0x320) returned 1
	[0149.780] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0149.853] SetEvent (hEvent=0x320) returned 1
	[0149.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0149.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0149.910] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0149.962] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0149.962] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1NBUR4HR", cAlternateFileName="")) returned 1
	[0149.962] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ASVN7J7", cAlternateFileName="")) returned 1
	[0149.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D68G7BIJ", cAlternateFileName="")) returned 1
	[0149.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0149.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0149.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KQMHSVKD", cAlternateFileName="")) returned 1
	[0149.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0149.963] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0149.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0149.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0149.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0149.967] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0149.967] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0149.968] CloseHandle (hObject=0x2cc) returned 1
	[0149.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0149.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0149.969] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0149.969] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0149.970] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0149.970] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0149.970] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0149.970] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0149.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0149.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0149.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0149.972] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0149.972] WriteFile (in: hFile=0x2cc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0149.973] CloseHandle (hObject=0x2cc) returned 1
	[0149.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0149.974] SetEvent (hEvent=0x30c) returned 1
	[0149.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0150.038] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0150.310] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0151.033] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0152.937] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0153.655] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0154.267] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0154.364] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0154.418] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0154.615] SetEvent (hEvent=0x80) returned 1
	[0154.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0154.617] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12463d0c | out: lpMode=0x12463d0c) returned 0
	[0154.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x12463ad0 | out: lpFileInformation=0x12463ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1
	[0154.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0154.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0154.617] ReadFile (in: hFile=0x2cc, lpBuffer=0x125b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12463d1c, lpOverlapped=0x0 | out: lpBuffer=0x125b4000*, lpNumberOfBytesRead=0x12463d1c*=0x1200, lpOverlapped=0x0) returned 1
	[0154.664] GetFileType (hFile=0x2cc) returned 0x1
	[0154.664] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12463ce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.664] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x12463d00, lpOverlapped=0x12463d0c | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x12463d00*=0x1200, lpOverlapped=0x12463d0c) returned 1
	[0154.664] GetFileType (hFile=0x2cc) returned 0x1
	[0154.664] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x1200, lpNewFilePointer=0x0, dwMoveMethod=0x12463ce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.665] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0154.665] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0154.665] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0154.665] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0154.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0154.665] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12463d0c | out: lpMode=0x12463d0c) returned 0
	[0154.666] WriteFile (in: hFile=0x340, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12463d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x12463d0c*=0x276, lpOverlapped=0x0) returned 1
	[0154.666] CloseHandle (hObject=0x340) returned 1
	[0154.703] CloseHandle (hObject=0x2cc) returned 1
	[0154.850] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.634] SetEvent (hEvent=0x2e8) returned 1
	[0155.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0155.635] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12463d0c | out: lpMode=0x12463d0c) returned 0
	[0155.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x12463ad0 | out: lpFileInformation=0x12463ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1
	[0155.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c800 | out: pbBuffer=0x1244c800) returned 1
	[0155.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0155.635] ReadFile (in: hFile=0x344, lpBuffer=0x128f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12463d1c, lpOverlapped=0x0 | out: lpBuffer=0x128f8000*, lpNumberOfBytesRead=0x12463d1c*=0x23f4, lpOverlapped=0x0) returned 1
	[0155.648] GetFileType (hFile=0x344) returned 0x1
	[0155.648] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12463ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.648] WriteFile (in: hFile=0x344, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0x23f4, lpNumberOfBytesWritten=0x12463d00, lpOverlapped=0x12463d0c | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x12463d00*=0x23f4, lpOverlapped=0x12463d0c) returned 1
	[0155.649] GetFileType (hFile=0x344) returned 0x1
	[0155.649] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x23f4, lpNewFilePointer=0x0, dwMoveMethod=0x12463ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.649] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0155.649] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0155.649] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0155.649] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788450 | out: pbBuffer=0x12788450) returned 1
	[0155.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0155.650] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12463d0c | out: lpMode=0x12463d0c) returned 0
	[0155.650] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12463d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12463d0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.650] CloseHandle (hObject=0x2cc) returned 1
	[0155.650] CloseHandle (hObject=0x344) returned 1
	[0155.650] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.652] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0155.684] SetEvent (hEvent=0x320) returned 1
	[0155.684] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0155.730] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0155.731] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0155.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0155.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0155.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0155.732] ReadFile (in: hFile=0x2cc, lpBuffer=0x125b0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x125b0000*, lpNumberOfBytesRead=0x12605d1c*=0x414, lpOverlapped=0x0) returned 1
	[0155.874] GetFileType (hFile=0x2cc) returned 0x1
	[0155.874] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.874] WriteFile (in: hFile=0x2cc, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x12605d00*=0x414, lpOverlapped=0x12605d0c) returned 1
	[0155.875] GetFileType (hFile=0x2cc) returned 0x1
	[0155.875] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x414, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.875] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0155.875] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0155.875] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0155.875] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0155.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0155.876] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0155.876] WriteFile (in: hFile=0x33c, lpBuffer=0x1263c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c000*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.876] CloseHandle (hObject=0x33c) returned 1
	[0155.886] CloseHandle (hObject=0x2cc) returned 1
	[0155.896] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.934] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0155.954] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0155.979] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0155.994] SetEvent (hEvent=0x2f4) returned 1
	[0155.994] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.008] SetEvent (hEvent=0x30c) returned 1
	[0156.009] SetEvent (hEvent=0x68) returned 1
	[0156.009] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0156.016] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.017] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0156.017] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb30, ulCount=0x10, ulNumEntriesRemoved=0x3388fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb30, ulNumEntriesRemoved=0x3388fb14) returned 0
	[0156.017] SetEvent (hEvent=0x30c) returned 1
	[0156.017] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0156.019] SetEvent (hEvent=0x2e8) returned 1
	[0156.019] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.243] SetEvent (hEvent=0x320) returned 1
	[0156.243] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.245] SetEvent (hEvent=0x320) returned 1
	[0156.245] SwitchToThread () returned 1
	[0156.245] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.255] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0156.266] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1
	[0156.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0156.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0156.267] ReadFile (in: hFile=0x2cc, lpBuffer=0x1258e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x1258e000*, lpNumberOfBytesRead=0x12605d1c*=0x410, lpOverlapped=0x0) returned 1
	[0156.271] GetFileType (hFile=0x2cc) returned 0x1
	[0156.271] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.271] WriteFile (in: hFile=0x2cc, lpBuffer=0x125f4000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x125f4000*, lpNumberOfBytesWritten=0x12605d00*=0x410, lpOverlapped=0x12605d0c) returned 1
	[0156.271] GetFileType (hFile=0x2cc) returned 0x1
	[0156.272] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x410, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.272] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0156.272] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0156.272] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0156.272] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0156.272] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.272] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.274] WriteFile (in: hFile=0x344, lpBuffer=0x12626000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626000*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.274] CloseHandle (hObject=0x344) returned 1
	[0156.276] CloseHandle (hObject=0x2cc) returned 1
	[0156.277] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.319] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.323] SetEvent (hEvent=0x2e8) returned 1
	[0156.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.324] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1
	[0156.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e6c0 | out: pbBuffer=0x1240e6c0) returned 1
	[0156.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103f0 | out: pbBuffer=0x124103f0) returned 1
	[0156.325] ReadFile (in: hFile=0x340, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1242bd1c*=0x427, lpOverlapped=0x0) returned 1
	[0156.330] GetFileType (hFile=0x340) returned 0x1
	[0156.330] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.330] WriteFile (in: hFile=0x340, lpBuffer=0x127ea480*, nNumberOfBytesToWrite=0x427, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127ea480*, lpNumberOfBytesWritten=0x1242bd00*=0x427, lpOverlapped=0x1242bd0c) returned 1
	[0156.331] GetFileType (hFile=0x340) returned 0x1
	[0156.331] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x427, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0156.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0156.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0156.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0156.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.332] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.332] WriteFile (in: hFile=0x344, lpBuffer=0x127ee500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.332] CloseHandle (hObject=0x344) returned 1
	[0156.337] CloseHandle (hObject=0x340) returned 1
	[0156.338] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.456] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.472] SetEvent (hEvent=0x2e8) returned 1
	[0156.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.474] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7aab700, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7aab700, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7ad1860, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1
	[0156.474] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0156.474] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744388 | out: pbBuffer=0x12744388) returned 1
	[0156.474] ReadFile (in: hFile=0x344, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0156.499] SetEvent (hEvent=0x320) returned 1
	[0156.499] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0156.502] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.502] SetEvent (hEvent=0x30c) returned 1
	[0156.503] GetFileType (hFile=0x344) returned 0x1
	[0156.503] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124dbce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.503] WriteFile (in: hFile=0x344, lpBuffer=0x12918000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124dbd00, lpOverlapped=0x124dbd0c | out: lpBuffer=0x12918000*, lpNumberOfBytesWritten=0x124dbd00*=0x20000, lpOverlapped=0x124dbd0c) returned 1
	[0156.504] GetFileType (hFile=0x344) returned 0x1
	[0156.504] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124dbce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.504] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0156.504] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0156.504] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0156.505] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0156.505] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0156.505] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.505] WriteFile (in: hFile=0x2cc, lpBuffer=0x125daa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125daa00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.505] CloseHandle (hObject=0x2cc) returned 1
	[0156.505] CloseHandle (hObject=0x344) returned 1
	[0156.505] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\14.0\\OfficeFileCache\\FSD-CNRY.FSD.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\14.0\\officefilecache\\fsd-cnry.fsd.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.508] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0156.509] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.509] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0156.511] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.511] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb30, ulCount=0x10, ulNumEntriesRemoved=0x3388fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb30, ulNumEntriesRemoved=0x3388fb14) returned 0
	[0156.511] SetEvent (hEvent=0x2f4) returned 1
	[0156.511] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0156.512] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.513] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.513] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.513] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0156.513] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1
	[0156.513] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.513] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.516] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0156.516] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0156.518] CloseHandle (hObject=0x33c) returned 1
	[0156.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.519] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.519] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.519] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\System\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\system\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.521] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0156.521] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0156.522] CloseHandle (hObject=0x33c) returned 1
	[0156.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.524] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.524] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4f780d90, ftLastAccessTime.dwHighDateTime=0x1d2dda2, ftLastWriteTime.dwLowDateTime=0x4f780d90, ftLastWriteTime.dwHighDateTime=0x1d2dda2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.524] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.524] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\Groove\\User\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\groove\\user\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.526] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0156.526] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0156.527] CloseHandle (hObject=0x33c) returned 1
	[0156.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.530] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb72310, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.sig", cAlternateFileName="350DB9~1.SIG")) returned 1
	[0156.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="350db95df4cbd94b2a1c300510e12e11.xml", cAlternateFileName="350DB9~1.XML")) returned 1
	[0156.531] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.531] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.535] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0156.535] WriteFile (in: hFile=0x33c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0156.536] CloseHandle (hObject=0x33c) returned 1
	[0156.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1
	[0156.539] SetEvent (hEvent=0x2f4) returned 1
	[0156.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef)) returned 1
	[0156.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.544] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="mapisvc.inf", cAlternateFileName="")) returned 1
	[0156.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.sharing.xml.obi", cAlternateFileName="OUTLOO~1.OBI")) returned 1
	[0156.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamCache", cAlternateFileName="ROAMCA~1")) returned 1
	[0156.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae80e80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="~last~.sharing.xml.obi", cAlternateFileName="~LAST~~1.OBI")) returned 1
	[0156.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.562] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.564] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.564] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.566] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0156.566] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0156.573] CloseHandle (hObject=0x33c) returned 1
	[0156.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xb9)) returned 1
	[0156.575] SetEvent (hEvent=0x2f4) returned 1
	[0156.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x609dab00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat", cAlternateFileName="STREAM~1.DAT")) returned 1
	[0156.586] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.586] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.589] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0156.589] WriteFile (in: hFile=0x344, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0156.591] CloseHandle (hObject=0x344) returned 1
	[0156.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\RoamCache\\Stream_ContactPrefs_2_F230E11936B7D740A008FFC660E83C71.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\roamcache\\stream_contactprefs_2_f230e11936b7d740a008ffc660e83c71.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x609dab00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x609dab00, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x60a26dc0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0156.592] SetEvent (hEvent=0x80) returned 1
	[0156.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462)) returned 1
	[0156.608] SetEvent (hEvent=0xa0) returned 1
	[0156.608] SetEvent (hEvent=0x2f4) returned 1
	[0156.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\~last~.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\~last~.sharing.xml.obi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ae80e80, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x5c4d2d00, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xb9)) returned 1
	[0156.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.642] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.642] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.642] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.642] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.642] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Publisher\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\publisher\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.644] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0156.644] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0156.648] CloseHandle (hObject=0x33c) returned 1
	[0156.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.653] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.653] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.653] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.653] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\TaskSchedulerConfig\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\taskschedulerconfig\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.657] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0156.657] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0156.664] CloseHandle (hObject=0x33c) returned 1
	[0156.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.669] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.669] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="content14.dat", cAlternateFileName="CONTEN~1.DAT")) returned 1
	[0156.669] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbs.dat", cAlternateFileName="")) returned 1
	[0156.669] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.669] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.673] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0156.673] WriteFile (in: hFile=0x33c, lpBuffer=0x127d0000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x127d0000*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0156.675] CloseHandle (hObject=0x33c) returned 1
	[0156.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0)) returned 1
	[0156.678] SetEvent (hEvent=0x30c) returned 1
	[0156.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400)) returned 1
	[0156.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0156.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.680] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x666948e0, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x666948e0, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x666948e0, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1024", cAlternateFileName="")) returned 1
	[0156.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34d50a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x34ef3970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x34ef3970, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0156.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x926116d0, ftLastAccessTime.dwHighDateTime=0x1d30596, ftLastWriteTime.dwLowDateTime=0x926116d0, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1
	[0156.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8deb4c00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8deb4c00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1
	[0156.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33af74c0, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x33af74c0, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer", cAlternateFileName="")) returned 1
	[0156.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1
	[0156.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0156.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1
	[0156.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe7138400, ftLastAccessTime.dwHighDateTime=0x1d2e625, ftLastWriteTime.dwLowDateTime=0xe7138400, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0156.680] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd8d1fc80, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0156.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8f3fc040, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8f3fc040, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat", cAlternateFileName="")) returned 1
	[0156.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f3d5ee0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG1", cAlternateFileName="USRCLA~2.LOG")) returned 1
	[0156.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9c5705f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG2", cAlternateFileName="USRCLA~1.LOG")) returned 1
	[0156.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28ea2560, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ea2560, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x962222ec, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf", cAlternateFileName="USRCLA~1.BLF")) returned 1
	[0156.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="USRCLA~2.REG")) returned 1
	[0156.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="USRCLA~1.REG")) returned 1
	[0156.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1
	[0156.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa734ff0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xa734ff0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xa734ff0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 1
	[0156.681] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.681] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.692] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e7c400, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e7c400, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b9ed580, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9ed580, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e562a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e562a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e30140, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e30140, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28e09fe0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28e09fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0156.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b9a12c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0156.699] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.699] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.703] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.703] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.704] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.704] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1
	[0156.704] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.704] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.707] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.707] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.708] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.708] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0156.708] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1
	[0156.708] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.708] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.713] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.714] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe80ff230, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.714] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.714] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft Help\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft help\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.738] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.768] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.958] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0157.081] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0157.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7eaf750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa60b)) returned 1
	[0157.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0157.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0157.081] ReadFile (in: hFile=0x340, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f3d1c*=0xa60b, lpOverlapped=0x0) returned 1
	[0157.099] GetFileType (hFile=0x340) returned 0x1
	[0157.099] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.099] WriteFile (in: hFile=0x340, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0xa60b, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x124f3d00*=0xa60b, lpOverlapped=0x124f3d0c) returned 1
	[0157.099] GetFileType (hFile=0x340) returned 0x1
	[0157.099] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xa60b, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.099] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0157.100] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0157.100] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0157.100] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0f0 | out: pbBuffer=0x1251e0f0) returned 1
	[0157.100] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0157.100] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0157.100] WriteFile (in: hFile=0x33c, lpBuffer=0x12570000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12570000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.101] CloseHandle (hObject=0x33c) returned 1
	[0157.101] CloseHandle (hObject=0x340) returned 1
	[0157.101] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\F6\\CBD4Dd01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\f6\\cbd4dd01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.105] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.153] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.227] SetEvent (hEvent=0x2f4) returned 1
	[0157.227] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.230] SetEvent (hEvent=0x30c) returned 1
	[0157.230] SetEvent (hEvent=0x80) returned 1
	[0157.230] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.284] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125dfd0c | out: lpMode=0x125dfd0c) returned 0
	[0157.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01"), fInfoLevelId=0x0, lpFileInformation=0x125dfad0 | out: lpFileInformation=0x125dfad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e8d330, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e8d330, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e8d330, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x404f)) returned 1
	[0157.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0157.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0157.285] ReadFile (in: hFile=0x344, lpBuffer=0x1258e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125dfd1c, lpOverlapped=0x0 | out: lpBuffer=0x1258e000*, lpNumberOfBytesRead=0x125dfd1c*=0x404f, lpOverlapped=0x0) returned 1
	[0157.648] GetFileType (hFile=0x344) returned 0x1
	[0157.648] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125dfce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.648] WriteFile (in: hFile=0x344, lpBuffer=0x126f4000*, nNumberOfBytesToWrite=0x404f, lpNumberOfBytesWritten=0x125dfd00, lpOverlapped=0x125dfd0c | out: lpBuffer=0x126f4000*, lpNumberOfBytesWritten=0x125dfd00*=0x404f, lpOverlapped=0x125dfd0c) returned 1
	[0157.648] GetFileType (hFile=0x344) returned 0x1
	[0157.648] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x404f, lpNewFilePointer=0x0, dwMoveMethod=0x125dfce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0157.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0157.649] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0157.649] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0157.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0157.649] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125dfd0c | out: lpMode=0x125dfd0c) returned 0
	[0157.649] WriteFile (in: hFile=0x34c, lpBuffer=0x125f2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125dfd0c, lpOverlapped=0x0 | out: lpBuffer=0x125f2000*, lpNumberOfBytesWritten=0x125dfd0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.649] CloseHandle (hObject=0x34c) returned 1
	[0157.649] CloseHandle (hObject=0x344) returned 1
	[0157.649] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\E0\\F17B2d01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\e0\\f17b2d01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.653] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.653] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.653] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="69", cAlternateFileName="")) returned 1
	[0157.653] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.653] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.654] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.655] WriteFile (in: hFile=0x344, lpBuffer=0x12580000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12580000*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.656] CloseHandle (hObject=0x344) returned 1
	[0157.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.656] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.657] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.657] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb80063b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10d22, dwReserved0=0x0, dwReserved1=0x0, cFileName="885EEd01", cAlternateFileName="")) returned 1
	[0157.657] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.657] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.659] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0157.659] WriteFile (in: hFile=0x344, lpBuffer=0x12581300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12581300*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0157.660] CloseHandle (hObject=0x344) returned 1
	[0157.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\E\\69\\885EEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\e\\69\\885eed01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb80063b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10d22)) returned 1
	[0157.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.713] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.713] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.713] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="23", cAlternateFileName="")) returned 1
	[0157.713] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="F0", cAlternateFileName="")) returned 1
	[0157.713] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.713] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.715] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0157.715] WriteFile (in: hFile=0x2cc, lpBuffer=0x12582600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12582600*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0157.716] CloseHandle (hObject=0x2cc) returned 1
	[0157.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f6de30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fe0250, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf888, dwReserved0=0x0, dwReserved1=0x0, cFileName="7E0FEd01", cAlternateFileName="")) returned 1
	[0157.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.717] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.719] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0157.719] WriteFile (in: hFile=0x2cc, lpBuffer=0x12583900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12583900*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0157.756] CloseHandle (hObject=0x2cc) returned 1
	[0157.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\23\\7E0FEd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\23\\7e0fed01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f6de30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f6de30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fe0250, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf888)) returned 1
	[0157.763] SetEvent (hEvent=0x68) returned 1
	[0157.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82329dd0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x823c2350, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa80f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ECB2Dd01", cAlternateFileName="")) returned 1
	[0157.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.773] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.773] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0157.782] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0157.782] WriteFile (in: hFile=0x350, lpBuffer=0x12584c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12584c00*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0157.791] CloseHandle (hObject=0x350) returned 1
	[0157.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\F\\F0\\ECB2Dd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\f\\f0\\ecb2dd01"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82329dd0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82329dd0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x823c2350, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa80f)) returned 1
	[0157.795] SetEvent (hEvent=0x80) returned 1
	[0157.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1
	[0157.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_002_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_002_"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851e0d90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1
	[0157.802] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.812] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.813] SetEvent (hEvent=0x68) returned 1
	[0157.813] SetEvent (hEvent=0x2f4) returned 1
	[0157.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1
	[0157.817] SetEvent (hEvent=0x2f4) returned 1
	[0157.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_MAP_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_map_"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8535db50, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2114)) returned 1
	[0157.822] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.873] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0158.611] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0158.624] SetEvent (hEvent=0x30c) returned 1
	[0158.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0158.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0158.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0158.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0158.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x825fd7f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x825fd7f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x825fd7f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.cache", cAlternateFileName="TEST-M~1.CAC")) returned 1
	[0158.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8234ff30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.pset", cAlternateFileName="TEST-M~1.PSE")) returned 1
	[0158.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82376090, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.sbstore", cAlternateFileName="TEST-M~1.SBS")) returned 1
	[0158.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82695d70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82695d70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82695d70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.cache", cAlternateFileName="TEST-P~1.CAC")) returned 1
	[0158.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x826bbed0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.pset", cAlternateFileName="TEST-P~1.PSE")) returned 1
	[0158.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82649ab0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82649ab0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.sbstore", cAlternateFileName="TEST-P~1.SBS")) returned 1
	[0158.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0158.641] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0158.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0158.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0158.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0158.646] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0158.646] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0158.648] CloseHandle (hObject=0x34c) returned 1
	[0158.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x825fd7f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x825fd7f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x825fd7f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1
	[0158.653] SetEvent (hEvent=0x30c) returned 1
	[0158.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8234ff30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0158.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0158.655] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0158.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x825fd7f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x825fd7f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x825fd7f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2c)) returned 1
	[0158.655] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e0c0 | out: pbBuffer=0x1252e0c0) returned 1
	[0158.655] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e050 | out: pbBuffer=0x1251e050) returned 1
	[0158.656] ReadFile (in: hFile=0x34c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1242bd1c*=0x2c, lpOverlapped=0x0) returned 1
	[0158.657] GetFileType (hFile=0x34c) returned 0x1
	[0158.657] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.658] WriteFile (in: hFile=0x34c, lpBuffer=0x1240a210*, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1240a210*, lpNumberOfBytesWritten=0x1242bd00*=0x2c, lpOverlapped=0x1242bd0c) returned 1
	[0158.658] GetFileType (hFile=0x34c) returned 0x1
	[0158.658] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x2c, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.658] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400901 | out: pbBuffer=0x12400901) returned 1
	[0158.658] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0158.658] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0158.659] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0158.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0158.659] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0158.659] WriteFile (in: hFile=0x348, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0158.659] CloseHandle (hObject=0x348) returned 1
	[0158.659] CloseHandle (hObject=0x34c) returned 1
	[0158.659] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.cache.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0158.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0158.663] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0158.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8234ff30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8234ff30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0158.663] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e320 | out: pbBuffer=0x1252e320) returned 1
	[0158.663] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e130 | out: pbBuffer=0x1251e130) returned 1
	[0158.663] ReadFile (in: hFile=0x34c, lpBuffer=0x12590000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12590000*, lpNumberOfBytesRead=0x1242bd1c*=0x10, lpOverlapped=0x0) returned 1
	[0158.665] GetFileType (hFile=0x34c) returned 0x1
	[0158.665] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.665] WriteFile (in: hFile=0x34c, lpBuffer=0x1251e140*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1251e140*, lpNumberOfBytesWritten=0x1242bd00*=0x10, lpOverlapped=0x1242bd0c) returned 1
	[0158.665] GetFileType (hFile=0x34c) returned 0x1
	[0158.665] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f01 | out: pbBuffer=0x12400f01) returned 1
	[0158.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401001 | out: pbBuffer=0x12401001) returned 1
	[0158.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401101 | out: pbBuffer=0x12401101) returned 1
	[0158.666] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0158.675] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0158.675] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb28, ulCount=0x10, ulNumEntriesRemoved=0x3388fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb28, ulNumEntriesRemoved=0x3388fb0c) returned 0
	[0158.675] SetEvent (hEvent=0xa0) returned 1
	[0158.675] SetEvent (hEvent=0x30c) returned 1
	[0158.675] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e698 | out: pbBuffer=0x1251e698) returned 1
	[0158.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0158.675] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0158.675] WriteFile (in: hFile=0x348, lpBuffer=0x1255a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1255a500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0158.676] CloseHandle (hObject=0x348) returned 1
	[0158.676] CloseHandle (hObject=0x34c) returned 1
	[0158.676] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.pset.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0158.679] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x0
	[0159.336] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0159.340] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.340] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x3388fb30, ulCount=0x10, ulNumEntriesRemoved=0x3388fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x3388fb30, ulNumEntriesRemoved=0x3388fb14) returned 0
	[0159.340] SetEvent (hEvent=0x68) returned 1
	[0159.340] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0x1) returned 0x102
	[0159.345] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0159.374] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0159.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82376090, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82376090, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82376090, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0159.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0159.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0159.374] ReadFile (in: hFile=0x350, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12429d1c*=0xe8, lpOverlapped=0x0) returned 1
	[0159.376] GetFileType (hFile=0x350) returned 0x1
	[0159.376] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.376] WriteFile (in: hFile=0x350, lpBuffer=0x12560000*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12560000*, lpNumberOfBytesWritten=0x12429d00*=0xe8, lpOverlapped=0x12429d0c) returned 1
	[0159.376] GetFileType (hFile=0x350) returned 0x1
	[0159.376] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.376] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0159.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0159.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0159.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0159.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0159.377] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0159.377] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.377] CloseHandle (hObject=0x2cc) returned 1
	[0159.378] CloseHandle (hObject=0x350) returned 1
	[0159.378] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-malware-simple.sbstore.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0159.382] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82649ab0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x82649ab0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x82649ab0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe8)) returned 1
	[0159.382] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0159.382] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0159.382] ReadFile (in: hFile=0x350, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f5d1c*=0xe8, lpOverlapped=0x0) returned 1
	[0159.384] GetFileType (hFile=0x350) returned 0x1
	[0159.384] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.384] WriteFile (in: hFile=0x350, lpBuffer=0x125600f0*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125600f0*, lpNumberOfBytesWritten=0x124f5d00*=0xe8, lpOverlapped=0x124f5d0c) returned 1
	[0159.384] GetFileType (hFile=0x350) returned 0x1
	[0159.384] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0xe8, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.389] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0159.389] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0159.389] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0159.389] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127443b0 | out: pbBuffer=0x127443b0) returned 1
	[0159.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0159.389] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.389] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.390] CloseHandle (hObject=0x2cc) returned 1
	[0159.390] CloseHandle (hObject=0x350) returned 1
	[0159.390] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\safebrowsing\\test-phish-simple.sbstore.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.393] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.551] SetEvent (hEvent=0x320) returned 1
	[0159.551] SetEvent (hEvent=0x2f4) returned 1
	[0159.551] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.555] SetEvent (hEvent=0x320) returned 1
	[0159.555] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.555] SetEvent (hEvent=0x320) returned 1
	[0159.555] SetEvent (hEvent=0x2f4) returned 1
	[0159.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0159.555] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0159.555] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb74b7b30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb74b7b30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.555] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0", cAlternateFileName="")) returned 1
	[0159.556] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0159.556] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0159.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0159.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0159.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0159.557] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0159.557] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0159.559] CloseHandle (hObject=0x33c) returned 1
	[0159.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0159.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0159.562] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0159.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb74b7b30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80a2b6d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80a2b6d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.mar", cAlternateFileName="")) returned 1
	[0159.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc, dwReserved0=0x0, dwReserved1=0x0, cFileName="update.status", cAlternateFileName="UPDATE~1.STA")) returned 1
	[0159.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0159.562] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0159.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0159.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0159.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0159.564] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0159.564] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0159.565] CloseHandle (hObject=0x33c) returned 1
	[0159.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0)) returned 1
	[0159.567] SetEvent (hEvent=0x2f4) returned 1
	[0159.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc)) returned 1
	[0159.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1
	[0159.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x15488f40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x15488f40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0159.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0159.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x15488f40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x15488f40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0159.573] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x15488f40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x15488f40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0159.604] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3bfcb480, ftCreationTime.dwHighDateTime=0x1d5d991, ftLastAccessTime.dwLowDateTime=0xdb4b7960, ftLastAccessTime.dwHighDateTime=0x1d5e05b, ftLastWriteTime.dwLowDateTime=0xdb4b7960, ftLastWriteTime.dwHighDateTime=0x1d5e05b, nFileSizeHigh=0x0, nFileSizeLow=0x170cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="1x9KM3ij7oR1bcZ3I.jpg", cAlternateFileName="1X9KM3~1.JPG")) returned 1
	[0159.604] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1eb13d80, ftCreationTime.dwHighDateTime=0x1d5dd72, ftLastAccessTime.dwLowDateTime=0x4a911e90, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0x4a911e90, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x6c0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B_0BxcCfd-6mN84d.flv", cAlternateFileName="2B_0BX~1.FLV")) returned 1
	[0159.604] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce8d710, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0xd5789f0, ftLastAccessTime.dwHighDateTime=0x1d5e0b9, ftLastWriteTime.dwLowDateTime=0xd5789f0, ftLastWriteTime.dwHighDateTime=0x1d5e0b9, nFileSizeHigh=0x0, nFileSizeLow=0xcaed, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dZSO32ZVfCegXYCK.docx", cAlternateFileName="3DZSO3~1.DOC")) returned 1
	[0159.604] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8455d960, ftCreationTime.dwHighDateTime=0x1d5db6b, ftLastAccessTime.dwLowDateTime=0x6af9c5f0, ftLastAccessTime.dwHighDateTime=0x1d5e005, ftLastWriteTime.dwLowDateTime=0x6af9c5f0, ftLastWriteTime.dwHighDateTime=0x1d5e005, nFileSizeHigh=0x0, nFileSizeLow=0x17b3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9ibbq.xls", cAlternateFileName="")) returned 1
	[0159.604] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1e694c0, ftCreationTime.dwHighDateTime=0x1d5e471, ftLastAccessTime.dwLowDateTime=0x1498dd50, ftLastAccessTime.dwHighDateTime=0x1d5db40, ftLastWriteTime.dwLowDateTime=0x1498dd50, ftLastWriteTime.dwHighDateTime=0x1d5db40, nFileSizeHigh=0x0, nFileSizeLow=0x126d, dwReserved0=0x0, dwReserved1=0x0, cFileName="acKsRzA IaCKL6.mp3", cAlternateFileName="ACKSRZ~1.MP3")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a0318e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6a0318e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb20126a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeARM.log", cAlternateFileName="")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15aa0140, ftCreationTime.dwHighDateTime=0x1d5da66, ftLastAccessTime.dwLowDateTime=0x27d24080, ftLastAccessTime.dwHighDateTime=0x1d5e335, ftLastWriteTime.dwLowDateTime=0x27d24080, ftLastWriteTime.dwHighDateTime=0x1d5e335, nFileSizeHigh=0x0, nFileSizeLow=0x5a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="baQLVf.avi", cAlternateFileName="")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6be9bb00, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6be9bb00, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x6be9bb00, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bst449D.tmp", cAlternateFileName="")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x67a13ae0, ftCreationTime.dwHighDateTime=0x1d5e641, ftLastAccessTime.dwLowDateTime=0xc31563a0, ftLastAccessTime.dwHighDateTime=0x1d5db16, ftLastWriteTime.dwLowDateTime=0xc31563a0, ftLastWriteTime.dwHighDateTime=0x1d5db16, nFileSizeHigh=0x0, nFileSizeLow=0x15bb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CFS3QJ2-sFifxS77OCu.mp3", cAlternateFileName="CFS3QJ~1.MP3")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c78d870, ftCreationTime.dwHighDateTime=0x1d5dedf, ftLastAccessTime.dwLowDateTime=0xf09e0360, ftLastAccessTime.dwHighDateTime=0x1d5e05f, ftLastWriteTime.dwLowDateTime=0xf09e0360, ftLastWriteTime.dwHighDateTime=0x1d5e05f, nFileSizeHigh=0x0, nFileSizeLow=0x8ff6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIT7_FUR7Qv8_cM326t.mp4", cAlternateFileName="CIT7_F~1.MP4")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb43f5b0, ftCreationTime.dwHighDateTime=0x1d5e5f5, ftLastAccessTime.dwLowDateTime=0x42bbf590, ftLastAccessTime.dwHighDateTime=0x1d5d808, ftLastWriteTime.dwLowDateTime=0x42bbf590, ftLastWriteTime.dwHighDateTime=0x1d5d808, nFileSizeHigh=0x0, nFileSizeLow=0x17455, dwReserved0=0x0, dwReserved1=0x0, cFileName="dUmvLSpm1YlmZ-wBP.gif", cAlternateFileName="DUMVLS~1.GIF")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2850f370, ftCreationTime.dwHighDateTime=0x1d5da8f, ftLastAccessTime.dwLowDateTime=0x245d4450, ftLastAccessTime.dwHighDateTime=0x1d5da3d, ftLastWriteTime.dwLowDateTime=0x245d4450, ftLastWriteTime.dwHighDateTime=0x1d5da3d, nFileSizeHigh=0x0, nFileSizeLow=0x7086, dwReserved0=0x0, dwReserved1=0x0, cFileName="ey2SCFlW9bAkVQT2.png", cAlternateFileName="EY2SCF~1.PNG")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b058aa0, ftCreationTime.dwHighDateTime=0x1d5e415, ftLastAccessTime.dwLowDateTime=0xfb6ecf50, ftLastAccessTime.dwHighDateTime=0x1d5d997, ftLastWriteTime.dwLowDateTime=0xfb6ecf50, ftLastWriteTime.dwHighDateTime=0x1d5d997, nFileSizeHigh=0x0, nFileSizeLow=0x5623, dwReserved0=0x0, dwReserved1=0x0, cFileName="GCexAVKgk.bmp", cAlternateFileName="GCEXAV~1.BMP")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6bab130, ftCreationTime.dwHighDateTime=0x1d5e4f0, ftLastAccessTime.dwLowDateTime=0xe350fd20, ftLastAccessTime.dwHighDateTime=0x1d5e514, ftLastWriteTime.dwLowDateTime=0xe350fd20, ftLastWriteTime.dwHighDateTime=0x1d5e514, nFileSizeHigh=0x0, nFileSizeLow=0x4d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmmwsk3 dGA3ax.mp4", cAlternateFileName="GMMWSK~1.MP4")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x586464d0, ftCreationTime.dwHighDateTime=0x1d5e12d, ftLastAccessTime.dwLowDateTime=0xc50f0a90, ftLastAccessTime.dwHighDateTime=0x1d5e015, ftLastWriteTime.dwLowDateTime=0xc50f0a90, ftLastWriteTime.dwHighDateTime=0x1d5e015, nFileSizeHigh=0x0, nFileSizeLow=0x18fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="guhNBmJGTnVeriINiWLp.flv", cAlternateFileName="GUHNBM~1.FLV")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9825b590, ftCreationTime.dwHighDateTime=0x1d5d9af, ftLastAccessTime.dwLowDateTime=0x5572d010, ftLastAccessTime.dwHighDateTime=0x1d5e3d3, ftLastWriteTime.dwLowDateTime=0x5572d010, ftLastWriteTime.dwHighDateTime=0x1d5e3d3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="HHEL 1bNv--OY.odp", cAlternateFileName="HHEL1B~1.ODP")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97fe0a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb1b54ba0, ftCreationTime.dwHighDateTime=0x1d5dbe5, ftLastAccessTime.dwLowDateTime=0x68aa4990, ftLastAccessTime.dwHighDateTime=0x1d5dd45, ftLastWriteTime.dwLowDateTime=0x68aa4990, ftLastWriteTime.dwHighDateTime=0x1d5dd45, nFileSizeHigh=0x0, nFileSizeLow=0x14486, dwReserved0=0x0, dwReserved1=0x0, cFileName="jxznuzrhQcG2KGu.m4a", cAlternateFileName="JXZNUZ~1.M4A")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1bad820, ftCreationTime.dwHighDateTime=0x1d5db48, ftLastAccessTime.dwLowDateTime=0x521d1100, ftLastAccessTime.dwHighDateTime=0x1d5e144, ftLastWriteTime.dwLowDateTime=0x521d1100, ftLastWriteTime.dwHighDateTime=0x1d5e144, nFileSizeHigh=0x0, nFileSizeLow=0xa475, dwReserved0=0x0, dwReserved1=0x0, cFileName="lGaXRLi6YTbXeMEsLC.mkv", cAlternateFileName="LGAXRL~1.MKV")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x10cd3a90, ftCreationTime.dwHighDateTime=0x1d5d7b7, ftLastAccessTime.dwLowDateTime=0xd6dd8390, ftLastAccessTime.dwHighDateTime=0x1d5d99a, ftLastWriteTime.dwLowDateTime=0xd6dd8390, ftLastWriteTime.dwHighDateTime=0x1d5d99a, nFileSizeHigh=0x0, nFileSizeLow=0x16c62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoUl0Xu 5Q x.m4a", cAlternateFileName="LOUL0X~1.M4A")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59a58b10, ftCreationTime.dwHighDateTime=0x1d5dbc1, ftLastAccessTime.dwLowDateTime=0x73e928c0, ftLastAccessTime.dwHighDateTime=0x1d5dadf, ftLastWriteTime.dwLowDateTime=0x73e928c0, ftLastWriteTime.dwHighDateTime=0x1d5dadf, nFileSizeHigh=0x0, nFileSizeLow=0x180b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LpOqcW.avi", cAlternateFileName="")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6588d460, ftCreationTime.dwHighDateTime=0x1d5dd3c, ftLastAccessTime.dwLowDateTime=0xcc64bb10, ftLastAccessTime.dwHighDateTime=0x1d5e104, ftLastWriteTime.dwLowDateTime=0xcc64bb10, ftLastWriteTime.dwHighDateTime=0x1d5e104, nFileSizeHigh=0x0, nFileSizeLow=0x10ade, dwReserved0=0x0, dwReserved1=0x0, cFileName="LZJv.mkv", cAlternateFileName="")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x680029f0, ftCreationTime.dwHighDateTime=0x1d5ded1, ftLastAccessTime.dwLowDateTime=0x9e58d670, ftLastAccessTime.dwHighDateTime=0x1d5e780, ftLastWriteTime.dwLowDateTime=0x9e58d670, ftLastWriteTime.dwHighDateTime=0x1d5e780, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsNG1LoqgdS VIpC w8I.jpg", cAlternateFileName="MSNG1L~1.JPG")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8a811180, ftCreationTime.dwHighDateTime=0x1d5e2da, ftLastAccessTime.dwLowDateTime=0x8c2ff4d0, ftLastAccessTime.dwHighDateTime=0x1d5e07b, ftLastWriteTime.dwLowDateTime=0x8c2ff4d0, ftLastWriteTime.dwHighDateTime=0x1d5e07b, nFileSizeHigh=0x0, nFileSizeLow=0x17840, dwReserved0=0x0, dwReserved1=0x0, cFileName="m_0F 5e.jpg", cAlternateFileName="M_0F5E~1.JPG")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1f27d4f0, ftCreationTime.dwHighDateTime=0x1d5d9c0, ftLastAccessTime.dwLowDateTime=0x3ae95d70, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x3ae95d70, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x186f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nm Ksy3vu h3xABn8 Z1.mkv", cAlternateFileName="NMKSY3~1.MKV")) returned 1
	[0159.605] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeeb84ad0, ftCreationTime.dwHighDateTime=0x1d5e5ee, ftLastAccessTime.dwLowDateTime=0x20b78bf0, ftLastAccessTime.dwHighDateTime=0x1d5d9dc, ftLastWriteTime.dwLowDateTime=0x20b78bf0, ftLastWriteTime.dwHighDateTime=0x1d5d9dc, nFileSizeHigh=0x0, nFileSizeLow=0xe327, dwReserved0=0x0, dwReserved1=0x0, cFileName="Noia9DZ.jpg", cAlternateFileName="")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf5403a30, ftCreationTime.dwHighDateTime=0x1d5d9db, ftLastAccessTime.dwLowDateTime=0x361c12b0, ftLastAccessTime.dwHighDateTime=0x1d5d7f0, ftLastWriteTime.dwLowDateTime=0x361c12b0, ftLastWriteTime.dwHighDateTime=0x1d5d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x18f47, dwReserved0=0x0, dwReserved1=0x0, cFileName="OxNwH0wrLkaUZQi.mp4", cAlternateFileName="OXNWH0~1.MP4")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24e2ef90, ftCreationTime.dwHighDateTime=0x1d5e7a5, ftLastAccessTime.dwLowDateTime=0x43439c80, ftLastAccessTime.dwHighDateTime=0x1d5dfa5, ftLastWriteTime.dwLowDateTime=0x43439c80, ftLastWriteTime.dwHighDateTime=0x1d5dfa5, nFileSizeHigh=0x0, nFileSizeLow=0x1819b, dwReserved0=0x0, dwReserved1=0x0, cFileName="QeS5KaTkQ97fY.jpg", cAlternateFileName="QES5KA~1.JPG")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x351ea2c0, ftCreationTime.dwHighDateTime=0x1d5e0aa, ftLastAccessTime.dwLowDateTime=0xebb24d50, ftLastAccessTime.dwHighDateTime=0x1d5dba7, ftLastWriteTime.dwLowDateTime=0xebb24d50, ftLastWriteTime.dwHighDateTime=0x1d5dba7, nFileSizeHigh=0x0, nFileSizeLow=0x1437, dwReserved0=0x0, dwReserved1=0x0, cFileName="Qn_DRcPU5aoUEc8om.mp3", cAlternateFileName="QN_DRC~1.MP3")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc05091e0, ftCreationTime.dwHighDateTime=0x1d5dc14, ftLastAccessTime.dwLowDateTime=0xfa356d90, ftLastAccessTime.dwHighDateTime=0x1d5e790, ftLastWriteTime.dwLowDateTime=0xfa356d90, ftLastWriteTime.dwHighDateTime=0x1d5e790, nFileSizeHigh=0x0, nFileSizeLow=0xfc99, dwReserved0=0x0, dwReserved1=0x0, cFileName="txRhv5.pptx", cAlternateFileName="TXRHV5~1.PPT")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e9ac2d0, ftCreationTime.dwHighDateTime=0x1d5dd11, ftLastAccessTime.dwLowDateTime=0x156ecab0, ftLastAccessTime.dwHighDateTime=0x1d5de50, ftLastWriteTime.dwLowDateTime=0x156ecab0, ftLastWriteTime.dwHighDateTime=0x1d5de50, nFileSizeHigh=0x0, nFileSizeLow=0x2bd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="u0gc-wcOTa0l.xlsx", cAlternateFileName="U0GC-W~1.XLS")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec3796b0, ftCreationTime.dwHighDateTime=0x1d5daa6, ftLastAccessTime.dwLowDateTime=0x50d2db90, ftLastAccessTime.dwHighDateTime=0x1d5dec4, ftLastWriteTime.dwLowDateTime=0x50d2db90, ftLastWriteTime.dwHighDateTime=0x1d5dec4, nFileSizeHigh=0x0, nFileSizeLow=0xe3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="uGFu7drcdnX3HWX eiY.wav", cAlternateFileName="UGFU7D~1.WAV")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xccd11da0, ftCreationTime.dwHighDateTime=0x1d5e7f8, ftLastAccessTime.dwLowDateTime=0xb671f0b0, ftLastAccessTime.dwHighDateTime=0x1d5e817, ftLastWriteTime.dwLowDateTime=0xb671f0b0, ftLastWriteTime.dwHighDateTime=0x1d5e817, nFileSizeHigh=0x0, nFileSizeLow=0xfb5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="uU9Rm2-.png", cAlternateFileName="")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x468b090, ftCreationTime.dwHighDateTime=0x1d5df82, ftLastAccessTime.dwLowDateTime=0xb5892f60, ftLastAccessTime.dwHighDateTime=0x1d5e64b, ftLastWriteTime.dwLowDateTime=0xb5892f60, ftLastWriteTime.dwHighDateTime=0x1d5e64b, nFileSizeHigh=0x0, nFileSizeLow=0x4527, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0CQP.rtf", cAlternateFileName="")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb80fa20, ftCreationTime.dwHighDateTime=0x1d5e146, ftLastAccessTime.dwLowDateTime=0x323bad90, ftLastAccessTime.dwHighDateTime=0x1d5d7d7, ftLastWriteTime.dwLowDateTime=0x323bad90, ftLastWriteTime.dwHighDateTime=0x1d5d7d7, nFileSizeHigh=0x0, nFileSizeLow=0xaf37, dwReserved0=0x0, dwReserved1=0x0, cFileName="V1-6Rq.png", cAlternateFileName="")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5599d300, ftCreationTime.dwHighDateTime=0x1d5e2b5, ftLastAccessTime.dwLowDateTime=0x5bf78ea0, ftLastAccessTime.dwHighDateTime=0x1d5e296, ftLastWriteTime.dwLowDateTime=0x5bf78ea0, ftLastWriteTime.dwHighDateTime=0x1d5e296, nFileSizeHigh=0x0, nFileSizeLow=0x1374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBj DzpAPGzF3j.gif", cAlternateFileName="VBJDZP~1.GIF")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3a7b2a0, ftCreationTime.dwHighDateTime=0x1d5e6f0, ftLastAccessTime.dwLowDateTime=0x89c5a040, ftLastAccessTime.dwHighDateTime=0x1d5e739, ftLastWriteTime.dwLowDateTime=0x89c5a040, ftLastWriteTime.dwHighDateTime=0x1d5e739, nFileSizeHigh=0x0, nFileSizeLow=0x1789e, dwReserved0=0x0, dwReserved1=0x0, cFileName="vSf2fRW.wav", cAlternateFileName="")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb51728d0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0xb51728d0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb51728d0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPDNSE", cAlternateFileName="")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8cd1e0, ftCreationTime.dwHighDateTime=0x1d5d91f, ftLastAccessTime.dwLowDateTime=0x524bd0b0, ftLastAccessTime.dwHighDateTime=0x1d5dea8, ftLastWriteTime.dwLowDateTime=0x524bd0b0, ftLastWriteTime.dwHighDateTime=0x1d5dea8, nFileSizeHigh=0x0, nFileSizeLow=0x166a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="xB5iP3.flv", cAlternateFileName="")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f111500, ftCreationTime.dwHighDateTime=0x1d5d861, ftLastAccessTime.dwLowDateTime=0xb562d500, ftLastAccessTime.dwHighDateTime=0x1d5e582, ftLastWriteTime.dwLowDateTime=0xb562d500, ftLastWriteTime.dwHighDateTime=0x1d5e582, nFileSizeHigh=0x0, nFileSizeLow=0x1668b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y68O.wav", cAlternateFileName="")) returned 1
	[0159.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0159.606] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0159.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0159.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0159.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0159.616] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0159.616] WriteFile (in: hFile=0x344, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0159.623] CloseHandle (hObject=0x344) returned 1
	[0159.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1x9KM3ij7oR1bcZ3I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1x9km3ij7or1bcz3i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3bfcb480, ftCreationTime.dwHighDateTime=0x1d5d991, ftLastAccessTime.dwLowDateTime=0xdb4b7960, ftLastAccessTime.dwHighDateTime=0x1d5e05b, ftLastWriteTime.dwLowDateTime=0xdb4b7960, ftLastWriteTime.dwHighDateTime=0x1d5e05b, nFileSizeHigh=0x0, nFileSizeLow=0x170cf)) returned 1
	[0159.674] SetEvent (hEvent=0x2f4) returned 1
	[0159.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2B_0BxcCfd-6mN84d.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2b_0bxccfd-6mn84d.flv"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1eb13d80, ftCreationTime.dwHighDateTime=0x1d5dd72, ftLastAccessTime.dwLowDateTime=0x4a911e90, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0x4a911e90, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x6c0b)) returned 1
	[0159.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\3dZSO32ZVfCegXYCK.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\3dzso32zvfcegxyck.docx"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce8d710, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0xd5789f0, ftLastAccessTime.dwHighDateTime=0x1d5e0b9, ftLastWriteTime.dwLowDateTime=0xd5789f0, ftLastWriteTime.dwHighDateTime=0x1d5e0b9, nFileSizeHigh=0x0, nFileSizeLow=0xcaed)) returned 1
	[0159.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9ibbq.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9ibbq.xls"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8455d960, ftCreationTime.dwHighDateTime=0x1d5db6b, ftLastAccessTime.dwLowDateTime=0x6af9c5f0, ftLastAccessTime.dwHighDateTime=0x1d5e005, ftLastWriteTime.dwLowDateTime=0x6af9c5f0, ftLastWriteTime.dwHighDateTime=0x1d5e005, nFileSizeHigh=0x0, nFileSizeLow=0x17b3e)) returned 1
	[0159.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a0318e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6a0318e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb20126a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5fe)) returned 1
	[0159.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9ibbq.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9ibbq.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0159.688] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9ibbq.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9ibbq.xls"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8455d960, ftCreationTime.dwHighDateTime=0x1d5db6b, ftLastAccessTime.dwLowDateTime=0x6af9c5f0, ftLastAccessTime.dwHighDateTime=0x1d5e005, ftLastWriteTime.dwLowDateTime=0x6af9c5f0, ftLastWriteTime.dwHighDateTime=0x1d5e005, nFileSizeHigh=0x0, nFileSizeLow=0x17b3e)) returned 1
	[0159.688] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ea00 | out: pbBuffer=0x1240ea00) returned 1
	[0159.688] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410540 | out: pbBuffer=0x12410540) returned 1
	[0159.688] ReadFile (in: hFile=0x33c, lpBuffer=0x1295c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1295c000*, lpNumberOfBytesRead=0x124f5d1c*=0x17b3e, lpOverlapped=0x0) returned 1
	[0159.732] GetFileType (hFile=0x33c) returned 0x1
	[0159.732] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.733] WriteFile (in: hFile=0x33c, lpBuffer=0x1297c000*, nNumberOfBytesToWrite=0x17b3e, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1297c000*, lpNumberOfBytesWritten=0x124f5d00*=0x17b3e, lpOverlapped=0x124f5d0c) returned 1
	[0159.733] GetFileType (hFile=0x33c) returned 0x1
	[0159.733] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x17b3e, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.733] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0159.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0159.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0159.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410638 | out: pbBuffer=0x12410638) returned 1
	[0159.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9ibbq.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9ibbq.xls"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0159.734] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.854] WriteFile (in: hFile=0x340, lpBuffer=0x125fa000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fa000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.854] CloseHandle (hObject=0x340) returned 1
	[0159.854] CloseHandle (hObject=0x33c) returned 1
	[0159.854] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9ibbq.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9ibbq.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\9ibbq.xls.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\9ibbq.xls.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\3dZSO32ZVfCegXYCK.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\3dzso32zvfcegxyck.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0159.859] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0159.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\3dZSO32ZVfCegXYCK.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\3dzso32zvfcegxyck.docx"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce8d710, ftCreationTime.dwHighDateTime=0x1d5e381, ftLastAccessTime.dwLowDateTime=0xd5789f0, ftLastAccessTime.dwHighDateTime=0x1d5e0b9, ftLastWriteTime.dwLowDateTime=0xd5789f0, ftLastWriteTime.dwHighDateTime=0x1d5e0b9, nFileSizeHigh=0x0, nFileSizeLow=0xcaed)) returned 1
	[0159.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ee60 | out: pbBuffer=0x1240ee60) returned 1
	[0159.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410670 | out: pbBuffer=0x12410670) returned 1
	[0159.859] ReadFile (in: hFile=0x33c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x1245dd1c*=0xcaed, lpOverlapped=0x0) returned 1
	[0159.914] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0160.892] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0161.033] SetEvent (hEvent=0x30c) returned 1
	[0161.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\HHEL 1bNv--OY.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hhel 1bnv--oy.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0161.034] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0161.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\HHEL 1bNv--OY.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hhel 1bnv--oy.odp"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9825b590, ftCreationTime.dwHighDateTime=0x1d5d9af, ftLastAccessTime.dwLowDateTime=0x5572d010, ftLastAccessTime.dwHighDateTime=0x1d5e3d3, ftLastWriteTime.dwLowDateTime=0x5572d010, ftLastWriteTime.dwHighDateTime=0x1d5e3d3, nFileSizeHigh=0x0, nFileSizeLow=0x3fd9)) returned 1
	[0161.034] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e680 | out: pbBuffer=0x1252e680) returned 1
	[0161.034] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744508 | out: pbBuffer=0x12744508) returned 1
	[0161.034] ReadFile (in: hFile=0x350, lpBuffer=0x12882000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12882000*, lpNumberOfBytesRead=0x1242bd1c*=0x3fd9, lpOverlapped=0x0) returned 1
	[0161.084] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0161.204] SetEvent (hEvent=0x30c) returned 1
	[0161.204] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0161.568] SetEvent (hEvent=0x80) returned 1
	[0161.568] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0161.608] SetEvent (hEvent=0x80) returned 1
	[0161.608] SetEvent (hEvent=0x68) returned 1
	[0161.609] GetFileType (hFile=0x350) returned 0x1
	[0161.609] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.609] WriteFile (in: hFile=0x350, lpBuffer=0x12686000*, nNumberOfBytesToWrite=0x1819b, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12686000*, lpNumberOfBytesWritten=0x1245dd00*=0x1819b, lpOverlapped=0x1245dd0c) returned 1
	[0161.610] GetFileType (hFile=0x350) returned 0x1
	[0161.610] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1819b, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0161.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0161.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0161.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0161.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\QeS5KaTkQ97fY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qes5katkq97fy.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0161.611] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0161.611] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.611] CloseHandle (hObject=0x344) returned 1
	[0161.611] CloseHandle (hObject=0x350) returned 1
	[0161.611] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\QeS5KaTkQ97fY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qes5katkq97fy.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\QeS5KaTkQ97fY.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qes5katkq97fy.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.640] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0161.642] CloseHandle (hObject=0x340) returned 1
	[0161.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0161.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0161.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0161.684] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0161.685] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0161.685] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0161.685] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0161.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0161.685] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0161.685] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.687] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0161.687] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0161.688] CloseHandle (hObject=0x340) returned 1
	[0161.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\03J4UQW0\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\03j4uqw0\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0161.689] SetEvent (hEvent=0x68) returned 1
	[0161.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0161.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0161.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0161.690] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0161.690] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0161.690] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0161.690] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0161.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0161.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0161.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0161.739] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0161.739] WriteFile (in: hFile=0x350, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0161.741] CloseHandle (hObject=0x350) returned 1
	[0161.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\KETAJP6D\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\ketajp6d\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0161.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0161.743] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0161.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0161.744] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0161.744] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0161.744] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0161.744] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0161.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0161.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0161.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0161.746] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0161.747] WriteFile (in: hFile=0x350, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0161.748] CloseHandle (hObject=0x350) returned 1
	[0161.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0161.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0161.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0161.820] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0161.820] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0161.820] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0161.820] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0161.820] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0161.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0161.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0161.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.824] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0161.824] WriteFile (in: hFile=0x340, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0161.825] CloseHandle (hObject=0x340) returned 1
	[0161.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\XT1RPYG9\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\xt1rpyg9\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0161.826] SetEvent (hEvent=0x68) returned 1
	[0161.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0161.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0161.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.828] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0161.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0161.829] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ed20 | out: pbBuffer=0x1240ed20) returned 1
	[0161.829] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106b8 | out: pbBuffer=0x124106b8) returned 1
	[0161.829] ReadFile (in: hFile=0x340, lpBuffer=0x126c0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126c0000*, lpNumberOfBytesRead=0x124f3d1c*=0x43, lpOverlapped=0x0) returned 1
	[0161.831] GetFileType (hFile=0x340) returned 0x1
	[0161.831] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.831] WriteFile (in: hFile=0x340, lpBuffer=0x12414280*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12414280*, lpNumberOfBytesWritten=0x124f3d00*=0x43, lpOverlapped=0x124f3d0c) returned 1
	[0161.831] GetFileType (hFile=0x340) returned 0x1
	[0161.831] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0161.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0161.832] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0161.832] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107b0 | out: pbBuffer=0x124107b0) returned 1
	[0161.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0161.832] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0161.832] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.832] CloseHandle (hObject=0x344) returned 1
	[0161.832] CloseHandle (hObject=0x340) returned 1
	[0161.832] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.196] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0162.419] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0162.559] SetEvent (hEvent=0x30c) returned 1
	[0162.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uGFu7drcdnX3HWX eiY.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ugfu7drcdnx3hwx eiy.wav"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec3796b0, ftCreationTime.dwHighDateTime=0x1d5daa6, ftLastAccessTime.dwLowDateTime=0x50d2db90, ftLastAccessTime.dwHighDateTime=0x1d5dec4, ftLastWriteTime.dwLowDateTime=0x50d2db90, ftLastWriteTime.dwHighDateTime=0x1d5dec4, nFileSizeHigh=0x0, nFileSizeLow=0xe3e5)) returned 1
	[0162.590] SetEvent (hEvent=0x80) returned 1
	[0162.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\uU9Rm2-.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\uu9rm2-.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xccd11da0, ftCreationTime.dwHighDateTime=0x1d5e7f8, ftLastAccessTime.dwLowDateTime=0xb671f0b0, ftLastAccessTime.dwHighDateTime=0x1d5e817, ftLastWriteTime.dwLowDateTime=0xb671f0b0, ftLastWriteTime.dwHighDateTime=0x1d5e817, nFileSizeHigh=0x0, nFileSizeLow=0xfb5a)) returned 1
	[0162.608] SetEvent (hEvent=0x80) returned 1
	[0162.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\vSf2fRW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\vsf2frw.wav"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3a7b2a0, ftCreationTime.dwHighDateTime=0x1d5e6f0, ftLastAccessTime.dwLowDateTime=0x89c5a040, ftLastAccessTime.dwHighDateTime=0x1d5e739, ftLastWriteTime.dwLowDateTime=0x89c5a040, ftLastWriteTime.dwHighDateTime=0x1d5e739, nFileSizeHigh=0x0, nFileSizeLow=0x1789e)) returned 1
	[0162.672] SetEvent (hEvent=0x80) returned 1
	[0162.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\xB5iP3.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\xb5ip3.flv"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8cd1e0, ftCreationTime.dwHighDateTime=0x1d5d91f, ftLastAccessTime.dwLowDateTime=0x524bd0b0, ftLastAccessTime.dwHighDateTime=0x1d5dea8, ftLastWriteTime.dwLowDateTime=0x524bd0b0, ftLastWriteTime.dwHighDateTime=0x1d5dea8, nFileSizeHigh=0x0, nFileSizeLow=0x166a3)) returned 1
	[0162.731] SetEvent (hEvent=0x320) returned 1
	[0162.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x34c
	[0162.735] GetFileInformationByHandle (in: hFile=0x34c, lpFileInformation=0x124f7a84 | out: lpFileInformation=0x124f7a84) returned 1
	[0162.735] GetFileInformationByHandleEx (in: hFile=0x34c, FileInformationClass=0x9, lpFileInformation=0x124f7a7c, dwBufferSize=0x8 | out: lpFileInformation=0x124f7a7c) returned 1
	[0162.735] CloseHandle (hObject=0x34c) returned 1
	[0162.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.739] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.739] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ab32d60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ab32d60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ab32d60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.739] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.739] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.739] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.739] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\VirtualStore\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\virtualstore\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0162.741] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0162.741] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0162.743] CloseHandle (hObject=0x34c) returned 1
	[0162.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.745] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.745] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0162.746] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0162.746] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1
	[0162.746] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.746] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0162.748] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0162.748] WriteFile (in: hFile=0x34c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0162.749] CloseHandle (hObject=0x34c) returned 1
	[0162.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.755] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0162.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
	[0162.756] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.756] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0162.757] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0162.757] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0162.758] CloseHandle (hObject=0x33c) returned 1
	[0162.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.759] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.759] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.759] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0162.760] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.760] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.760] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0162.761] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0162.761] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0162.762] CloseHandle (hObject=0x33c) returned 1
	[0162.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.784] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1
	[0162.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1
	[0162.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0162.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.788] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.793] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0162.793] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0162.794] CloseHandle (hObject=0x344) returned 1
	[0162.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\readermessages"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0162.795] SetEvent (hEvent=0x70) returned 1
	[0162.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.801] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.801] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.801] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.801] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\search\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0162.803] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0162.803] WriteFile (in: hFile=0x34c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0162.804] CloseHandle (hObject=0x34c) returned 1
	[0162.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff)) returned 1
	[0162.809] SetEvent (hEvent=0x80) returned 1
	[0162.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.810] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.810] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.810] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1
	[0162.810] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.810] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0162.812] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0162.812] WriteFile (in: hFile=0x34c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0162.813] CloseHandle (hObject=0x34c) returned 1
	[0162.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.822] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.822] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1
	[0162.822] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.823] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0162.824] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0162.825] WriteFile (in: hFile=0x34c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0162.826] CloseHandle (hObject=0x34c) returned 1
	[0162.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.851] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.854] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.854] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1
	[0162.854] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1
	[0162.854] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1
	[0162.854] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1
	[0162.854] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1
	[0162.854] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1
	[0162.854] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1
	[0162.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1
	[0162.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1
	[0162.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1
	[0162.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1
	[0162.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1
	[0162.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1
	[0162.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.855] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.861] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0162.861] WriteFile (in: hFile=0x344, lpBuffer=0x128b8000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0162.862] CloseHandle (hObject=0x344) returned 1
	[0162.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.863] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.864] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.864] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.866] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\all\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.868] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.868] WriteFile (in: hFile=0x344, lpBuffer=0x128b9300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x128b9300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.870] CloseHandle (hObject=0x344) returned 1
	[0162.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.873] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.873] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.873] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.873] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.875] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.875] WriteFile (in: hFile=0x344, lpBuffer=0x128ba600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x128ba600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.877] CloseHandle (hObject=0x344) returned 1
	[0162.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.880] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.881] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.881] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\brz\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.883] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.883] WriteFile (in: hFile=0x344, lpBuffer=0x128bb900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x128bb900*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.886] CloseHandle (hObject=0x344) returned 1
	[0162.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.887] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.887] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.887] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.887] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dan\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.890] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.890] WriteFile (in: hFile=0x344, lpBuffer=0x128bcc00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x128bcc00*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.892] CloseHandle (hObject=0x344) returned 1
	[0162.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.893] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.893] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.893] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.893] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\dut\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.896] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.896] WriteFile (in: hFile=0x344, lpBuffer=0x12602000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12602000*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.907] CloseHandle (hObject=0x344) returned 1
	[0162.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.909] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.909] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.909] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.909] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\eng\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.913] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.914] WriteFile (in: hFile=0x344, lpBuffer=0x12603300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12603300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.915] CloseHandle (hObject=0x344) returned 1
	[0162.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.916] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.916] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.916] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.916] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.917] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\frn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.920] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.920] WriteFile (in: hFile=0x344, lpBuffer=0x12604600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12604600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.921] CloseHandle (hObject=0x344) returned 1
	[0162.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.923] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.923] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.923] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.923] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\grm\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.925] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.925] WriteFile (in: hFile=0x344, lpBuffer=0x12605900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12605900*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.927] CloseHandle (hObject=0x344) returned 1
	[0162.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.928] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.928] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.928] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.928] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.929] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\itl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.933] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.933] WriteFile (in: hFile=0x344, lpBuffer=0x12606c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12606c00*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.935] CloseHandle (hObject=0x344) returned 1
	[0162.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.936] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.936] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.936] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.936] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\nrw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.939] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.939] WriteFile (in: hFile=0x344, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.941] CloseHandle (hObject=0x344) returned 1
	[0162.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.942] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.942] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.942] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.942] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\prt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.947] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.947] WriteFile (in: hFile=0x344, lpBuffer=0x12633300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12633300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.948] CloseHandle (hObject=0x344) returned 1
	[0162.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.949] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.949] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.950] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\spn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.952] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.952] WriteFile (in: hFile=0x344, lpBuffer=0x12634600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12634600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.954] CloseHandle (hObject=0x344) returned 1
	[0162.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.955] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.955] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.955] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.955] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\linguistics\\dictionaries\\adobe custom dictionary\\swd\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.957] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0162.957] WriteFile (in: hFile=0x344, lpBuffer=0x12635900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12635900*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0162.958] CloseHandle (hObject=0x344) returned 1
	[0162.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.960] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1
	[0162.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0162.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0162.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0162.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0162.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0162.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.963] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.964] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.965] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.967] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0162.967] WriteFile (in: hFile=0x344, lpBuffer=0x12636c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12636c00*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0162.968] CloseHandle (hObject=0x344) returned 1
	[0162.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.969] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.969] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.969] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1
	[0162.969] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1
	[0162.969] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.969] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0162.980] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0162.980] WriteFile (in: hFile=0x344, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0162.982] CloseHandle (hObject=0x344) returned 1
	[0162.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0162.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.985] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0162.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0x0, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0x0, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1
	[0162.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1
	[0162.991] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1
	[0162.991] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1
	[0162.991] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0x0, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1
	[0162.991] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1
	[0162.991] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0162.991] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1
	[0162.991] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1
	[0162.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1
	[0162.994] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1
	[0162.994] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1
	[0162.994] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1
	[0162.994] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1
	[0162.994] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1
	[0162.994] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0x0, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0x0, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1
	[0162.995] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0162.995] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0162.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0162.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0162.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.001] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0163.001] WriteFile (in: hFile=0x344, lpBuffer=0x1260d300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x1260d300*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0163.005] CloseHandle (hObject=0x344) returned 1
	[0163.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0163.007] SetEvent (hEvent=0x70) returned 1
	[0163.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561)) returned 1
	[0163.100] SetEvent (hEvent=0x80) returned 1
	[0163.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8)) returned 1
	[0163.112] SetEvent (hEvent=0x68) returned 1
	[0163.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d)) returned 1
	[0163.121] SetEvent (hEvent=0x68) returned 1
	[0163.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\23b523c9e7746f715d33c6527c18eb9d"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145)) returned 1
	[0163.137] SetEvent (hEvent=0x70) returned 1
	[0163.137] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3130b1871a126520a8c47861efe3ed4d"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209)) returned 1
	[0163.151] SetEvent (hEvent=0x2e8) returned 1
	[0163.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b)) returned 1
	[0163.166] SetEvent (hEvent=0x68) returned 1
	[0163.166] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68)) returned 1
	[0163.189] SetEvent (hEvent=0x70) returned 1
	[0163.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0163.203] SetEvent (hEvent=0x2e8) returned 1
	[0163.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680)) returned 1
	[0163.218] SetEvent (hEvent=0x68) returned 1
	[0163.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7)) returned 1
	[0163.227] SetEvent (hEvent=0x80) returned 1
	[0163.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7)) returned 1
	[0163.245] SetEvent (hEvent=0x2e8) returned 1
	[0163.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0163.260] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.280] SetEvent (hEvent=0x30c) returned 1
	[0163.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\696f3de637e6de85b458996d49d759ad"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d)) returned 1
	[0163.296] SetEvent (hEvent=0x2e8) returned 1
	[0163.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648)) returned 1
	[0163.308] SetEvent (hEvent=0x30c) returned 1
	[0163.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7396c420a8e1bc1da97f1af0d10bad21"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a)) returned 1
	[0163.312] SetEvent (hEvent=0x30c) returned 1
	[0163.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0163.332] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.351] SetEvent (hEvent=0x2f4) returned 1
	[0163.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa)) returned 1
	[0163.361] SetEvent (hEvent=0xa0) returned 1
	[0163.361] SetEvent (hEvent=0x30c) returned 1
	[0163.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c)) returned 1
	[0163.373] SetEvent (hEvent=0x68) returned 1
	[0163.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0163.396] SetEvent (hEvent=0x68) returned 1
	[0163.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0163.404] SetEvent (hEvent=0x30c) returned 1
	[0163.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.414] SetEvent (hEvent=0x2e8) returned 1
	[0163.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.424] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.437] SetEvent (hEvent=0x2f4) returned 1
	[0163.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.447] SetEvent (hEvent=0x2e8) returned 1
	[0163.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.461] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.467] SetEvent (hEvent=0x2f4) returned 1
	[0163.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.474] SetEvent (hEvent=0x2e8) returned 1
	[0163.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.488] SetEvent (hEvent=0x68) returned 1
	[0163.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.525] SetEvent (hEvent=0x68) returned 1
	[0163.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.540] SetEvent (hEvent=0x2e8) returned 1
	[0163.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.551] SetEvent (hEvent=0x30c) returned 1
	[0163.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.562] SetEvent (hEvent=0x68) returned 1
	[0163.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e)) returned 1
	[0163.572] SetEvent (hEvent=0x2e8) returned 1
	[0163.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0163.581] SetEvent (hEvent=0x30c) returned 1
	[0163.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0163.593] SetEvent (hEvent=0x68) returned 1
	[0163.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d)) returned 1
	[0163.604] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.607] SetEvent (hEvent=0x320) returned 1
	[0163.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da)) returned 1
	[0163.612] SetEvent (hEvent=0x30c) returned 1
	[0163.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1
	[0163.625] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.642] SetEvent (hEvent=0x68) returned 1
	[0163.642] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.644] SetEvent (hEvent=0x320) returned 1
	[0163.644] SetEvent (hEvent=0x30c) returned 1
	[0163.644] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.646] SetEvent (hEvent=0x80) returned 1
	[0163.646] WaitForSingleObject (hHandle=0x2e4, dwMilliseconds=0xffffffff) 

Thread:
	id = 51
	os_tid = 0x96c

	[0106.709] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x339cff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x339cff38*=0x2ec) returned 1
	[0106.709] VirtualQuery (in: lpAddress=0x339cff48, lpBuffer=0x339cff48, dwLength=0x1c | out: lpBuffer=0x339cff48*(BaseAddress=0x339cf000, AllocationBase=0x338d0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0106.709] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2e8
	[0106.709] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0106.812] SetEvent (hEvent=0x11c) returned 1
	[0106.812] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0106.812] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0106.812] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0106.813] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e140 | out: pbBuffer=0x1252e140) returned 1
	[0106.813] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1246a0b8 | out: pbBuffer=0x1246a0b8) returned 1
	[0106.813] ReadFile (in: hFile=0x2fc, lpBuffer=0x126ee000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ee000*, lpNumberOfBytesRead=0x12429d1c*=0x10000, lpOverlapped=0x0) returned 1
	[0106.825] GetProcAddress (hModule=0x76d30000, lpProcName="GetFileType") returned 0x76d43531
	[0106.825] GetFileType (hFile=0x2fc) returned 0x1
	[0106.825] GetProcAddress (hModule=0x76d30000, lpProcName="SetFilePointerEx") returned 0x76d5c807
	[0106.825] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0106.825] WriteFile (in: hFile=0x2fc, lpBuffer=0x1274c000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1274c000*, lpNumberOfBytesWritten=0x12429d00*=0x10000, lpOverlapped=0x12429d0c) returned 1
	[0106.826] GetFileType (hFile=0x2fc) returned 0x1
	[0106.826] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0106.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0106.828] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0106.829] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0106.830] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1246a188 | out: pbBuffer=0x1246a188) returned 1
	[0106.830] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x300
	[0106.830] GetConsoleMode (in: hConsoleHandle=0x300, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0106.830] WriteFile (in: hFile=0x300, lpBuffer=0x1277e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277e000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0106.831] CloseHandle (hObject=0x300) returned 1
	[0106.833] CloseHandle (hObject=0x2fc) returned 1
	[0106.834] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76d30000
	[0106.835] GetProcAddress (hModule=0x76d30000, lpProcName="MoveFileExW") returned 0x76d59b2d
	[0106.840] MoveFileExW (lpExistingFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="C:\\Boot\\BOOTSTAT.DAT.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\boot\\bootstat.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0106.841] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0106.845] SetEvent (hEvent=0x11c) returned 1
	[0106.845] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.845] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf\\*", lpFindFileData=0x124f7a44 | out: lpFindFileData=0x124f7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.846] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0106.881] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfad4, ulCount=0x10, ulNumEntriesRemoved=0x339cfab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfad4, ulNumEntriesRemoved=0x339cfab8) returned 0
	[0106.881] SetEvent (hEvent=0x11c) returned 1
	[0106.881] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.881] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui\\*", lpFindFileData=0x124f7a44 | out: lpFindFileData=0x124f7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.882] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfad4, ulCount=0x10, ulNumEntriesRemoved=0x339cfab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfad4, ulNumEntriesRemoved=0x339cfab8) returned 0
	[0106.882] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.882] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.882] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfad4, ulCount=0x10, ulNumEntriesRemoved=0x339cfab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfad4, ulNumEntriesRemoved=0x339cfab8) returned 0
	[0106.882] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfad4, ulCount=0x10, ulNumEntriesRemoved=0x339cfab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x339cfad4, ulNumEntriesRemoved=0x339cfab8) returned 1
	[0109.829] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x339cfab4, fWait=0, lpdwFlags=0x339cfac4 | out: lpcbTransfer=0x339cfab4, lpdwFlags=0x339cfac4) returned 1
	[0109.830] SetEvent (hEvent=0x320) returned 1
	[0109.830] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x452, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0109.832] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x2710) returned 0x102
	[0121.062] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.081] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.081] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.081] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f)) returned 1
	[0121.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322a0 | out: pbBuffer=0x127322a0) returned 1
	[0121.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744100 | out: pbBuffer=0x12744100) returned 1
	[0121.082] ReadFile (in: hFile=0x2cc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.097] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.111] GetFileType (hFile=0x2cc) returned 0x1
	[0121.111] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.111] WriteFile (in: hFile=0x2cc, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0121.112] GetFileType (hFile=0x2cc) returned 0x1
	[0121.112] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.112] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0121.112] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0121.113] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0121.113] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e890 | out: pbBuffer=0x1251e890) returned 1
	[0121.113] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.113] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.113] WriteFile (in: hFile=0x340, lpBuffer=0x127cc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x127cc500*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.136] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.146] CloseHandle (hObject=0x340) returned 1
	[0121.146] CloseHandle (hObject=0x2cc) returned 1
	[0121.146] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.152] SetEvent (hEvent=0x308) returned 1
	[0121.152] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x46c, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0121.153] SetEvent (hEvent=0x80) returned 1
	[0121.153] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.154] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.154] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.155] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00)) returned 1
	[0121.155] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732140 | out: pbBuffer=0x12732140) returned 1
	[0121.155] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744120 | out: pbBuffer=0x12744120) returned 1
	[0121.155] ReadFile (in: hFile=0x32c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.176] GetFileType (hFile=0x32c) returned 0x1
	[0121.176] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.176] WriteFile (in: hFile=0x32c, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0121.177] GetFileType (hFile=0x32c) returned 0x1
	[0121.177] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.177] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0121.177] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0121.178] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0121.178] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441d8 | out: pbBuffer=0x127441d8) returned 1
	[0121.178] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.178] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.178] WriteFile (in: hFile=0x338, lpBuffer=0x12616000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12616000*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.193] CloseHandle (hObject=0x338) returned 1
	[0121.194] CloseHandle (hObject=0x32c) returned 1
	[0121.194] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.195] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.195] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.195] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\ShellUI.MST" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\shellui.mst"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0121.195] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732360 | out: pbBuffer=0x12732360) returned 1
	[0121.195] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744200 | out: pbBuffer=0x12744200) returned 1
	[0121.195] ReadFile (in: hFile=0x32c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x126e7d1c*=0xe00, lpOverlapped=0x0) returned 1
	[0121.213] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.228] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.331] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.340] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.402] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.439] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.608] SetEvent (hEvent=0x68) returned 1
	[0121.609] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.609] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.609] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0121.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c480 | out: pbBuffer=0x1244c480) returned 1
	[0121.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0121.609] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0121.616] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.616] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0121.616] SetEvent (hEvent=0xa0) returned 1
	[0121.616] SetEvent (hEvent=0x68) returned 1
	[0121.616] SetEvent (hEvent=0x70) returned 1
	[0121.617] ReadFile (in: hFile=0x340, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0x10b2, lpOverlapped=0x0) returned 1
	[0121.620] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.621] SetEvent (hEvent=0x68) returned 1
	[0121.621] GetFileType (hFile=0x340) returned 0x1
	[0121.621] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.621] WriteFile (in: hFile=0x340, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f3d00*=0x10b2, lpOverlapped=0x124f3d0c) returned 1
	[0121.621] GetFileType (hFile=0x340) returned 0x1
	[0121.622] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x10b2, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.622] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0121.622] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0121.622] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0121.622] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0121.622] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.622] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.622] WriteFile (in: hFile=0x338, lpBuffer=0x12620000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12620000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.623] CloseHandle (hObject=0x338) returned 1
	[0121.623] CloseHandle (hObject=0x340) returned 1
	[0121.623] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.625] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.626] SetEvent (hEvent=0x68) returned 1
	[0121.626] SetEvent (hEvent=0x30c) returned 1
	[0121.627] GetFileType (hFile=0x328) returned 0x1
	[0121.627] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.627] WriteFile (in: hFile=0x328, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e3d00, lpOverlapped=0x126e3d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x126e3d00*=0x20000, lpOverlapped=0x126e3d0c) returned 1
	[0121.628] GetFileType (hFile=0x328) returned 0x1
	[0121.628] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.628] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0121.628] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0121.629] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0121.629] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0121.629] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.629] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.629] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126e3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.640] CloseHandle (hObject=0x340) returned 1
	[0121.640] CloseHandle (hObject=0x328) returned 1
	[0121.640] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.641] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4)) returned 1
	[0121.641] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb)) returned 1
	[0121.683] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.697] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31)) returned 1
	[0121.712] SetEvent (hEvent=0xa0) returned 1
	[0121.712] SetEvent (hEvent=0x320) returned 1
	[0121.712] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976)) returned 1
	[0121.735] SetEvent (hEvent=0x80) returned 1
	[0121.735] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0121.748] SetEvent (hEvent=0x68) returned 1
	[0121.748] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0121.760] SetEvent (hEvent=0x320) returned 1
	[0121.761] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0121.799] SetEvent (hEvent=0xa0) returned 1
	[0121.799] SetEvent (hEvent=0x30c) returned 1
	[0121.799] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0121.830] SetEvent (hEvent=0x68) returned 1
	[0121.830] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0121.830] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0121.830] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0121.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5cd3a40, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa8c22f80, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa8c22f80, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.msi", cAlternateFileName="PRJPRO~1.MSI")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjProrWW.xml", cAlternateFileName="PRJPRO~1.XML")) returned 1
	[0121.836] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrjPrrWW.cab", cAlternateFileName="")) returned 1
	[0121.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69dde270, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x69dde270, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa8191670, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0121.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0121.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0121.837] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0121.838] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.839] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0121.839] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.839] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0121.840] WriteFile (in: hFile=0x328, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0121.841] CloseHandle (hObject=0x328) returned 1
	[0121.841] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0121.853] SetEvent (hEvent=0x320) returned 1
	[0121.854] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0121.861] SetEvent (hEvent=0x320) returned 1
	[0121.862] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87abdaa0, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87abdaa0, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5cd2aa0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0121.862] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bd91af0, ftCreationTime.dwHighDateTime=0x1cb07b2, ftLastAccessTime.dwLowDateTime=0x7bd91af0, ftLastAccessTime.dwHighDateTime=0x1cb07b2, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0121.874] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400)) returned 1
	[0121.908] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0121.914] SetEvent (hEvent=0x70) returned 1
	[0121.914] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cabec50, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7cabec50, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1915)) returned 1
	[0121.935] SetEvent (hEvent=0x80) returned 1
	[0121.935] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f)) returned 1
	[0121.938] SetEvent (hEvent=0x320) returned 1
	[0121.938] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b)) returned 1
	[0121.948] SetEvent (hEvent=0x320) returned 1
	[0121.948] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\ose.exe" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\ose.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe57f8e0, ftCreationTime.dwHighDateTime=0x1cbe1cb, ftLastAccessTime.dwLowDateTime=0xfe57f8e0, ftLastAccessTime.dwHighDateTime=0x1cbe1cb, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x2a968)) returned 1
	[0121.955] SetEvent (hEvent=0x68) returned 1
	[0121.955] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6644b620, ftCreationTime.dwHighDateTime=0x1cb04b2, ftLastAccessTime.dwLowDateTime=0x6644b620, ftLastAccessTime.dwHighDateTime=0x1cb04b2, ftLastWriteTime.dwLowDateTime=0xa81b8770, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0121.960] SetEvent (hEvent=0x80) returned 1
	[0121.960] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0121.965] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.095] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.131] SetEvent (hEvent=0x80) returned 1
	[0122.131] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.154] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.159] SetEvent (hEvent=0x80) returned 1
	[0122.159] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0122.160] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.166] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.166] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0122.166] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061)) returned 1
	[0122.167] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0122.167] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410040 | out: pbBuffer=0x12410040) returned 1
	[0122.167] ReadFile (in: hFile=0x33c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f1d1c*=0x5061, lpOverlapped=0x0) returned 1
	[0122.187] GetFileType (hFile=0x33c) returned 0x1
	[0122.187] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.187] WriteFile (in: hFile=0x33c, lpBuffer=0x124a1500*, nNumberOfBytesToWrite=0x5061, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124a1500*, lpNumberOfBytesWritten=0x124f1d00*=0x5061, lpOverlapped=0x124f1d0c) returned 1
	[0122.187] GetFileType (hFile=0x33c) returned 0x1
	[0122.187] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x5061, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.187] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0122.188] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0122.188] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0122.188] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c8 | out: pbBuffer=0x124103c8) returned 1
	[0122.188] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0122.188] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0122.188] WriteFile (in: hFile=0x328, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.189] CloseHandle (hObject=0x328) returned 1
	[0122.190] CloseHandle (hObject=0x33c) returned 1
	[0122.191] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.216] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.234] SetEvent (hEvent=0x320) returned 1
	[0122.234] SetEvent (hEvent=0x30c) returned 1
	[0122.234] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.319] SetEvent (hEvent=0x30c) returned 1
	[0122.319] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.327] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.337] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.354] SetEvent (hEvent=0x70) returned 1
	[0122.354] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.358] SetEvent (hEvent=0x318) returned 1
	[0122.359] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2540cc00, ftCreationTime.dwHighDateTime=0x1d1056e, ftLastAccessTime.dwLowDateTime=0x2540cc00, ftLastAccessTime.dwHighDateTime=0x1d1056e, ftLastWriteTime.dwLowDateTime=0x2540cc00, ftLastWriteTime.dwHighDateTime=0x1d1056e, nFileSizeHigh=0x0, nFileSizeLow=0x109d000)) returned 1
	[0122.359] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0122.362] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0122.363] SetEvent (hEvent=0x70) returned 1
	[0122.363] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0122.373] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat" (normalized: "c:\\programdata\\adobe\\acrobat"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.374] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat" (normalized: "c:\\programdata\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.374] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.374] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.374] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0122.374] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.374] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.374] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.375] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.375] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.375] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0122.375] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0122.376] CloseHandle (hObject=0x33c) returned 1
	[0122.377] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.377] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.377] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.377] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.377] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Replicate", cAlternateFileName="REPLIC~1")) returned 1
	[0122.377] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.377] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.377] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.377] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.378] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.387] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0122.387] WriteFile (in: hFile=0x338, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0122.389] CloseHandle (hObject=0x338) returned 1
	[0122.389] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.390] SetEvent (hEvent=0xa0) returned 1
	[0122.390] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.390] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
	[0122.391] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.391] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.391] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.391] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.391] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.392] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0122.392] WriteFile (in: hFile=0x338, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0122.393] CloseHandle (hObject=0x338) returned 1
	[0122.393] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.393] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.394] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.394] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8000ce40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x8000ce40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.394] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df, dwReserved0=0x0, dwReserved1=0x0, cFileName="directories.acrodata", cAlternateFileName="DIRECT~1.ACR")) returned 1
	[0122.394] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.394] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.394] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.394] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.394] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.394] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0122.395] WriteFile (in: hFile=0x338, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0122.396] CloseHandle (hObject=0x338) returned 1
	[0122.396] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df)) returned 1
	[0122.397] SetEvent (hEvent=0x320) returned 1
	[0122.397] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Application Data" (normalized: "c:\\programdata\\application data"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.397] CreateFileW (lpFileName="C:\\ProgramData\\Application Data" (normalized: "c:\\programdata\\application data"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x338
	[0122.397] GetFileInformationByHandle (in: hFile=0x338, lpFileInformation=0x124f7bb0 | out: lpFileInformation=0x124f7bb0) returned 1
	[0122.397] GetFileInformationByHandleEx (in: hFile=0x338, FileInformationClass=0x9, lpFileInformation=0x124f7ba8, dwBufferSize=0x8 | out: lpFileInformation=0x124f7ba8) returned 1
	[0122.397] CloseHandle (hObject=0x338) returned 1
	[0122.397] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Desktop" (normalized: "c:\\programdata\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.398] CreateFileW (lpFileName="C:\\ProgramData\\Desktop" (normalized: "c:\\programdata\\desktop"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x338
	[0122.398] GetFileInformationByHandle (in: hFile=0x338, lpFileInformation=0x124f7bb0 | out: lpFileInformation=0x124f7bb0) returned 1
	[0122.398] GetFileInformationByHandleEx (in: hFile=0x338, FileInformationClass=0x9, lpFileInformation=0x124f7ba8, dwBufferSize=0x8 | out: lpFileInformation=0x124f7ba8) returned 1
	[0122.398] CloseHandle (hObject=0x338) returned 1
	[0122.398] CreateFileW (lpFileName="C:\\ProgramData\\Application Data" (normalized: "c:\\programdata\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.398] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.399] CreateFileW (lpFileName="C:\\ProgramData\\Desktop" (normalized: "c:\\programdata\\desktop"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.399] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.399] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Documents" (normalized: "c:\\programdata\\documents"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.399] CreateFileW (lpFileName="C:\\ProgramData\\Documents" (normalized: "c:\\programdata\\documents"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x338
	[0122.399] GetFileInformationByHandle (in: hFile=0x338, lpFileInformation=0x124f7bb0 | out: lpFileInformation=0x124f7bb0) returned 1
	[0122.399] GetFileInformationByHandleEx (in: hFile=0x338, FileInformationClass=0x9, lpFileInformation=0x124f7ba8, dwBufferSize=0x8 | out: lpFileInformation=0x124f7ba8) returned 1
	[0122.399] CloseHandle (hObject=0x338) returned 1
	[0122.399] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Favorites" (normalized: "c:\\programdata\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3074f252, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3074f252, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3074f252, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.400] CreateFileW (lpFileName="C:\\ProgramData\\Favorites" (normalized: "c:\\programdata\\favorites"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x338
	[0122.400] GetFileInformationByHandle (in: hFile=0x338, lpFileInformation=0x124f7bb0 | out: lpFileInformation=0x124f7bb0) returned 1
	[0122.400] GetFileInformationByHandleEx (in: hFile=0x338, FileInformationClass=0x9, lpFileInformation=0x124f7ba8, dwBufferSize=0x8 | out: lpFileInformation=0x124f7ba8) returned 1
	[0122.400] CloseHandle (hObject=0x338) returned 1
	[0122.400] CreateFileW (lpFileName="C:\\ProgramData\\Documents" (normalized: "c:\\programdata\\documents"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.400] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.400] CreateFileW (lpFileName="C:\\ProgramData\\Favorites" (normalized: "c:\\programdata\\favorites"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.400] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Favorites\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.401] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft" (normalized: "c:\\programdata\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0122.401] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft" (normalized: "c:\\programdata\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.401] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x124f7af8 | out: lpFindFileData=0x124f7af8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assistance", cAlternateFileName="ASSIST~1")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9182055d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9182055d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eHome", cAlternateFileName="")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSDN", cAlternateFileName="")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0122.401] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE", cAlternateFileName="")) returned 1
	[0122.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0xfa44d4a0, ftLastAccessTime.dwHighDateTime=0x1d305fd, ftLastWriteTime.dwLowDateTime=0xfa44d4a0, ftLastWriteTime.dwHighDateTime=0x1d305fd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeSoftwareProtectionPlatform", cAlternateFileName="OFFICE~1")) returned 1
	[0122.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RAC", cAlternateFileName="")) returned 1
	[0122.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0122.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1
	[0122.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xc602eec6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0122.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80ac5760, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x80ac5760, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x80ac5760, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO", cAlternateFileName="")) returned 1
	[0122.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x60ae73a0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x60ae73a0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0122.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x591e8ca0, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0x591e8ca0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0122.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~2")) returned 1
	[0122.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7fffaad0, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7fffaad0, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1
	[0122.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.402] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.402] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f77c0 | out: lpFileInformation=0x124f77c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.402] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.403] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.409] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f79d0 | out: lpMode=0x124f79d0) returned 0
	[0122.409] WriteFile (in: hFile=0x338, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f79d0, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f79d0*=0x1180, lpOverlapped=0x0) returned 1
	[0122.410] CloseHandle (hObject=0x338) returned 1
	[0122.410] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance" (normalized: "c:\\programdata\\microsoft\\assistance"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.411] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance" (normalized: "c:\\programdata\\microsoft\\assistance"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.411] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.411] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.411] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
	[0122.411] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.411] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.411] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.411] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.412] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.412] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0122.412] WriteFile (in: hFile=0x338, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0122.413] CloseHandle (hObject=0x338) returned 1
	[0122.413] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client" (normalized: "c:\\programdata\\microsoft\\assistance\\client"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.414] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client" (normalized: "c:\\programdata\\microsoft\\assistance\\client"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.414] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.414] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x3fc949a4, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3fc949a4, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.414] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1
	[0122.414] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.414] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.414] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.414] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.415] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.415] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0122.415] WriteFile (in: hFile=0x338, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0122.416] CloseHandle (hObject=0x338) returned 1
	[0122.416] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.417] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.417] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.417] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3fc949a4, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa8f17049, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x243448f1, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.417] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0122.417] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.417] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.417] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.418] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.419] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.420] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0122.420] WriteFile (in: hFile=0x338, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0122.422] CloseHandle (hObject=0x338) returned 1
	[0122.422] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.424] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.424] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.426] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x243448f1, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.426] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_CValidator.H1D", cAlternateFileName="HELP_C~1.H1D")) returned 1
	[0122.426] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_AssetId.H1W", cAlternateFileName="HELP_M~1.H1W")) returned 1
	[0122.426] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MKWD_BestBet.H1W", cAlternateFileName="HELP_M~2.H1W")) returned 1
	[0122.426] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MTOC_help.H1H", cAlternateFileName="HELP_M~1.H1H")) returned 1
	[0122.426] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.H1D", cAlternateFileName="HELP_M~1.H1D")) returned 1
	[0122.426] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help_MValidator.Lck", cAlternateFileName="HELP_M~1.LCK")) returned 1
	[0122.427] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", cAlternateFileName="HELP{9~1.H1Q")) returned 1
	[0122.427] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.427] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.428] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.429] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.429] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.429] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0122.429] WriteFile (in: hFile=0x338, lpBuffer=0x12636000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12636000*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0122.431] CloseHandle (hObject=0x338) returned 1
	[0122.431] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2436abaa, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xabde2c6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xa65a8bbf, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x2f22)) returned 1
	[0122.433] SetEvent (hEvent=0x70) returned 1
	[0122.433] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc)) returned 1
	[0122.433] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae409b6f, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae409b6f, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x325ec)) returned 1
	[0122.439] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.439] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.440] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae2660aa, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae2660aa, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x365fc)) returned 1
	[0122.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127323c0 | out: pbBuffer=0x127323c0) returned 1
	[0122.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e930 | out: pbBuffer=0x1251e930) returned 1
	[0122.440] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.458] GetFileType (hFile=0x33c) returned 0x1
	[0122.458] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.458] WriteFile (in: hFile=0x33c, lpBuffer=0x12878000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12878000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0122.459] GetFileType (hFile=0x33c) returned 0x1
	[0122.459] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0122.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0122.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0122.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ea88 | out: pbBuffer=0x1251ea88) returned 1
	[0122.460] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0122.460] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.460] WriteFile (in: hFile=0x340, lpBuffer=0x1276c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x1276c000*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.460] CloseHandle (hObject=0x340) returned 1
	[0122.460] CloseHandle (hObject=0x33c) returned 1
	[0122.460] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), lpNewFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.461] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.461] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.461] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944)) returned 1
	[0122.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127325e0 | out: pbBuffer=0x127325e0) returned 1
	[0122.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251eab0 | out: pbBuffer=0x1251eab0) returned 1
	[0122.462] ReadFile (in: hFile=0x33c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x126e7d1c*=0x3944, lpOverlapped=0x0) returned 1
	[0122.482] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0122.492] SetEvent (hEvent=0x30c) returned 1
	[0122.492] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.127] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.234] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.246] SetEvent (hEvent=0x80) returned 1
	[0123.246] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.248] SetEvent (hEvent=0x2e4) returned 1
	[0123.248] SetEvent (hEvent=0x70) returned 1
	[0123.248] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.252] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.331] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.353] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.361] SetEvent (hEvent=0x318) returned 1
	[0123.361] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.361] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0123.362] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1
	[0123.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732080 | out: pbBuffer=0x12732080) returned 1
	[0123.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788028 | out: pbBuffer=0x12788028) returned 1
	[0123.362] ReadFile (in: hFile=0x338, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x126e9d1c*=0x627e, lpOverlapped=0x0) returned 1
	[0123.377] GetFileType (hFile=0x338) returned 0x1
	[0123.377] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.377] WriteFile (in: hFile=0x338, lpBuffer=0x127d2000*, nNumberOfBytesToWrite=0x627e, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x127d2000*, lpNumberOfBytesWritten=0x126e9d00*=0x627e, lpOverlapped=0x126e9d0c) returned 1
	[0123.377] GetFileType (hFile=0x338) returned 0x1
	[0123.377] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x627e, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.377] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0123.378] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0123.378] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0123.378] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880f0 | out: pbBuffer=0x127880f0) returned 1
	[0123.378] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0123.378] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0123.378] WriteFile (in: hFile=0x2fc, lpBuffer=0x12770000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12770000*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.378] CloseHandle (hObject=0x2fc) returned 1
	[0123.379] CloseHandle (hObject=0x338) returned 1
	[0123.379] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySite.ico.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\mysite.ico.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.380] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\programdata\\microsoft\\office\\sharepointteamsite.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1
	[0123.384] SetEvent (hEvent=0x68) returned 1
	[0123.384] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.387] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.387] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.387] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.387] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0123.388] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0123.388] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.388] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.388] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.388] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.388] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.407] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0123.407] WriteFile (in: hFile=0x338, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0123.408] CloseHandle (hObject=0x338) returned 1
	[0123.408] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.408] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.408] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.476] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef116910, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.528] SetEvent (hEvent=0xa0) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL.trx_dll", cAlternateFileName="ENVELO~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL.trx_dll", cAlternateFileName="GRINTL~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.REST.trx_dll", cAlternateFileName="GRINTL~2.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL.trx_dll", cAlternateFileName="MAPIRD~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.REST.trx_dll", cAlternateFileName="MOR6IN~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.DLL.trx_dll", cAlternateFileName="MSOINT~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOINTL.REST.trx_dll", cAlternateFileName="MSOINT~2.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL.trx_dll", cAlternateFileName="OMSINT~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL.trx_dll", cAlternateFileName="ONINTL~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.REST.trx_dll", cAlternateFileName="ONINTL~2.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL.trx_dll", cAlternateFileName="OUTLLI~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.REST.trx_dll", cAlternateFileName="OUTLLI~2.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL.trx_dll", cAlternateFileName="OUTLWV~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL.trx_dll", cAlternateFileName="PPINTL~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.REST.trx_dll", cAlternateFileName="PPINTL~2.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL.trx_dll", cAlternateFileName="PUB6IN~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x8e160, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.REST.trx_dll", cAlternateFileName="PUB6IN~2.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.REST.trx_dll", cAlternateFileName="PUBWZI~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL.trx_dll", cAlternateFileName="SGRESD~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8e7d800, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xc8e7d800, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4160, dwReserved0=0x0, dwReserved1=0x0, cFileName="STINTL.DLL.trx_dll", cAlternateFileName="STINTL~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRRES.DLL.trx_dll", cAlternateFileName="VISBRR~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISINTL.DLL.trx_dll", cAlternateFileName="VISINT~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0ca650, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x25b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.DLL.trx_dll", cAlternateFileName="WWINTL~1.TRX")) returned 1
	[0123.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WWINTL.REST.trx_dll", cAlternateFileName="WWINTL~2.TRX")) returned 1
	[0123.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.DLL.trx_dll", cAlternateFileName="XLINTL~1.TRX")) returned 1
	[0123.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a375400, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a375400, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x137960, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLINTL32.REST.trx_dll", cAlternateFileName="XLINTL~2.TRX")) returned 1
	[0123.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSLICER.DLL.trx_dll", cAlternateFileName="XLSLIC~1.TRX")) returned 1
	[0123.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.530] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.531] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.531] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.531] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0123.532] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0123.532] WriteFile (in: hFile=0x338, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0123.533] CloseHandle (hObject=0x338) returned 1
	[0123.533] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1
	[0123.533] SetEvent (hEvent=0x68) returned 1
	[0123.533] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0xbf60)) returned 1
	[0123.536] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.538] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd48e100, ftCreationTime.dwHighDateTime=0x1cac7f7, ftLastAccessTime.dwLowDateTime=0xeedf6c30, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbd48e100, ftLastWriteTime.dwHighDateTime=0x1cac7f7, nFileSizeHigh=0x0, nFileSizeLow=0x3d960)) returned 1
	[0123.540] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.542] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.625] SetEvent (hEvent=0x318) returned 1
	[0123.625] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x49f60)) returned 1
	[0123.627] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0123.711] SetEvent (hEvent=0x318) returned 1
	[0123.712] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa27f6800, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa27f6800, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160)) returned 1
	[0123.713] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0124.006] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0124.224] SetEvent (hEvent=0x318) returned 1
	[0124.224] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.225] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0124.225] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960)) returned 1
	[0124.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0124.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0124.225] ReadFile (in: hFile=0x340, lpBuffer=0x128f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128f8000*, lpNumberOfBytesRead=0x124f1d1c*=0x17960, lpOverlapped=0x0) returned 1
	[0124.230] GetFileType (hFile=0x340) returned 0x1
	[0124.230] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.230] WriteFile (in: hFile=0x340, lpBuffer=0x12938000*, nNumberOfBytesToWrite=0x17960, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12938000*, lpNumberOfBytesWritten=0x124f1d00*=0x17960, lpOverlapped=0x124f1d0c) returned 1
	[0124.231] GetFileType (hFile=0x340) returned 0x1
	[0124.231] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x17960, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.231] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0124.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0124.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0124.232] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440e0 | out: pbBuffer=0x127440e0) returned 1
	[0124.232] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.232] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0124.232] WriteFile (in: hFile=0x2fc, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.232] CloseHandle (hObject=0x2fc) returned 1
	[0124.233] CloseHandle (hObject=0x340) returned 1
	[0124.234] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.259] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0124.261] SetEvent (hEvent=0x68) returned 1
	[0124.262] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.262] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.262] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60)) returned 1
	[0124.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e640 | out: pbBuffer=0x1240e640) returned 1
	[0124.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744108 | out: pbBuffer=0x12744108) returned 1
	[0124.262] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x126e5d1c*=0x7b60, lpOverlapped=0x0) returned 1
	[0124.266] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0124.266] SetEvent (hEvent=0x68) returned 1
	[0124.266] GetFileType (hFile=0x33c) returned 0x1
	[0124.266] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.266] WriteFile (in: hFile=0x33c, lpBuffer=0x126dc000*, nNumberOfBytesToWrite=0x7b60, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x126dc000*, lpNumberOfBytesWritten=0x126e5d00*=0x7b60, lpOverlapped=0x126e5d0c) returned 1
	[0124.267] GetFileType (hFile=0x33c) returned 0x1
	[0124.267] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x7b60, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0124.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0124.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0124.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441c0 | out: pbBuffer=0x127441c0) returned 1
	[0124.268] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.269] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.269] WriteFile (in: hFile=0x338, lpBuffer=0x1245a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a500*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.269] CloseHandle (hObject=0x338) returned 1
	[0124.270] CloseHandle (hObject=0x33c) returned 1
	[0124.272] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.300] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0124.303] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.303] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0124.303] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560)) returned 1
	[0124.303] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0124.303] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0124.303] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.420] SetEvent (hEvent=0xa0) returned 1
	[0124.422] GetFileType (hFile=0x33c) returned 0x1
	[0124.422] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.423] WriteFile (in: hFile=0x33c, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0124.423] GetFileType (hFile=0x33c) returned 0x1
	[0124.423] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0124.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0124.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0124.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e780 | out: pbBuffer=0x1251e780) returned 1
	[0124.424] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.424] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0124.424] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.448] CloseHandle (hObject=0x2fc) returned 1
	[0124.448] CloseHandle (hObject=0x33c) returned 1
	[0124.448] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.473] SetEvent (hEvent=0x70) returned 1
	[0124.473] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.473] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0124.473] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749d2200, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x749d2200, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x5ab60)) returned 1
	[0124.473] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6a0 | out: pbBuffer=0x1244c6a0) returned 1
	[0124.473] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e8c8 | out: pbBuffer=0x1251e8c8) returned 1
	[0124.473] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0124.474] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0124.474] SetEvent (hEvent=0xa0) returned 1
	[0124.474] SetEvent (hEvent=0x70) returned 1
	[0124.475] ReadFile (in: hFile=0x33c, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.517] GetFileType (hFile=0x33c) returned 0x1
	[0124.517] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.517] WriteFile (in: hFile=0x33c, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0124.518] GetFileType (hFile=0x33c) returned 0x1
	[0124.518] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.518] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0124.518] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0124.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0124.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0124.519] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.519] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0124.519] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.524] CloseHandle (hObject=0x340) returned 1
	[0124.524] CloseHandle (hObject=0x33c) returned 1
	[0124.524] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.543] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0124.543] SetEvent (hEvent=0x80) returned 1
	[0124.543] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.544] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.544] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf706700, ftCreationTime.dwHighDateTime=0x1cac81a, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xbf706700, ftLastWriteTime.dwHighDateTime=0x1cac81a, nFileSizeHigh=0x0, nFileSizeLow=0x6960)) returned 1
	[0124.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0124.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0124.544] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f3d1c*=0x6960, lpOverlapped=0x0) returned 1
	[0124.548] GetFileType (hFile=0x33c) returned 0x1
	[0124.548] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.548] WriteFile (in: hFile=0x33c, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0x6960, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x124f3d00*=0x6960, lpOverlapped=0x124f3d0c) returned 1
	[0124.548] GetFileType (hFile=0x33c) returned 0x1
	[0124.548] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x6960, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0124.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0124.549] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0124.549] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e770 | out: pbBuffer=0x1251e770) returned 1
	[0124.549] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.549] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.549] WriteFile (in: hFile=0x2fc, lpBuffer=0x12634500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12634500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.549] CloseHandle (hObject=0x2fc) returned 1
	[0124.550] CloseHandle (hObject=0x33c) returned 1
	[0124.551] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.600] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0124.601] SetEvent (hEvent=0x80) returned 1
	[0124.601] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.601] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.601] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb31c100, ftCreationTime.dwHighDateTime=0x1cacd25, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xcb31c100, ftLastWriteTime.dwHighDateTime=0x1cacd25, nFileSizeHigh=0x0, nFileSizeLow=0x115b60)) returned 1
	[0124.601] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6c0 | out: pbBuffer=0x1244c6c0) returned 1
	[0124.601] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e8d8 | out: pbBuffer=0x1251e8d8) returned 1
	[0124.601] ReadFile (in: hFile=0x340, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.610] GetFileType (hFile=0x340) returned 0x1
	[0124.610] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.610] WriteFile (in: hFile=0x340, lpBuffer=0x128f8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x128f8000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0124.611] GetFileType (hFile=0x340) returned 0x1
	[0124.611] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0124.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0124.612] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0124.612] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ea10 | out: pbBuffer=0x1251ea10) returned 1
	[0124.612] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.612] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.613] WriteFile (in: hFile=0x32c, lpBuffer=0x12634f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12634f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.622] CloseHandle (hObject=0x32c) returned 1
	[0124.623] CloseHandle (hObject=0x340) returned 1
	[0124.623] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.664] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0124.667] SetEvent (hEvent=0x30c) returned 1
	[0124.668] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.668] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.668] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfe092000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfe092000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3d60)) returned 1
	[0124.668] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0124.668] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0124.669] ReadFile (in: hFile=0x32c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x126e5d1c*=0x3d60, lpOverlapped=0x0) returned 1
	[0124.672] GetFileType (hFile=0x32c) returned 0x1
	[0124.672] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.672] WriteFile (in: hFile=0x32c, lpBuffer=0x1248a000*, nNumberOfBytesToWrite=0x3d60, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x1248a000*, lpNumberOfBytesWritten=0x126e5d00*=0x3d60, lpOverlapped=0x126e5d0c) returned 1
	[0124.673] GetFileType (hFile=0x32c) returned 0x1
	[0124.673] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x3d60, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0124.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0124.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0124.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0124.674] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.674] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.674] WriteFile (in: hFile=0x338, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.674] CloseHandle (hObject=0x338) returned 1
	[0124.675] CloseHandle (hObject=0x32c) returned 1
	[0124.685] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.751] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0124.755] SetEvent (hEvent=0x30c) returned 1
	[0124.755] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x62875600, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x62875600, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3d960)) returned 1
	[0124.755] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0124.796] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960)) returned 1
	[0124.796] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x9f560)) returned 1
	[0124.796] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.797] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.797] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x35960)) returned 1
	[0124.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0124.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0124.797] ReadFile (in: hFile=0x338, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.844] GetFileType (hFile=0x338) returned 0x1
	[0124.844] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.844] WriteFile (in: hFile=0x338, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0124.844] GetFileType (hFile=0x338) returned 0x1
	[0124.845] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.845] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0124.845] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0124.845] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0124.845] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0124.845] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.845] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.845] WriteFile (in: hFile=0x340, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.846] CloseHandle (hObject=0x340) returned 1
	[0124.846] CloseHandle (hObject=0x338) returned 1
	[0124.846] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.847] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560)) returned 1
	[0124.847] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560)) returned 1
	[0124.847] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.847] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.847] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19196700, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x19196700, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0x43560)) returned 1
	[0124.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322e0 | out: pbBuffer=0x127322e0) returned 1
	[0124.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0124.848] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0124.848] SetEvent (hEvent=0x80) returned 1
	[0124.848] ReadFile (in: hFile=0x338, lpBuffer=0x128a6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x128a6000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.862] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0124.951] SetEvent (hEvent=0x68) returned 1
	[0124.951] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.043] SetEvent (hEvent=0x2e4) returned 1
	[0125.043] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.044] SetEvent (hEvent=0x2e4) returned 1
	[0125.044] SetEvent (hEvent=0x68) returned 1
	[0125.044] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC" (normalized: "c:\\programdata\\microsoft\\rac"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.044] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC" (normalized: "c:\\programdata\\microsoft\\rac"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.044] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.044] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.044] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outbound", cAlternateFileName="")) returned 1
	[0125.044] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee2dd40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xee2dd40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PublishedData", cAlternateFileName="PUBLIS~1")) returned 1
	[0125.044] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee2dd40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xee2dd40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateData", cAlternateFileName="STATED~1")) returned 1
	[0125.044] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf01cf20, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xf01cf20, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0125.045] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.045] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.045] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.045] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.045] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.062] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.062] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.063] CloseHandle (hObject=0x2cc) returned 1
	[0125.064] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound" (normalized: "c:\\programdata\\microsoft\\rac\\outbound"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.064] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound" (normalized: "c:\\programdata\\microsoft\\rac\\outbound"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.064] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.064] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd6e33921, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.065] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.065] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.065] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.065] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.065] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Outbound\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\outbound\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.066] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.066] WriteFile (in: hFile=0x2cc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.067] CloseHandle (hObject=0x2cc) returned 1
	[0125.068] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee2dd40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xee2dd40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.068] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.068] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee2dd40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xee2dd40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.068] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee2dd40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xee2dd40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.068] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee2dd40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x34a04590, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacWmiDatabase.sdf", cAlternateFileName="RACWMI~1.SDF")) returned 1
	[0125.068] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.068] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.069] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.069] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.069] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.073] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.073] WriteFile (in: hFile=0x2fc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.074] CloseHandle (hObject=0x2fc) returned 1
	[0125.074] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xece09220, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xee2dd40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x34a04590, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1
	[0125.075] SetEvent (hEvent=0x30c) returned 1
	[0125.075] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData" (normalized: "c:\\programdata\\microsoft\\rac\\statedata"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee2dd40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xee2dd40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0125.075] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData" (normalized: "c:\\programdata\\microsoft\\rac\\statedata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.075] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee2dd40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xee2dd40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.076] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xee2dd40, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xee2dd40, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.076] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x341b65f0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x85000, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacDatabase.sdf", cAlternateFileName="RACDAT~1.SDF")) returned 1
	[0125.076] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8, dwReserved0=0x0, dwReserved1=0x0, cFileName="RacMetaData.dat", cAlternateFileName="RACMET~1.DAT")) returned 1
	[0125.076] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.076] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.076] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.076] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.076] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.130] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.130] WriteFile (in: hFile=0x338, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.131] CloseHandle (hObject=0x338) returned 1
	[0125.132] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb35800, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xecb35800, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x341b65f0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x85000)) returned 1
	[0125.132] SetEvent (hEvent=0x30c) returned 1
	[0125.132] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e1e72ec, ftCreationTime.dwHighDateTime=0x1cb8927, ftLastAccessTime.dwLowDateTime=0x4e1e72ec, ftLastAccessTime.dwHighDateTime=0x1cb8927, ftLastWriteTime.dwLowDateTime=0xbddddec0, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x8)) returned 1
	[0125.132] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp" (normalized: "c:\\programdata\\microsoft\\rac\\temp"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf01cf20, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xf01cf20, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.132] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp" (normalized: "c:\\programdata\\microsoft\\rac\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.132] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf01cf20, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xf01cf20, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.133] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xf01cf20, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xf01cf20, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.133] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef5e840, ftCreationTime.dwHighDateTime=0x1d62440, ftLastAccessTime.dwLowDateTime=0xef5e840, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xefaab00, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql7B95.tmp", cAlternateFileName="")) returned 1
	[0125.133] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf01cf20, ftCreationTime.dwHighDateTime=0x1d62440, ftLastAccessTime.dwLowDateTime=0xf01cf20, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xf043080, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql7BE4.tmp", cAlternateFileName="")) returned 1
	[0125.133] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.133] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.133] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.133] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.133] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.134] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.134] WriteFile (in: hFile=0x338, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.136] CloseHandle (hObject=0x338) returned 1
	[0125.136] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7B95.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7b95.tmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef5e840, ftCreationTime.dwHighDateTime=0x1d62440, ftLastAccessTime.dwLowDateTime=0xef5e840, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xefaab00, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1
	[0125.136] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7BE4.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7be4.tmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf01cf20, ftCreationTime.dwHighDateTime=0x1d62440, ftLastAccessTime.dwLowDateTime=0xf01cf20, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xf043080, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1
	[0125.137] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search" (normalized: "c:\\programdata\\microsoft\\search"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.141] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search" (normalized: "c:\\programdata\\microsoft\\search"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.141] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.141] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27df8b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27df8b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.141] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
	[0125.141] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.141] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.141] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.141] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.141] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.142] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.142] WriteFile (in: hFile=0x2fc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.143] CloseHandle (hObject=0x2fc) returned 1
	[0125.144] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data" (normalized: "c:\\programdata\\microsoft\\search\\data"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.144] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data" (normalized: "c:\\programdata\\microsoft\\search\\data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.144] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.144] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27df8b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.144] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1
	[0125.144] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e1ecc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0125.144] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.144] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.145] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\data\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.145] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\data\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.145] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\data\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.151] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.151] WriteFile (in: hFile=0x338, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.152] CloseHandle (hObject=0x338) returned 1
	[0125.152] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.156] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.156] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.157] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.157] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0125.157] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.157] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.157] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.157] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.157] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.158] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0125.158] WriteFile (in: hFile=0x2fc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0125.159] CloseHandle (hObject=0x2fc) returned 1
	[0125.166] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.167] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.167] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.170] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.171] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e6af80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27e6af80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config", cAlternateFileName="")) returned 1
	[0125.171] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29932700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29932700, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GatherLogs", cAlternateFileName="GATHER~1")) returned 1
	[0125.171] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29612a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29612a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSS.chk", cAlternateFileName="")) returned 1
	[0125.171] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x295a0600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x295a0600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSS.log", cAlternateFileName="")) returned 1
	[0125.171] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x295c6760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x295c6760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x295ec8c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSres00001.jrs", cAlternateFileName="MSSRES~1.JRS")) returned 1
	[0125.171] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x295ec8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x295ec8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x295ec8c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSres00002.jrs", cAlternateFileName="MSSRES~2.JRS")) returned 1
	[0125.171] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e6af80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27eb7240, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27eb7240, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Projects", cAlternateFileName="")) returned 1
	[0125.171] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29612a20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29612a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x42291130, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4810000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows.edb", cAlternateFileName="")) returned 1
	[0125.171] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.171] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.172] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp" (normalized: "c:\\programdata\\microsoft\\search\\data\\temp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x422b7290, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.173] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp" (normalized: "c:\\programdata\\microsoft\\search\\data\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.173] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.173] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27e1ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27e1ecc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x422b7290, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.173] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.173] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.173] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\data\\temp\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.174] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\data\\temp\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.174] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\search\\data\\temp\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.174] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0125.174] WriteFile (in: hFile=0x2fc, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0125.176] CloseHandle (hObject=0x2fc) returned 1
	[0125.176] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures" (normalized: "c:\\programdata\\microsoft\\user account pictures"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.176] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures" (normalized: "c:\\programdata\\microsoft\\user account pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.176] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.182] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.182] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz.dat", cAlternateFileName="5P5NRG~1.DAT")) returned 1
	[0125.182] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default Pictures", cAlternateFileName="DEFAUL~1")) returned 1
	[0125.182] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1
	[0125.182] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1
	[0125.182] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.182] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.184] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\user account pictures\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.185] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\user account pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.185] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\user account pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.187] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.187] WriteFile (in: hFile=0x2fc, lpBuffer=0x12767300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12767300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.189] CloseHandle (hObject=0x2fc) returned 1
	[0125.189] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29423840, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29423840, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29423840, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.191] SetEvent (hEvent=0x2e4) returned 1
	[0125.191] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.191] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.191] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80366a76, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80366a76, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile10.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile11.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile12.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile13.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile14.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile15.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile16.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile17.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile18.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile19.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile20.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile21.bmp", cAlternateFileName="")) returned 1
	[0125.195] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile22.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile23.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile24.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile25.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile26.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile27.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile28.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile29.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile30.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile31.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile32.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile33.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile34.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile35.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile36.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile37.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile38.bmp", cAlternateFileName="")) returned 1
	[0125.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile39.bmp", cAlternateFileName="")) returned 1
	[0125.197] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile40.bmp", cAlternateFileName="")) returned 1
	[0125.197] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile41.bmp", cAlternateFileName="")) returned 1
	[0125.197] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile42.bmp", cAlternateFileName="")) returned 1
	[0125.197] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile43.bmp", cAlternateFileName="")) returned 1
	[0125.197] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038, dwReserved0=0x0, dwReserved1=0x0, cFileName="usertile44.bmp", cAlternateFileName="")) returned 1
	[0125.197] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.197] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.198] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.200] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.200] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.204] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.204] WriteFile (in: hFile=0x2fc, lpBuffer=0x12768600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12768600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.206] CloseHandle (hObject=0x2fc) returned 1
	[0125.206] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xda0a8861, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.208] SetEvent (hEvent=0x68) returned 1
	[0125.208] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae24f474, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae24f474, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb5a2927, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.208] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2755d1, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2755d1, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb6d3417, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.209] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae29b72e, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae29b72e, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb76b98f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbeb8)) returned 1
	[0125.209] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdb82a065, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.210] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.211] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.211] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.211] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.211] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae2e79e8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae2e79e8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdbb95fd7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.211] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae30db45, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae30db45, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdca9c9ed, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.212] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.212] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.212] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.212] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.212] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc3f8f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.213] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae333ca2, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae333ca2, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc65a55, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.216] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae359dff, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae359dff, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdcc8bbb3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.216] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae37ff5c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae37ff5c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdccb1d11, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.216] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd069f3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.217] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3a60b9, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3a60b9, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd09009d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.219] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3cc216, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3cc216, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd0b61fb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.220] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd232fa7, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.220] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd259105, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.220] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae3f2373, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae3f2373, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd27f263, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.222] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4184d0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4184d0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd2a53c1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.223] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3177db, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.223] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae43e62d, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae43e62d, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd33d939, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.223] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae46478a, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae46478a, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.226] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd3fc00f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.226] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae48a8e7, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae48a8e7, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd42216d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.226] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4b0a44, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4b0a44, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd4482cb, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.226] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9c9561, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.229] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae4fccfe, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae4fccfe, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.229] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae548fb8, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae548fb8, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xdd9ef6bf, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.230] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae595272, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae595272, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.230] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5bb3cf, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5bb3cf, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddb6c46b, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.235] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae5e152c, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae5e152c, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc2ab41, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.235] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae607689, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae607689, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddc50c9f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.235] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae62d7e6, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae62d7e6, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddcc30b9, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.236] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddce9217, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.236] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.236] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.236] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.236] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.236] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae653943, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae653943, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd0f375, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.237] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xae679aa0, ftCreationTime.dwHighDateTime=0x1ca040d, ftLastAccessTime.dwLowDateTime=0xae679aa0, ftLastAccessTime.dwHighDateTime=0x1ca040d, ftLastWriteTime.dwLowDateTime=0xddd354d3, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.237] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.237] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.237] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.237] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.238] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.238] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.238] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.238] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0125.238] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xc038)) returned 1
	[0125.239] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f120 | out: pbBuffer=0x1240f120) returned 1
	[0125.239] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251eb60 | out: pbBuffer=0x1251eb60) returned 1
	[0125.239] ReadFile (in: hFile=0x2fc, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x126ebd1c*=0xc038, lpOverlapped=0x0) returned 1
	[0125.246] GetFileType (hFile=0x2fc) returned 0x1
	[0125.246] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.246] WriteFile (in: hFile=0x2fc, lpBuffer=0x127d6000*, nNumberOfBytesToWrite=0xc038, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x127d6000*, lpNumberOfBytesWritten=0x126ebd00*=0xc038, lpOverlapped=0x126ebd0c) returned 1
	[0125.246] GetFileType (hFile=0x2fc) returned 0x1
	[0125.247] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xc038, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.247] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0125.247] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0125.247] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0125.247] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ec28 | out: pbBuffer=0x1251ec28) returned 1
	[0125.247] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.247] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0125.247] WriteFile (in: hFile=0x2cc, lpBuffer=0x12580000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12580000*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.248] CloseHandle (hObject=0x2cc) returned 1
	[0125.248] CloseHandle (hObject=0x2fc) returned 1
	[0125.248] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.254] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.300] SetEvent (hEvent=0x30c) returned 1
	[0125.300] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.307] SetEvent (hEvent=0x30c) returned 1
	[0125.307] SetEvent (hEvent=0x68) returned 1
	[0125.307] SetEvent (hEvent=0x2e4) returned 1
	[0125.307] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.319] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.321] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.321] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1262bd0c | out: lpMode=0x1262bd0c) returned 0
	[0125.321] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x1262bad0 | out: lpFileInformation=0x1262bad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0125.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0125.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0125.322] ReadFile (in: hFile=0x2cc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1262bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1262bd1c*=0x146, lpOverlapped=0x0) returned 1
	[0125.323] GetFileType (hFile=0x2cc) returned 0x1
	[0125.323] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1262bce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.323] WriteFile (in: hFile=0x2cc, lpBuffer=0x12742000*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x1262bd00, lpOverlapped=0x1262bd0c | out: lpBuffer=0x12742000*, lpNumberOfBytesWritten=0x1262bd00*=0x146, lpOverlapped=0x1262bd0c) returned 1
	[0125.324] GetFileType (hFile=0x2cc) returned 0x1
	[0125.324] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x146, lpNewFilePointer=0x0, dwMoveMethod=0x1262bce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0125.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0125.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0125.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0125.325] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.325] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1262bd0c | out: lpMode=0x1262bd0c) returned 0
	[0125.325] WriteFile (in: hFile=0x340, lpBuffer=0x12614000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1262bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12614000*, lpNumberOfBytesWritten=0x1262bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.326] CloseHandle (hObject=0x340) returned 1
	[0125.327] CloseHandle (hObject=0x2cc) returned 1
	[0125.327] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.346] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.347] SetEvent (hEvent=0x80) returned 1
	[0125.347] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.348] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.348] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x113ae4d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x113ae4d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1146cbb0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1
	[0125.348] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0125.348] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0125.348] ReadFile (in: hFile=0x2cc, lpBuffer=0x126e2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126e2000*, lpNumberOfBytesRead=0x12429d1c*=0x17c, lpOverlapped=0x0) returned 1
	[0125.349] GetFileType (hFile=0x2cc) returned 0x1
	[0125.349] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.350] WriteFile (in: hFile=0x2cc, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x12429d00*=0x17c, lpOverlapped=0x12429d0c) returned 1
	[0125.350] GetFileType (hFile=0x2cc) returned 0x1
	[0125.350] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0125.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0125.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0125.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0125.350] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.351] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.351] WriteFile (in: hFile=0x340, lpBuffer=0x12614500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12614500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.351] CloseHandle (hObject=0x340) returned 1
	[0125.352] CloseHandle (hObject=0x2cc) returned 1
	[0125.353] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.370] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.371] SetEvent (hEvent=0x80) returned 1
	[0125.371] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.372] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.372] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0125.372] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0125.372] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e738 | out: pbBuffer=0x1251e738) returned 1
	[0125.372] ReadFile (in: hFile=0x2cc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f3d1c*=0x146, lpOverlapped=0x0) returned 1
	[0125.373] GetFileType (hFile=0x2cc) returned 0x1
	[0125.373] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.373] WriteFile (in: hFile=0x2cc, lpBuffer=0x1247c9a0*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1247c9a0*, lpNumberOfBytesWritten=0x124f3d00*=0x146, lpOverlapped=0x124f3d0c) returned 1
	[0125.374] GetFileType (hFile=0x2cc) returned 0x1
	[0125.374] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x146, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0125.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0125.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e81 | out: pbBuffer=0x127e8e81) returned 1
	[0125.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e840 | out: pbBuffer=0x1251e840) returned 1
	[0125.374] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.375] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.375] WriteFile (in: hFile=0x340, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.375] CloseHandle (hObject=0x340) returned 1
	[0125.376] CloseHandle (hObject=0x2cc) returned 1
	[0125.377] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.396] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.398] SetEvent (hEvent=0x318) returned 1
	[0125.398] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.398] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.398] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1
	[0125.398] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0125.398] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0125.398] ReadFile (in: hFile=0x338, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0x14c, lpOverlapped=0x0) returned 1
	[0125.400] GetFileType (hFile=0x338) returned 0x1
	[0125.400] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.400] WriteFile (in: hFile=0x338, lpBuffer=0x1247c6e0*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1247c6e0*, lpNumberOfBytesWritten=0x124f5d00*=0x14c, lpOverlapped=0x124f5d0c) returned 1
	[0125.400] GetFileType (hFile=0x338) returned 0x1
	[0125.400] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x14c, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0125.400] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0125.401] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0125.401] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0125.401] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.401] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.401] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.401] CloseHandle (hObject=0x340) returned 1
	[0125.402] CloseHandle (hObject=0x338) returned 1
	[0125.402] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.462] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.463] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.463] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.463] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2689510, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0125.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0125.464] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0125.464] ReadFile (in: hFile=0x338, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f1d1c*=0x152, lpOverlapped=0x0) returned 1
	[0125.465] GetFileType (hFile=0x338) returned 0x1
	[0125.465] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.465] WriteFile (in: hFile=0x338, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x124f1d00*=0x152, lpOverlapped=0x124f1d0c) returned 1
	[0125.465] GetFileType (hFile=0x338) returned 0x1
	[0125.465] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x152, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0125.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0125.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0125.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0125.466] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.466] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.466] WriteFile (in: hFile=0x340, lpBuffer=0x12462000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12462000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.466] CloseHandle (hObject=0x340) returned 1
	[0125.467] CloseHandle (hObject=0x338) returned 1
	[0125.467] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.483] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.484] SetEvent (hEvent=0x68) returned 1
	[0125.484] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.484] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.484] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1
	[0125.484] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c480 | out: pbBuffer=0x1244c480) returned 1
	[0125.485] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441d8 | out: pbBuffer=0x127441d8) returned 1
	[0125.485] ReadFile (in: hFile=0x338, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12429d1c*=0x170, lpOverlapped=0x0) returned 1
	[0125.486] GetFileType (hFile=0x338) returned 0x1
	[0125.486] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.486] WriteFile (in: hFile=0x338, lpBuffer=0x12898000*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12898000*, lpNumberOfBytesWritten=0x12429d00*=0x170, lpOverlapped=0x12429d0c) returned 1
	[0125.486] GetFileType (hFile=0x338) returned 0x1
	[0125.486] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x170, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.486] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0125.487] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0125.487] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0125.487] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744290 | out: pbBuffer=0x12744290) returned 1
	[0125.487] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.487] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.487] WriteFile (in: hFile=0x340, lpBuffer=0x12462a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12462a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.494] CloseHandle (hObject=0x340) returned 1
	[0125.495] CloseHandle (hObject=0x338) returned 1
	[0125.496] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.524] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.525] SetEvent (hEvent=0x68) returned 1
	[0125.525] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.525] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.525] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0125.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6a0 | out: pbBuffer=0x1244c6a0) returned 1
	[0125.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127442a8 | out: pbBuffer=0x127442a8) returned 1
	[0125.525] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0125.527] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0125.527] SetEvent (hEvent=0x68) returned 1
	[0125.528] ReadFile (in: hFile=0x338, lpBuffer=0x12922000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12922000*, lpNumberOfBytesRead=0x124f3d1c*=0x15e, lpOverlapped=0x0) returned 1
	[0125.532] GetFileType (hFile=0x338) returned 0x1
	[0125.532] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.532] WriteFile (in: hFile=0x338, lpBuffer=0x1263a2c0*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1263a2c0*, lpNumberOfBytesWritten=0x124f3d00*=0x15e, lpOverlapped=0x124f3d0c) returned 1
	[0125.532] GetFileType (hFile=0x338) returned 0x1
	[0125.532] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x15e, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.532] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401301 | out: pbBuffer=0x12401301) returned 1
	[0125.532] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401401 | out: pbBuffer=0x12401401) returned 1
	[0125.532] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401501 | out: pbBuffer=0x12401501) returned 1
	[0125.533] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744410 | out: pbBuffer=0x12744410) returned 1
	[0125.533] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.533] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.533] WriteFile (in: hFile=0x340, lpBuffer=0x12462f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12462f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.533] CloseHandle (hObject=0x340) returned 1
	[0125.534] CloseHandle (hObject=0x338) returned 1
	[0125.542] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.585] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.586] SetEvent (hEvent=0x70) returned 1
	[0125.587] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.587] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.587] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x527122e0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0125.587] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0125.587] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0125.587] ReadFile (in: hFile=0x2fc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f5d1c*=0x15e, lpOverlapped=0x0) returned 1
	[0125.589] GetFileType (hFile=0x2fc) returned 0x1
	[0125.589] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.589] WriteFile (in: hFile=0x2fc, lpBuffer=0x1247c580*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1247c580*, lpNumberOfBytesWritten=0x124f5d00*=0x15e, lpOverlapped=0x124f5d0c) returned 1
	[0125.589] GetFileType (hFile=0x2fc) returned 0x1
	[0125.589] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x15e, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0125.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0125.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0125.590] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441a0 | out: pbBuffer=0x127441a0) returned 1
	[0125.590] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.590] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.590] WriteFile (in: hFile=0x340, lpBuffer=0x12462500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12462500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.590] CloseHandle (hObject=0x340) returned 1
	[0125.591] CloseHandle (hObject=0x2fc) returned 1
	[0125.591] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.606] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.608] SetEvent (hEvent=0x70) returned 1
	[0125.608] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.608] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.608] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0125.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6a0 | out: pbBuffer=0x1244c6a0) returned 1
	[0125.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744288 | out: pbBuffer=0x12744288) returned 1
	[0125.608] ReadFile (in: hFile=0x2fc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f1d1c*=0x152, lpOverlapped=0x0) returned 1
	[0125.609] GetFileType (hFile=0x2fc) returned 0x1
	[0125.610] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.610] WriteFile (in: hFile=0x2fc, lpBuffer=0x1247c840*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1247c840*, lpNumberOfBytesWritten=0x124f1d00*=0x152, lpOverlapped=0x124f1d0c) returned 1
	[0125.610] GetFileType (hFile=0x2fc) returned 0x1
	[0125.610] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x152, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0125.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401681 | out: pbBuffer=0x12401681) returned 1
	[0125.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401781 | out: pbBuffer=0x12401781) returned 1
	[0125.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444d0 | out: pbBuffer=0x127444d0) returned 1
	[0125.611] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.611] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.611] WriteFile (in: hFile=0x340, lpBuffer=0x12463400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12463400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.611] CloseHandle (hObject=0x340) returned 1
	[0125.612] CloseHandle (hObject=0x2fc) returned 1
	[0125.613] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.647] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.647] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.647] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaf8556a0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xaf8556a0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb07822e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa4)) returned 1
	[0125.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244ccc0 | out: pbBuffer=0x1244ccc0) returned 1
	[0125.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127445b8 | out: pbBuffer=0x127445b8) returned 1
	[0125.647] ReadFile (in: hFile=0x340, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0xa4, lpOverlapped=0x0) returned 1
	[0125.650] GetFileType (hFile=0x340) returned 0x1
	[0125.650] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.650] WriteFile (in: hFile=0x340, lpBuffer=0x12781ce0*, nNumberOfBytesToWrite=0xa4, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12781ce0*, lpNumberOfBytesWritten=0x12429d00*=0xa4, lpOverlapped=0x12429d0c) returned 1
	[0125.650] GetFileType (hFile=0x340) returned 0x1
	[0125.650] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xa4, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12624001 | out: pbBuffer=0x12624001) returned 1
	[0125.651] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12624101 | out: pbBuffer=0x12624101) returned 1
	[0125.651] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12624201 | out: pbBuffer=0x12624201) returned 1
	[0125.651] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744670 | out: pbBuffer=0x12744670) returned 1
	[0125.651] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0125.651] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.651] WriteFile (in: hFile=0x32c, lpBuffer=0x1262c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262c000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.652] CloseHandle (hObject=0x32c) returned 1
	[0125.652] CloseHandle (hObject=0x340) returned 1
	[0125.652] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.652] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.847] SetEvent (hEvent=0x70) returned 1
	[0125.847] SetEvent (hEvent=0x30c) returned 1
	[0125.847] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0125.941] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0126.019] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0126.030] SetEvent (hEvent=0x70) returned 1
	[0126.030] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0126.030] SetEvent (hEvent=0x70) returned 1
	[0126.030] SetEvent (hEvent=0x30c) returned 1
	[0126.031] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.031] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261b900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1261b900*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0126.033] CloseHandle (hObject=0x2cc) returned 1
	[0126.033] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1
	[0126.034] SetEvent (hEvent=0x30c) returned 1
	[0126.035] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8)) returned 1
	[0126.035] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.044] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.044] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.045] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.045] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0126.045] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.045] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.045] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.045] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.045] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.046] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0126.046] WriteFile (in: hFile=0x338, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0126.047] CloseHandle (hObject=0x338) returned 1
	[0126.047] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.049] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.049] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.049] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.049] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0126.049] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.049] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.050] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.050] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.050] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.050] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0126.050] WriteFile (in: hFile=0x338, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0126.053] CloseHandle (hObject=0x338) returned 1
	[0126.053] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.053] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.053] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.054] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.054] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0126.054] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0126.054] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.054] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.054] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.054] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.054] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.065] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0126.065] WriteFile (in: hFile=0x2fc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0126.067] CloseHandle (hObject=0x2fc) returned 1
	[0126.067] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb)) returned 1
	[0126.069] SetEvent (hEvent=0x30c) returned 1
	[0126.069] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb17b200, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfb17b200, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfb17b200, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000)) returned 1
	[0126.073] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.091] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.092] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.092] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.092] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0126.092] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.092] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.092] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.092] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.093] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.093] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0126.093] WriteFile (in: hFile=0x340, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0126.095] CloseHandle (hObject=0x340) returned 1
	[0126.095] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.095] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.095] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.095] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94d4300, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94d4300, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0126.096] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.096] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.096] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.096] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.096] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.097] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0126.097] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0126.100] CloseHandle (hObject=0x340) returned 1
	[0126.100] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.109] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.109] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.109] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf94d4300, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf94fa460, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0xf94fa460, ftLastWriteTime.dwHighDateTime=0x1d2fc27, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0126.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0126.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.110] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.110] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.110] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.110] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.114] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0126.114] WriteFile (in: hFile=0x2cc, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0126.115] CloseHandle (hObject=0x2cc) returned 1
	[0126.115] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e)) returned 1
	[0126.116] SetEvent (hEvent=0x30c) returned 1
	[0126.116] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfeab3900, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfeab3900, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfeab3900, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0126.116] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.169] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.169] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.169] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.169] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0126.169] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.170] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.170] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.170] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.170] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.172] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0126.172] WriteFile (in: hFile=0x2fc, lpBuffer=0x12619300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12619300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0126.175] CloseHandle (hObject=0x2fc) returned 1
	[0126.175] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.192] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.192] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.192] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa931c450, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa931c450, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.192] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0126.192] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.192] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.193] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.193] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.193] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.193] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0126.193] WriteFile (in: hFile=0x340, lpBuffer=0x1261a600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x1261a600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0126.196] CloseHandle (hObject=0x340) returned 1
	[0126.196] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.196] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.196] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.196] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa931c450, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa93425b0, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa93425b0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.197] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0126.197] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0126.197] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.197] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.197] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.197] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.197] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.210] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0126.210] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261cc00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x1261cc00*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0126.211] CloseHandle (hObject=0x2cc) returned 1
	[0126.211] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x165257)) returned 1
	[0126.215] SetEvent (hEvent=0x30c) returned 1
	[0126.215] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd7a0c00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xfd7a0c00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xfd7a0c00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x24000)) returned 1
	[0126.219] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a1e5b40, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a20bca0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a20bca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.228] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0126.241] SetEvent (hEvent=0x30c) returned 1
	[0126.241] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0126.274] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0126.311] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0126.551] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0126.820] SetEvent (hEvent=0x30c) returned 1
	[0126.820] SetEvent (hEvent=0x2e4) returned 1
	[0126.821] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0126.869] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0126.869] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0126.869] SetEvent (hEvent=0x2e4) returned 1
	[0126.869] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0126.907] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0126.907] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.907] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0126.908] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1
	[0126.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0126.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0126.908] ReadFile (in: hFile=0x2cc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.958] GetFileType (hFile=0x2cc) returned 0x1
	[0126.958] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.958] WriteFile (in: hFile=0x2cc, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0126.959] GetFileType (hFile=0x2cc) returned 0x1
	[0126.959] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.959] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0126.959] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0126.960] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0126.960] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0126.960] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.960] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0126.960] WriteFile (in: hFile=0x2fc, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.960] CloseHandle (hObject=0x2fc) returned 1
	[0126.961] CloseHandle (hObject=0x2cc) returned 1
	[0126.961] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.962] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0127.179] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0127.428] SetEvent (hEvent=0x2e4) returned 1
	[0127.428] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0127.475] SetEvent (hEvent=0x318) returned 1
	[0127.475] SetEvent (hEvent=0x30c) returned 1
	[0127.475] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0127.548] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0127.621] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0127.780] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0127.896] SetEvent (hEvent=0x30c) returned 1
	[0127.896] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0127.896] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0127.896] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa912d270, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa912d270, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xe9f9cff0, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x2fe)) returned 1
	[0127.896] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0127.896] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0127.896] ReadFile (in: hFile=0x2fc, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x1242bd1c*=0x2fe, lpOverlapped=0x0) returned 1
	[0127.940] GetFileType (hFile=0x2fc) returned 0x1
	[0127.940] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.940] WriteFile (in: hFile=0x2fc, lpBuffer=0x1260a300*, nNumberOfBytesToWrite=0x2fe, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260a300*, lpNumberOfBytesWritten=0x1242bd00*=0x2fe, lpOverlapped=0x1242bd0c) returned 1
	[0127.940] GetFileType (hFile=0x2fc) returned 0x1
	[0127.940] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x2fe, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0127.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0127.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0127.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0127.941] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0127.941] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0127.941] WriteFile (in: hFile=0x2cc, lpBuffer=0x12724000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12724000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0127.941] CloseHandle (hObject=0x2cc) returned 1
	[0127.941] CloseHandle (hObject=0x2fc) returned 1
	[0127.941] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0127.942] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0127.942] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0127.942] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcad7040, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcad7040, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x105e7220, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1
	[0127.942] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c280 | out: pbBuffer=0x1244c280) returned 1
	[0127.943] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0127.943] ReadFile (in: hFile=0x2fc, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x124f1d1c*=0x29a, lpOverlapped=0x0) returned 1
	[0127.944] GetFileType (hFile=0x2fc) returned 0x1
	[0127.944] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.944] WriteFile (in: hFile=0x2fc, lpBuffer=0x124b02c0*, nNumberOfBytesToWrite=0x29a, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124b02c0*, lpNumberOfBytesWritten=0x124f1d00*=0x29a, lpOverlapped=0x124f1d0c) returned 1
	[0127.944] GetFileType (hFile=0x2fc) returned 0x1
	[0127.944] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x29a, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0127.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0127.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0127.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441d0 | out: pbBuffer=0x127441d0) returned 1
	[0127.944] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0127.945] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0127.945] WriteFile (in: hFile=0x2cc, lpBuffer=0x12724500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12724500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0127.945] CloseHandle (hObject=0x2cc) returned 1
	[0127.945] CloseHandle (hObject=0x2fc) returned 1
	[0127.945] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.347] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0128.348] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.348] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64c20, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xca64c20, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xfe5c3760, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x71080)) returned 1
	[0128.348] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127328e0 | out: pbBuffer=0x127328e0) returned 1
	[0128.348] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788378 | out: pbBuffer=0x12788378) returned 1
	[0128.348] ReadFile (in: hFile=0x2fc, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0128.438] GetFileType (hFile=0x2fc) returned 0x1
	[0128.439] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.439] WriteFile (in: hFile=0x2fc, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0128.439] GetFileType (hFile=0x2fc) returned 0x1
	[0128.439] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0128.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0128.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0128.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744290 | out: pbBuffer=0x12744290) returned 1
	[0128.440] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.441] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.441] WriteFile (in: hFile=0x340, lpBuffer=0x12724f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12724f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.519] CloseHandle (hObject=0x340) returned 1
	[0128.717] SetEvent (hEvent=0xa0) returned 1
	[0128.717] CloseHandle (hObject=0x2fc) returned 1
	[0128.718] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.719] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0128.793] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0128.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\SharedDataEvents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\shareddataevents"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd3b286a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd3b286a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xee0c3750, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1
	[0128.816] SetEvent (hEvent=0x68) returned 1
	[0128.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\UserCache.bin" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\usercache.bin"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd243f2e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd243f2e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe99341f0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x12ea5)) returned 1
	[0128.821] SetEvent (hEvent=0x30c) returned 1
	[0128.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.822] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.822] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce60f420, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.822] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1
	[0128.822] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
	[0128.822] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.822] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.823] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0128.823] WriteFile (in: hFile=0x340, lpBuffer=0x12718000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12718000*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0128.826] CloseHandle (hObject=0x340) returned 1
	[0128.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c)) returned 1
	[0128.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xce4463a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.846] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0128.851] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0128.876] SetEvent (hEvent=0x68) returned 1
	[0128.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.876] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0128.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce6f3c60, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce6f3c60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0xa74)) returned 1
	[0128.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0128.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0128.877] ReadFile (in: hFile=0x340, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x124f1d1c*=0xa74, lpOverlapped=0x0) returned 1
	[0128.888] GetFileType (hFile=0x340) returned 0x1
	[0128.888] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.888] WriteFile (in: hFile=0x340, lpBuffer=0x12644a80*, nNumberOfBytesToWrite=0xa74, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12644a80*, lpNumberOfBytesWritten=0x124f1d00*=0xa74, lpOverlapped=0x124f1d0c) returned 1
	[0128.888] GetFileType (hFile=0x340) returned 0x1
	[0128.889] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xa74, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0128.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0128.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0128.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0128.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.889] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0128.890] WriteFile (in: hFile=0x2cc, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.890] CloseHandle (hObject=0x2cc) returned 1
	[0128.890] CloseHandle (hObject=0x340) returned 1
	[0128.890] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.986] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0128.999] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.019] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.022] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x38b0)) returned 1
	[0129.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0129.022] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0129.022] ReadFile (in: hFile=0x32c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0x38b0, lpOverlapped=0x0) returned 1
	[0129.063] GetFileType (hFile=0x32c) returned 0x1
	[0129.063] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.063] WriteFile (in: hFile=0x32c, lpBuffer=0x127d6000*, nNumberOfBytesToWrite=0x38b0, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127d6000*, lpNumberOfBytesWritten=0x124f3d00*=0x38b0, lpOverlapped=0x124f3d0c) returned 1
	[0129.063] GetFileType (hFile=0x32c) returned 0x1
	[0129.063] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x38b0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.063] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0129.063] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0129.063] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0129.064] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445b0 | out: pbBuffer=0x127445b0) returned 1
	[0129.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0129.064] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.064] WriteFile (in: hFile=0x2cc, lpBuffer=0x12633400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12633400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.064] CloseHandle (hObject=0x2cc) returned 1
	[0129.064] CloseHandle (hObject=0x32c) returned 1
	[0129.065] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\goog...app_baa8013a79450f71_0001.0003_none_677c9e37069a7e2a.cdf-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.066] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.105] SetEvent (hEvent=0x70) returned 1
	[0129.105] SetEvent (hEvent=0x68) returned 1
	[0129.105] SetEvent (hEvent=0x318) returned 1
	[0129.105] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1
	[0129.241] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.274] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.323] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.339] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.339] SetEvent (hEvent=0x318) returned 1
	[0129.339] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.340] SetEvent (hEvent=0x318) returned 1
	[0129.340] SetEvent (hEvent=0x80) returned 1
	[0129.340] SwitchToThread () returned 1
	[0129.341] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.360] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.364] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0129.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82ad9940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ad9940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0129.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0129.364] ReadFile (in: hFile=0x32c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1277dd1c*=0x0, lpOverlapped=0x0) returned 1
	[0129.364] CloseHandle (hObject=0x32c) returned 1
	[0129.364] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.421] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.465] SetEvent (hEvent=0x2e4) returned 1
	[0129.465] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.471] SetEvent (hEvent=0x2e4) returned 1
	[0129.471] SetEvent (hEvent=0x68) returned 1
	[0129.471] SetEvent (hEvent=0x70) returned 1
	[0129.471] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.546] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.552] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859abe80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0129.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0129.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0129.552] ReadFile (in: hFile=0x340, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f1d1c*=0xdf, lpOverlapped=0x0) returned 1
	[0129.553] GetFileType (hFile=0x340) returned 0x1
	[0129.553] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.553] WriteFile (in: hFile=0x340, lpBuffer=0x12604000*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12604000*, lpNumberOfBytesWritten=0x124f1d00*=0xdf, lpOverlapped=0x124f1d0c) returned 1
	[0129.554] GetFileType (hFile=0x340) returned 0x1
	[0129.555] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xdf, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0129.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0129.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0129.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0129.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.555] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.555] WriteFile (in: hFile=0x33c, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.557] CloseHandle (hObject=0x33c) returned 1
	[0129.558] CloseHandle (hObject=0x340) returned 1
	[0129.560] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.562] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0129.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0129.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0129.563] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0129.563] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0129.563] SetEvent (hEvent=0xa0) returned 1
	[0129.563] SetEvent (hEvent=0x68) returned 1
	[0129.564] ReadFile (in: hFile=0x2fc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f3d1c*=0xdd, lpOverlapped=0x0) returned 1
	[0129.565] GetFileType (hFile=0x2fc) returned 0x1
	[0129.565] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.565] WriteFile (in: hFile=0x2fc, lpBuffer=0x12604380*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12604380*, lpNumberOfBytesWritten=0x124f3d00*=0xdd, lpOverlapped=0x124f3d0c) returned 1
	[0129.566] GetFileType (hFile=0x2fc) returned 0x1
	[0129.566] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xdd, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0129.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0129.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0129.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0129.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.566] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0129.566] WriteFile (in: hFile=0x340, lpBuffer=0x12610500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12610500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.567] CloseHandle (hObject=0x340) returned 1
	[0129.567] CloseHandle (hObject=0x2fc) returned 1
	[0129.567] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.568] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0129.569] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0129.569] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0129.569] SetEvent (hEvent=0x70) returned 1
	[0129.569] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0129.576] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.576] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1
	[0129.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0129.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0129.577] ReadFile (in: hFile=0x2fc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0xd6, lpOverlapped=0x0) returned 1
	[0129.578] GetFileType (hFile=0x2fc) returned 0x1
	[0129.578] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.578] WriteFile (in: hFile=0x2fc, lpBuffer=0x12604000*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12604000*, lpNumberOfBytesWritten=0x124f5d00*=0xd6, lpOverlapped=0x124f5d0c) returned 1
	[0129.578] GetFileType (hFile=0x2fc) returned 0x1
	[0129.578] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd6, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0129.579] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0129.579] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0129.579] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0129.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.579] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.579] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.579] CloseHandle (hObject=0x340) returned 1
	[0129.580] CloseHandle (hObject=0x2fc) returned 1
	[0129.580] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.581] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859d0870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859d0870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0129.582] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0129.582] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0129.582] ReadFile (in: hFile=0x2fc, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f1d1c*=0xd9, lpOverlapped=0x0) returned 1
	[0129.583] GetFileType (hFile=0x2fc) returned 0x1
	[0129.583] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.583] WriteFile (in: hFile=0x2fc, lpBuffer=0x12604540*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12604540*, lpNumberOfBytesWritten=0x124f1d00*=0xd9, lpOverlapped=0x124f1d0c) returned 1
	[0129.583] GetFileType (hFile=0x2fc) returned 0x1
	[0129.583] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd9, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.583] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0129.583] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0129.583] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0129.584] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0129.584] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.584] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.584] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.584] CloseHandle (hObject=0x340) returned 1
	[0129.584] CloseHandle (hObject=0x2fc) returned 1
	[0129.584] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.585] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.617] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.624] SetEvent (hEvent=0x2e4) returned 1
	[0129.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.624] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859f69d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x859f7970, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1
	[0129.624] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0129.624] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0129.624] ReadFile (in: hFile=0x2fc, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f5d1c*=0xe1, lpOverlapped=0x0) returned 1
	[0129.626] GetFileType (hFile=0x2fc) returned 0x1
	[0129.626] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.626] WriteFile (in: hFile=0x2fc, lpBuffer=0x12522000*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12522000*, lpNumberOfBytesWritten=0x124f5d00*=0xe1, lpOverlapped=0x124f5d0c) returned 1
	[0129.626] GetFileType (hFile=0x2fc) returned 0x1
	[0129.626] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xe1, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.627] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0129.627] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0129.627] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0129.627] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0129.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.627] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.627] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.628] CloseHandle (hObject=0x340) returned 1
	[0129.628] CloseHandle (hObject=0x2fc) returned 1
	[0129.628] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.630] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a1cb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a1ea70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x123)) returned 1
	[0129.630] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb20 | out: pbBuffer=0x1244cb20) returned 1
	[0129.630] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105d8 | out: pbBuffer=0x124105d8) returned 1
	[0129.630] ReadFile (in: hFile=0x2fc, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x124f1d1c*=0x123, lpOverlapped=0x0) returned 1
	[0129.631] GetFileType (hFile=0x2fc) returned 0x1
	[0129.631] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.631] WriteFile (in: hFile=0x2fc, lpBuffer=0x124ad180*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124ad180*, lpNumberOfBytesWritten=0x124f1d00*=0x123, lpOverlapped=0x124f1d0c) returned 1
	[0129.632] GetFileType (hFile=0x2fc) returned 0x1
	[0129.632] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x123, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.632] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0129.632] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0129.632] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0129.632] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410710 | out: pbBuffer=0x12410710) returned 1
	[0129.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.632] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.633] WriteFile (in: hFile=0x340, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.633] CloseHandle (hObject=0x340) returned 1
	[0129.633] CloseHandle (hObject=0x2fc) returned 1
	[0129.633] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.635] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.662] SetEvent (hEvent=0x68) returned 1
	[0129.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.663] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0129.663] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd40 | out: pbBuffer=0x1244cd40) returned 1
	[0129.663] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410728 | out: pbBuffer=0x12410728) returned 1
	[0129.663] ReadFile (in: hFile=0x340, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f5d1c*=0xdd, lpOverlapped=0x0) returned 1
	[0129.664] GetFileType (hFile=0x340) returned 0x1
	[0129.664] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.664] WriteFile (in: hFile=0x340, lpBuffer=0x12604e00*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12604e00*, lpNumberOfBytesWritten=0x124f5d00*=0xdd, lpOverlapped=0x124f5d0c) returned 1
	[0129.665] GetFileType (hFile=0x340) returned 0x1
	[0129.665] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xdd, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.665] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0129.665] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0129.665] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0129.665] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410be0 | out: pbBuffer=0x12410be0) returned 1
	[0129.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.666] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0129.666] WriteFile (in: hFile=0x33c, lpBuffer=0x12638000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12638000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.666] CloseHandle (hObject=0x33c) returned 1
	[0129.666] CloseHandle (hObject=0x340) returned 1
	[0129.666] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.670] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a42c90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a43460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1
	[0129.670] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cf60 | out: pbBuffer=0x1244cf60) returned 1
	[0129.670] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410bf8 | out: pbBuffer=0x12410bf8) returned 1
	[0129.670] ReadFile (in: hFile=0x340, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f1d1c*=0xec, lpOverlapped=0x0) returned 1
	[0129.672] GetFileType (hFile=0x340) returned 0x1
	[0129.672] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.672] WriteFile (in: hFile=0x340, lpBuffer=0x125220f0*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x125220f0*, lpNumberOfBytesWritten=0x124f1d00*=0xec, lpOverlapped=0x124f1d0c) returned 1
	[0129.672] GetFileType (hFile=0x340) returned 0x1
	[0129.672] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435081 | out: pbBuffer=0x12435081) returned 1
	[0129.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435181 | out: pbBuffer=0x12435181) returned 1
	[0129.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435301 | out: pbBuffer=0x12435301) returned 1
	[0129.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410d10 | out: pbBuffer=0x12410d10) returned 1
	[0129.673] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.673] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.673] WriteFile (in: hFile=0x33c, lpBuffer=0x12638500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12638500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.673] CloseHandle (hObject=0x33c) returned 1
	[0129.674] CloseHandle (hObject=0x340) returned 1
	[0129.674] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.675] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.697] SetEvent (hEvent=0x68) returned 1
	[0129.697] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.790] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.801] SetEvent (hEvent=0x68) returned 1
	[0129.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.802] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0129.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0129.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0129.803] ReadFile (in: hFile=0x2fc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f1d1c*=0xdd, lpOverlapped=0x0) returned 1
	[0129.804] GetFileType (hFile=0x2fc) returned 0x1
	[0129.804] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.804] WriteFile (in: hFile=0x2fc, lpBuffer=0x12742000*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12742000*, lpNumberOfBytesWritten=0x124f1d00*=0xdd, lpOverlapped=0x124f1d0c) returned 1
	[0129.804] GetFileType (hFile=0x2fc) returned 0x1
	[0129.804] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xdd, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0129.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0129.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0129.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0129.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.805] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.805] WriteFile (in: hFile=0x340, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.806] CloseHandle (hObject=0x340) returned 1
	[0129.806] CloseHandle (hObject=0x2fc) returned 1
	[0129.806] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.807] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x128e7d0c | out: lpMode=0x128e7d0c) returned 0
	[0129.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x128e7ad0 | out: lpFileInformation=0x128e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85a8ef50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85a8ef50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1
	[0129.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0129.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0129.807] ReadFile (in: hFile=0x2fc, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x128e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x128e7d1c*=0xcb, lpOverlapped=0x0) returned 1
	[0129.809] GetFileType (hFile=0x2fc) returned 0x1
	[0129.809] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x128e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.809] WriteFile (in: hFile=0x2fc, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x128e7d00, lpOverlapped=0x128e7d0c | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x128e7d00*=0xcb, lpOverlapped=0x128e7d0c) returned 1
	[0129.809] GetFileType (hFile=0x2fc) returned 0x1
	[0129.809] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xcb, lpNewFilePointer=0x0, dwMoveMethod=0x128e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0129.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0129.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0129.810] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0129.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.810] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x128e7d0c | out: lpMode=0x128e7d0c) returned 0
	[0129.810] WriteFile (in: hFile=0x340, lpBuffer=0x12778500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x128e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12778500*, lpNumberOfBytesWritten=0x128e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.810] CloseHandle (hObject=0x340) returned 1
	[0129.810] CloseHandle (hObject=0x2fc) returned 1
	[0129.810] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.811] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.824] SetEvent (hEvent=0x68) returned 1
	[0129.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0129.824] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ab50b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ab6050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0129.824] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0129.824] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0129.825] ReadFile (in: hFile=0x2fc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12429d1c*=0xde, lpOverlapped=0x0) returned 1
	[0129.826] GetFileType (hFile=0x2fc) returned 0x1
	[0129.826] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.826] WriteFile (in: hFile=0x2fc, lpBuffer=0x12742620*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12742620*, lpNumberOfBytesWritten=0x12429d00*=0xde, lpOverlapped=0x12429d0c) returned 1
	[0129.827] GetFileType (hFile=0x2fc) returned 0x1
	[0129.827] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xde, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0129.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0129.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0129.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445f0 | out: pbBuffer=0x127445f0) returned 1
	[0129.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.828] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.828] WriteFile (in: hFile=0x340, lpBuffer=0x12778a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12778a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.828] CloseHandle (hObject=0x340) returned 1
	[0129.828] CloseHandle (hObject=0x2fc) returned 1
	[0129.828] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.829] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.871] SetEvent (hEvent=0x68) returned 1
	[0129.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.871] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85adb210, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85add150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1
	[0129.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f480 | out: pbBuffer=0x1240f480) returned 1
	[0129.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744608 | out: pbBuffer=0x12744608) returned 1
	[0129.871] ReadFile (in: hFile=0x340, lpBuffer=0x12928000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12928000*, lpNumberOfBytesRead=0x1242bd1c*=0x110, lpOverlapped=0x0) returned 1
	[0129.873] GetFileType (hFile=0x340) returned 0x1
	[0129.873] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.873] WriteFile (in: hFile=0x340, lpBuffer=0x12600900*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12600900*, lpNumberOfBytesWritten=0x1242bd00*=0x110, lpOverlapped=0x1242bd0c) returned 1
	[0129.902] GetFileType (hFile=0x340) returned 0x1
	[0129.902] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x110, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.902] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0129.903] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0129.903] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0129.903] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446c0 | out: pbBuffer=0x127446c0) returned 1
	[0129.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.904] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0129.904] WriteFile (in: hFile=0x33c, lpBuffer=0x12778f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12778f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.904] CloseHandle (hObject=0x33c) returned 1
	[0129.904] CloseHandle (hObject=0x340) returned 1
	[0129.907] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.927] SetEvent (hEvent=0x80) returned 1
	[0129.927] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0129.928] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0129.928] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0129.929] SetEvent (hEvent=0x2e4) returned 1
	[0129.929] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0129.932] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.932] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.941] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.952] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.963] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.973] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.984] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0129.996] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.007] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.017] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.030] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.043] SetEvent (hEvent=0x68) returned 1
	[0130.043] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.046] SetEvent (hEvent=0x318) returned 1
	[0130.046] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0130.047] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0130.050] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0130.050] SetEvent (hEvent=0x2e4) returned 1
	[0130.050] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0130.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.064] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85b998f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85b9b830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe4180700, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1
	[0130.064] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0130.064] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0130.064] ReadFile (in: hFile=0x2fc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1242bd1c*=0x2b56, lpOverlapped=0x0) returned 1
	[0130.081] GetFileType (hFile=0x2fc) returned 0x1
	[0130.081] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.081] WriteFile (in: hFile=0x2fc, lpBuffer=0x12988000*, nNumberOfBytesToWrite=0x2b56, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12988000*, lpNumberOfBytesWritten=0x1242bd00*=0x2b56, lpOverlapped=0x1242bd0c) returned 1
	[0130.081] GetFileType (hFile=0x2fc) returned 0x1
	[0130.081] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x2b56, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0130.082] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0130.082] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0130.082] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0130.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.082] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.082] WriteFile (in: hFile=0x338, lpBuffer=0x12626000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12626000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.082] CloseHandle (hObject=0x338) returned 1
	[0130.082] CloseHandle (hObject=0x2fc) returned 1
	[0130.083] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.092] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.125] SetEvent (hEvent=0x30c) returned 1
	[0130.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.126] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0130.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0130.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0130.126] ReadFile (in: hFile=0x32c, lpBuffer=0x125a8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x125a8000*, lpNumberOfBytesRead=0x1242bd1c*=0x108, lpOverlapped=0x0) returned 1
	[0130.128] GetFileType (hFile=0x32c) returned 0x1
	[0130.128] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.128] WriteFile (in: hFile=0x32c, lpBuffer=0x12612d80*, nNumberOfBytesToWrite=0x108, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12612d80*, lpNumberOfBytesWritten=0x1242bd00*=0x108, lpOverlapped=0x1242bd0c) returned 1
	[0130.128] GetFileType (hFile=0x32c) returned 0x1
	[0130.128] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x108, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.128] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0130.128] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0130.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0130.129] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0130.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.129] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.129] WriteFile (in: hFile=0x33c, lpBuffer=0x12626500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12626500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.129] CloseHandle (hObject=0x33c) returned 1
	[0130.129] CloseHandle (hObject=0x32c) returned 1
	[0130.130] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.131] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1
	[0130.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0130.131] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0130.131] ReadFile (in: hFile=0x32c, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x124f3d1c*=0xcf, lpOverlapped=0x0) returned 1
	[0130.132] GetFileType (hFile=0x32c) returned 0x1
	[0130.132] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.132] WriteFile (in: hFile=0x32c, lpBuffer=0x125ce000*, nNumberOfBytesToWrite=0xcf, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125ce000*, lpNumberOfBytesWritten=0x124f3d00*=0xcf, lpOverlapped=0x124f3d0c) returned 1
	[0130.133] GetFileType (hFile=0x32c) returned 0x1
	[0130.133] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xcf, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.133] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0130.134] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0130.134] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0130.135] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105c0 | out: pbBuffer=0x124105c0) returned 1
	[0130.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.135] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.135] WriteFile (in: hFile=0x33c, lpBuffer=0x12626a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.143] CloseHandle (hObject=0x33c) returned 1
	[0130.143] CloseHandle (hObject=0x32c) returned 1
	[0130.143] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ca\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.144] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.153] SetEvent (hEvent=0x30c) returned 1
	[0130.153] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.153] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0130.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732760 | out: pbBuffer=0x12732760) returned 1
	[0130.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105d8 | out: pbBuffer=0x124105d8) returned 1
	[0130.154] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0130.155] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.155] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0130.155] SetEvent (hEvent=0xa0) returned 1
	[0130.155] SetEvent (hEvent=0x30c) returned 1
	[0130.155] SetEvent (hEvent=0x318) returned 1
	[0130.156] ReadFile (in: hFile=0x32c, lpBuffer=0x12920000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12920000*, lpNumberOfBytesRead=0x1242bd1c*=0xde, lpOverlapped=0x0) returned 1
	[0130.158] GetFileType (hFile=0x32c) returned 0x1
	[0130.158] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.158] WriteFile (in: hFile=0x32c, lpBuffer=0x127ea620*, nNumberOfBytesToWrite=0xde, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127ea620*, lpNumberOfBytesWritten=0x1242bd00*=0xde, lpOverlapped=0x1242bd0c) returned 1
	[0130.158] GetFileType (hFile=0x32c) returned 0x1
	[0130.158] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xde, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.158] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0130.159] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0130.159] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0130.159] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410710 | out: pbBuffer=0x12410710) returned 1
	[0130.159] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.159] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.159] WriteFile (in: hFile=0x33c, lpBuffer=0x12626f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12626f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.160] CloseHandle (hObject=0x33c) returned 1
	[0130.160] CloseHandle (hObject=0x32c) returned 1
	[0130.160] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\cs\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.161] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0130.163] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0130.163] SetEvent (hEvent=0x2e4) returned 1
	[0130.163] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0130.211] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.217] SetEvent (hEvent=0x68) returned 1
	[0130.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.218] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.218] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865396d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86539ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0130.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0130.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788108 | out: pbBuffer=0x12788108) returned 1
	[0130.218] ReadFile (in: hFile=0x340, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0xd1, lpOverlapped=0x0) returned 1
	[0130.222] GetFileType (hFile=0x340) returned 0x1
	[0130.222] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.222] WriteFile (in: hFile=0x340, lpBuffer=0x127ea380*, nNumberOfBytesToWrite=0xd1, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127ea380*, lpNumberOfBytesWritten=0x124f3d00*=0xd1, lpOverlapped=0x124f3d0c) returned 1
	[0130.225] GetFileType (hFile=0x340) returned 0x1
	[0130.225] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xd1, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0130.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0130.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0130.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0130.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.226] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.226] WriteFile (in: hFile=0x32c, lpBuffer=0x12626500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.240] CloseHandle (hObject=0x32c) returned 1
	[0130.240] CloseHandle (hObject=0x340) returned 1
	[0130.267] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_US\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\en_us\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.276] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.298] SetEvent (hEvent=0x68) returned 1
	[0130.298] SetEvent (hEvent=0x30c) returned 1
	[0130.298] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0130.300] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0130.300] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0130.300] SetEvent (hEvent=0x70) returned 1
	[0130.300] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0130.301] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.308] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.313] SetEvent (hEvent=0x318) returned 1
	[0130.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.313] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0130.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0130.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0130.314] ReadFile (in: hFile=0x2fc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0xdd, lpOverlapped=0x0) returned 1
	[0130.315] GetFileType (hFile=0x2fc) returned 0x1
	[0130.315] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.315] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x1242bd00*=0xdd, lpOverlapped=0x1242bd0c) returned 1
	[0130.316] GetFileType (hFile=0x2fc) returned 0x1
	[0130.316] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xdd, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.316] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0130.316] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0130.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0130.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0130.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.317] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.317] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.319] CloseHandle (hObject=0x33c) returned 1
	[0130.319] CloseHandle (hObject=0x2fc) returned 1
	[0130.321] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\he\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.327] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.362] SetEvent (hEvent=0x318) returned 1
	[0130.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.363] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12975ad0 | out: lpFileInformation=0x12975ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1
	[0130.363] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0130.363] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0130.363] ReadFile (in: hFile=0x340, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12975d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12975d1c*=0xeb, lpOverlapped=0x0) returned 1
	[0130.365] GetFileType (hFile=0x340) returned 0x1
	[0130.365] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.365] WriteFile (in: hFile=0x340, lpBuffer=0x124b2000*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x12975d00, lpOverlapped=0x12975d0c | out: lpBuffer=0x124b2000*, lpNumberOfBytesWritten=0x12975d00*=0xeb, lpOverlapped=0x12975d0c) returned 1
	[0130.367] GetFileType (hFile=0x340) returned 0x1
	[0130.367] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xeb, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0130.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0130.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0130.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0130.367] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.367] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.367] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12975d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12975d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.370] CloseHandle (hObject=0x33c) returned 1
	[0130.370] CloseHandle (hObject=0x340) returned 1
	[0130.371] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\hu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.378] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.382] SetEvent (hEvent=0x318) returned 1
	[0130.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.382] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0130.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c920 | out: pbBuffer=0x1244c920) returned 1
	[0130.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0130.383] ReadFile (in: hFile=0x2fc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x1242bd1c*=0xd5, lpOverlapped=0x0) returned 1
	[0130.384] GetFileType (hFile=0x2fc) returned 0x1
	[0130.384] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.384] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263a620*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1263a620*, lpNumberOfBytesWritten=0x1242bd00*=0xd5, lpOverlapped=0x1242bd0c) returned 1
	[0130.386] GetFileType (hFile=0x2fc) returned 0x1
	[0130.386] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd5, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.386] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0130.386] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0130.386] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0130.386] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0130.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.386] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.387] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.389] CloseHandle (hObject=0x33c) returned 1
	[0130.389] CloseHandle (hObject=0x2fc) returned 1
	[0130.390] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\it\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.397] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.407] SetEvent (hEvent=0x318) returned 1
	[0130.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.407] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12975ad0 | out: lpFileInformation=0x12975ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86585990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86585990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1
	[0130.407] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb40 | out: pbBuffer=0x1244cb40) returned 1
	[0130.407] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e748 | out: pbBuffer=0x1251e748) returned 1
	[0130.408] ReadFile (in: hFile=0x340, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12975d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x12975d1c*=0xda, lpOverlapped=0x0) returned 1
	[0130.409] GetFileType (hFile=0x340) returned 0x1
	[0130.409] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.409] WriteFile (in: hFile=0x340, lpBuffer=0x1263aa80*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x12975d00, lpOverlapped=0x12975d0c | out: lpBuffer=0x1263aa80*, lpNumberOfBytesWritten=0x12975d00*=0xda, lpOverlapped=0x12975d0c) returned 1
	[0130.411] GetFileType (hFile=0x340) returned 0x1
	[0130.411] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xda, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f01 | out: pbBuffer=0x12400f01) returned 1
	[0130.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401001 | out: pbBuffer=0x12401001) returned 1
	[0130.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401101 | out: pbBuffer=0x12401101) returned 1
	[0130.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e860 | out: pbBuffer=0x1251e860) returned 1
	[0130.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.411] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.411] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12975d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12975d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.414] CloseHandle (hObject=0x33c) returned 1
	[0130.414] CloseHandle (hObject=0x340) returned 1
	[0130.415] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ko\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.422] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.426] SetEvent (hEvent=0x318) returned 1
	[0130.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.427] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865abaf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865aa380, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0130.427] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd60 | out: pbBuffer=0x1244cd60) returned 1
	[0130.427] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e898 | out: pbBuffer=0x1251e898) returned 1
	[0130.427] ReadFile (in: hFile=0x2fc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x1242bd1c*=0xe0, lpOverlapped=0x0) returned 1
	[0130.428] GetFileType (hFile=0x2fc) returned 0x1
	[0130.428] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.429] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263ae00*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1263ae00*, lpNumberOfBytesWritten=0x1242bd00*=0xe0, lpOverlapped=0x1242bd0c) returned 1
	[0130.430] GetFileType (hFile=0x2fc) returned 0x1
	[0130.430] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.430] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401201 | out: pbBuffer=0x12401201) returned 1
	[0130.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401301 | out: pbBuffer=0x12401301) returned 1
	[0130.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401401 | out: pbBuffer=0x12401401) returned 1
	[0130.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251eac0 | out: pbBuffer=0x1251eac0) returned 1
	[0130.431] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.431] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.431] WriteFile (in: hFile=0x33c, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.433] CloseHandle (hObject=0x33c) returned 1
	[0130.433] CloseHandle (hObject=0x2fc) returned 1
	[0130.434] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\lv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.442] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.445] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.452] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.462] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.473] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.485] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.494] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.506] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.517] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.529] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.539] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.552] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.562] SetEvent (hEvent=0x318) returned 1
	[0130.562] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.566] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.567] SetEvent (hEvent=0x70) returned 1
	[0130.567] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.569] SetEvent (hEvent=0x70) returned 1
	[0130.569] SetEvent (hEvent=0x30c) returned 1
	[0130.569] SwitchToThread () returned 1
	[0130.595] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.603] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.609] SetEvent (hEvent=0x318) returned 1
	[0130.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.609] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1
	[0130.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0130.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0130.609] ReadFile (in: hFile=0x340, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f3d1c*=0xe3, lpOverlapped=0x0) returned 1
	[0130.610] GetFileType (hFile=0x340) returned 0x1
	[0130.610] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.610] WriteFile (in: hFile=0x340, lpBuffer=0x1273a000*, nNumberOfBytesToWrite=0xe3, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1273a000*, lpNumberOfBytesWritten=0x124f3d00*=0xe3, lpOverlapped=0x124f3d0c) returned 1
	[0130.612] GetFileType (hFile=0x340) returned 0x1
	[0130.612] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xe3, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.612] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0130.612] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0130.612] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0130.613] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0130.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.613] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.613] WriteFile (in: hFile=0x2fc, lpBuffer=0x12722500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12722500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.615] CloseHandle (hObject=0x2fc) returned 1
	[0130.615] CloseHandle (hObject=0x340) returned 1
	[0130.616] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\tr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.622] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.625] SetEvent (hEvent=0x318) returned 1
	[0130.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.625] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1
	[0130.626] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0130.626] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0130.626] ReadFile (in: hFile=0x33c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1242bd1c*=0xe1, lpOverlapped=0x0) returned 1
	[0130.627] GetFileType (hFile=0x33c) returned 0x1
	[0130.627] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.627] WriteFile (in: hFile=0x33c, lpBuffer=0x1273a0f0*, nNumberOfBytesToWrite=0xe1, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1273a0f0*, lpNumberOfBytesWritten=0x1242bd00*=0xe1, lpOverlapped=0x1242bd0c) returned 1
	[0130.629] GetFileType (hFile=0x33c) returned 0x1
	[0130.629] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xe1, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.629] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0130.629] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434901 | out: pbBuffer=0x12434901) returned 1
	[0130.629] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0130.630] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0130.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.630] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.630] WriteFile (in: hFile=0x2fc, lpBuffer=0x12722a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12722a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.640] CloseHandle (hObject=0x2fc) returned 1
	[0130.640] CloseHandle (hObject=0x33c) returned 1
	[0130.642] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\vi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.649] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.653] SetEvent (hEvent=0x318) returned 1
	[0130.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.654] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0130.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0130.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0130.654] ReadFile (in: hFile=0x340, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0xce, lpOverlapped=0x0) returned 1
	[0130.655] GetFileType (hFile=0x340) returned 0x1
	[0130.655] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.655] WriteFile (in: hFile=0x340, lpBuffer=0x1272a000*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1272a000*, lpNumberOfBytesWritten=0x124f3d00*=0xce, lpOverlapped=0x124f3d0c) returned 1
	[0130.660] GetFileType (hFile=0x340) returned 0x1
	[0130.660] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xce, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.660] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0130.660] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0130.661] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e01 | out: pbBuffer=0x12434e01) returned 1
	[0130.661] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0130.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.661] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.661] WriteFile (in: hFile=0x2fc, lpBuffer=0x12722f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12722f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.663] CloseHandle (hObject=0x2fc) returned 1
	[0130.663] CloseHandle (hObject=0x340) returned 1
	[0130.665] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_TW\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\zh_tw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.672] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86833250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8f)) returned 1
	[0130.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0130.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0130.673] ReadFile (in: hFile=0x2fc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f3d1c*=0x8f, lpOverlapped=0x0) returned 1
	[0130.674] GetFileType (hFile=0x2fc) returned 0x1
	[0130.674] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.674] WriteFile (in: hFile=0x2fc, lpBuffer=0x1297ef30*, nNumberOfBytesToWrite=0x8f, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1297ef30*, lpNumberOfBytesWritten=0x124f3d00*=0x8f, lpOverlapped=0x124f3d0c) returned 1
	[0130.679] GetFileType (hFile=0x2fc) returned 0x1
	[0130.679] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x8f, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.679] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0130.679] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0130.679] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0130.679] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0130.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0130.679] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.679] WriteFile (in: hFile=0x2cc, lpBuffer=0x1262e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262e000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.682] CloseHandle (hObject=0x2cc) returned 1
	[0130.682] CloseHandle (hObject=0x2fc) returned 1
	[0130.685] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0130.686] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b)) returned 1
	[0130.695] SetEvent (hEvent=0x318) returned 1
	[0130.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1
	[0130.701] SetEvent (hEvent=0x68) returned 1
	[0130.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.701] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.701] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x819d0bd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x916d8210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x916d8210, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14.1_0", cAlternateFileName="")) returned 1
	[0130.702] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.702] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.702] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.703] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0130.703] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0130.704] CloseHandle (hObject=0x33c) returned 1
	[0130.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.708] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1
	[0130.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8716c790, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0130.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0130.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x87015b30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0130.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.717] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.721] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0130.721] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0130.722] CloseHandle (hObject=0x340) returned 1
	[0130.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x871928f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a33)) returned 1
	[0130.724] SetEvent (hEvent=0x80) returned 1
	[0130.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.724] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.724] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0130.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0130.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0130.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0130.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0130.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0130.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0130.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0130.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0130.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0130.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0130.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0130.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0130.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0130.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0130.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0130.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0130.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0130.737] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0130.737] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0130.737] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0130.737] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0130.737] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0130.737] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0130.737] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0130.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0130.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0130.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0130.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0130.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0130.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87015b30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87015b30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0130.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.738] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.740] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.743] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0130.743] WriteFile (in: hFile=0x340, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0130.744] CloseHandle (hObject=0x340) returned 1
	[0130.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.745] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.745] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.745] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.745] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.745] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.746] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.746] WriteFile (in: hFile=0x340, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.748] CloseHandle (hObject=0x340) returned 1
	[0130.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1
	[0130.750] SetEvent (hEvent=0x70) returned 1
	[0130.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.751] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.751] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.751] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.751] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.751] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.752] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.752] WriteFile (in: hFile=0x340, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.754] CloseHandle (hObject=0x340) returned 1
	[0130.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x13f)) returned 1
	[0130.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.755] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.755] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.756] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.756] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.758] CloseHandle (hObject=0x340) returned 1
	[0130.758] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1
	[0130.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.771] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.771] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.772] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.772] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.772] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.773] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.773] WriteFile (in: hFile=0x340, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.774] CloseHandle (hObject=0x340) returned 1
	[0130.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1
	[0130.775] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.776] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4cab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e4cab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.776] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.776] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.776] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.777] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.777] WriteFile (in: hFile=0x340, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.778] CloseHandle (hObject=0x340) returned 1
	[0130.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e4cab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e4da50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf3)) returned 1
	[0130.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.790] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.790] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.790] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.790] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.790] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.791] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.791] WriteFile (in: hFile=0x340, lpBuffer=0x12988000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12988000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.793] CloseHandle (hObject=0x340) returned 1
	[0130.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1
	[0130.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.794] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.799] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.799] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.799] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.799] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.805] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.805] SetEvent (hEvent=0x30c) returned 1
	[0130.805] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0130.808] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0130.808] SetEvent (hEvent=0x70) returned 1
	[0130.808] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0130.852] WriteFile (in: hFile=0x338, lpBuffer=0x12989300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12989300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.856] CloseHandle (hObject=0x338) returned 1
	[0130.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x149)) returned 1
	[0130.859] SetEvent (hEvent=0x68) returned 1
	[0130.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.859] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.860] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e72c10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e72c10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.860] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.860] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.860] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.865] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.865] WriteFile (in: hFile=0x2fc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.868] CloseHandle (hObject=0x2fc) returned 1
	[0130.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e74b50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1
	[0130.870] SetEvent (hEvent=0x80) returned 1
	[0130.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.870] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.870] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e72c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.871] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.871] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.871] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.875] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.875] WriteFile (in: hFile=0x2fc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.879] CloseHandle (hObject=0x2fc) returned 1
	[0130.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf9)) returned 1
	[0130.883] SetEvent (hEvent=0x68) returned 1
	[0130.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.883] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.883] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.883] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.883] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.883] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.888] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.888] WriteFile (in: hFile=0x340, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.892] CloseHandle (hObject=0x340) returned 1
	[0130.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1
	[0130.893] SetEvent (hEvent=0x80) returned 1
	[0130.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.893] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.894] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.894] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.894] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.894] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.898] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.898] WriteFile (in: hFile=0x340, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.934] CloseHandle (hObject=0x340) returned 1
	[0130.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1
	[0130.937] SetEvent (hEvent=0x68) returned 1
	[0130.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.938] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.938] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e98d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86e98d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.938] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.938] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.938] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.943] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.943] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.946] CloseHandle (hObject=0x2fc) returned 1
	[0130.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e98d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86e99540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1
	[0130.948] SetEvent (hEvent=0x80) returned 1
	[0130.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.948] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.948] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.948] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.948] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.948] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.953] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.953] WriteFile (in: hFile=0x2fc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.957] CloseHandle (hObject=0x2fc) returned 1
	[0130.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xf3)) returned 1
	[0130.960] SetEvent (hEvent=0x68) returned 1
	[0130.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.960] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.961] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ebeed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ebeed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.961] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.961] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.961] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.966] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.966] WriteFile (in: hFile=0x338, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.971] CloseHandle (hObject=0x338) returned 1
	[0130.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ec0640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1
	[0130.972] SetEvent (hEvent=0x80) returned 1
	[0130.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.973] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.973] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ebeed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.973] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.973] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.973] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.978] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.978] WriteFile (in: hFile=0x338, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.983] CloseHandle (hObject=0x338) returned 1
	[0130.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0130.986] SetEvent (hEvent=0x68) returned 1
	[0130.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.986] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.986] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.986] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.986] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.987] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.987] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.991] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0130.991] WriteFile (in: hFile=0x340, lpBuffer=0x12988000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12988000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0130.995] CloseHandle (hObject=0x340) returned 1
	[0130.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1
	[0130.995] SetEvent (hEvent=0x80) returned 1
	[0130.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0130.996] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0130.996] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0130.996] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0130.996] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0130.996] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0130.996] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0130.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0130.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0130.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.001] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.001] WriteFile (in: hFile=0x340, lpBuffer=0x1298a600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1298a600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.006] CloseHandle (hObject=0x340) returned 1
	[0131.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1
	[0131.011] SetEvent (hEvent=0x70) returned 1
	[0131.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.011] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.011] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86ee5030, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.012] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.012] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.012] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.016] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.016] WriteFile (in: hFile=0x338, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.020] CloseHandle (hObject=0x338) returned 1
	[0131.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86ee5030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ee5030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x159)) returned 1
	[0131.021] SetEvent (hEvent=0x80) returned 1
	[0131.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.022] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.022] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.022] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.022] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.022] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.027] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.027] WriteFile (in: hFile=0x338, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.031] CloseHandle (hObject=0x338) returned 1
	[0131.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x107)) returned 1
	[0131.033] SetEvent (hEvent=0x70) returned 1
	[0131.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.034] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.034] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.034] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.035] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.035] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.039] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.039] WriteFile (in: hFile=0x340, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.042] CloseHandle (hObject=0x340) returned 1
	[0131.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0131.043] SetEvent (hEvent=0x80) returned 1
	[0131.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.044] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.044] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.044] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.044] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.044] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.044] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.049] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.049] WriteFile (in: hFile=0x340, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.054] CloseHandle (hObject=0x340) returned 1
	[0131.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x105)) returned 1
	[0131.057] SetEvent (hEvent=0x70) returned 1
	[0131.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.057] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.057] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.058] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.058] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.058] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.058] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.058] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.062] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.063] WriteFile (in: hFile=0x338, lpBuffer=0x12988000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12988000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.066] CloseHandle (hObject=0x338) returned 1
	[0131.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1
	[0131.068] SetEvent (hEvent=0x80) returned 1
	[0131.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.068] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.068] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.068] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.068] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.068] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.073] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.073] WriteFile (in: hFile=0x338, lpBuffer=0x12989300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12989300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.077] CloseHandle (hObject=0x338) returned 1
	[0131.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1
	[0131.080] SetEvent (hEvent=0x70) returned 1
	[0131.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.080] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.081] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0b190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f0b190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.081] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.081] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.081] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.085] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.085] WriteFile (in: hFile=0x340, lpBuffer=0x1298b900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1298b900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.089] CloseHandle (hObject=0x340) returned 1
	[0131.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f0b190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f0c130, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0131.090] SetEvent (hEvent=0x80) returned 1
	[0131.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.091] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.091] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.091] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.091] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.091] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.095] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.095] WriteFile (in: hFile=0x340, lpBuffer=0x1298cc00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1298cc00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.099] CloseHandle (hObject=0x340) returned 1
	[0131.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11d)) returned 1
	[0131.104] SetEvent (hEvent=0x70) returned 1
	[0131.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.104] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.105] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.105] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.105] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.105] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.110] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.110] WriteFile (in: hFile=0x338, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.113] CloseHandle (hObject=0x338) returned 1
	[0131.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1
	[0131.114] SetEvent (hEvent=0x80) returned 1
	[0131.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.115] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.115] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.119] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.119] WriteFile (in: hFile=0x338, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.123] CloseHandle (hObject=0x338) returned 1
	[0131.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0131.125] SetEvent (hEvent=0x70) returned 1
	[0131.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.126] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.126] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.126] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.126] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.131] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.132] SetEvent (hEvent=0x318) returned 1
	[0131.132] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0131.132] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0131.132] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0131.133] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0131.133] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0131.133] SetEvent (hEvent=0x68) returned 1
	[0131.133] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0131.135] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0131.135] WriteFile (in: hFile=0x340, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.137] CloseHandle (hObject=0x340) returned 1
	[0131.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf2)) returned 1
	[0131.139] SetEvent (hEvent=0x68) returned 1
	[0131.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.139] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.139] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.139] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f312f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f312f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.139] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.139] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.139] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.143] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.144] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.147] CloseHandle (hObject=0x2fc) returned 1
	[0131.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f312f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f33230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xd3d59700, ftLastWriteTime.dwHighDateTime=0x1d10aaf, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1
	[0131.149] SetEvent (hEvent=0x70) returned 1
	[0131.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.150] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.150] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.150] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.150] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.150] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.164] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.164] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.168] CloseHandle (hObject=0x340) returned 1
	[0131.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1
	[0131.169] SetEvent (hEvent=0x68) returned 1
	[0131.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.170] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.170] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.170] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.170] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.170] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.174] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.174] WriteFile (in: hFile=0x340, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.178] CloseHandle (hObject=0x340) returned 1
	[0131.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1
	[0131.180] SetEvent (hEvent=0x70) returned 1
	[0131.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.181] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.181] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.181] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.181] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.181] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.186] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.186] WriteFile (in: hFile=0x2fc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.189] CloseHandle (hObject=0x2fc) returned 1
	[0131.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1
	[0131.190] SetEvent (hEvent=0x68) returned 1
	[0131.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.191] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.191] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.191] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.191] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.191] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.191] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.191] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.195] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.195] WriteFile (in: hFile=0x2fc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.199] CloseHandle (hObject=0x2fc) returned 1
	[0131.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0131.201] SetEvent (hEvent=0x70) returned 1
	[0131.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.202] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.202] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.202] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.202] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.202] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.202] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.207] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.207] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.211] CloseHandle (hObject=0x340) returned 1
	[0131.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0131.212] SetEvent (hEvent=0x68) returned 1
	[0131.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.212] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.212] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f57450, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86f57450, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.213] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f7ed20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.213] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.213] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.217] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.217] WriteFile (in: hFile=0x340, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.221] CloseHandle (hObject=0x340) returned 1
	[0131.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86f57450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86f7ed20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1
	[0131.224] SetEvent (hEvent=0x70) returned 1
	[0131.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.224] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.225] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.225] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.225] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.225] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.229] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.229] WriteFile (in: hFile=0x2fc, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.232] CloseHandle (hObject=0x2fc) returned 1
	[0131.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1
	[0131.233] SetEvent (hEvent=0x68) returned 1
	[0131.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.234] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.234] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.234] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.234] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.234] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.239] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.239] WriteFile (in: hFile=0x2fc, lpBuffer=0x125e3300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x125e3300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.242] CloseHandle (hObject=0x2fc) returned 1
	[0131.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11f)) returned 1
	[0131.245] SetEvent (hEvent=0x70) returned 1
	[0131.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.288] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.288] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fc9870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fc9870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.289] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.289] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.289] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.298] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.298] WriteFile (in: hFile=0x340, lpBuffer=0x125e4600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x125e4600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.302] CloseHandle (hObject=0x340) returned 1
	[0131.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fc9870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fca810, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfd)) returned 1
	[0131.303] SetEvent (hEvent=0x68) returned 1
	[0131.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.303] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.303] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86fef9d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86fef9d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.304] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86fef9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86ff1910, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x871928f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x164, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.304] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.304] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.307] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0131.311] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.311] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0134.583] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0134.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0134.680] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x1271fad0 | out: lpFileInformation=0x1271fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x840205b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84245ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844aa770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d6)) returned 1
	[0134.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0134.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0134.680] ReadFile (in: hFile=0x32c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1271fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x1271fd1c*=0x2d6, lpOverlapped=0x0) returned 1
	[0134.692] GetFileType (hFile=0x32c) returned 0x1
	[0134.692] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.692] WriteFile (in: hFile=0x32c, lpBuffer=0x1260a300*, nNumberOfBytesToWrite=0x2d6, lpNumberOfBytesWritten=0x1271fd00, lpOverlapped=0x1271fd0c | out: lpBuffer=0x1260a300*, lpNumberOfBytesWritten=0x1271fd00*=0x2d6, lpOverlapped=0x1271fd0c) returned 1
	[0134.692] GetFileType (hFile=0x32c) returned 0x1
	[0134.693] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x2d6, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0134.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0134.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0134.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0134.693] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.693] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.694] WriteFile (in: hFile=0x344, lpBuffer=0x12726000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1271fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12726000*, lpNumberOfBytesWritten=0x1271fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.694] CloseHandle (hObject=0x344) returned 1
	[0134.701] CloseHandle (hObject=0x32c) returned 1
	[0134.713] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\manifest.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.910] SetEvent (hEvent=0x70) returned 1
	[0134.911] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.125] SetEvent (hEvent=0x2f4) returned 1
	[0135.125] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.218] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.223] SetEvent (hEvent=0x80) returned 1
	[0135.223] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.227] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1
	[0135.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4a0 | out: pbBuffer=0x1240f4a0) returned 1
	[0135.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744a70 | out: pbBuffer=0x12744a70) returned 1
	[0135.227] ReadFile (in: hFile=0x32c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f3d1c*=0xcb, lpOverlapped=0x0) returned 1
	[0135.229] GetFileType (hFile=0x32c) returned 0x1
	[0135.229] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.229] WriteFile (in: hFile=0x32c, lpBuffer=0x1264a0d0*, nNumberOfBytesToWrite=0xcb, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1264a0d0*, lpNumberOfBytesWritten=0x124f3d00*=0xcb, lpOverlapped=0x124f3d0c) returned 1
	[0135.234] GetFileType (hFile=0x32c) returned 0x1
	[0135.234] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xcb, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.234] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0135.234] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0135.234] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0135.234] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744b28 | out: pbBuffer=0x12744b28) returned 1
	[0135.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.235] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.235] WriteFile (in: hFile=0x34c, lpBuffer=0x1272d400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1272d400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.239] CloseHandle (hObject=0x34c) returned 1
	[0135.239] CloseHandle (hObject=0x32c) returned 1
	[0135.241] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ms\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.250] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.255] SetEvent (hEvent=0x70) returned 1
	[0135.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.256] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb1)) returned 1
	[0135.256] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f6c0 | out: pbBuffer=0x1240f6c0) returned 1
	[0135.256] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744b40 | out: pbBuffer=0x12744b40) returned 1
	[0135.256] ReadFile (in: hFile=0x348, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f1d1c*=0xb1, lpOverlapped=0x0) returned 1
	[0135.258] GetFileType (hFile=0x348) returned 0x1
	[0135.258] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.258] WriteFile (in: hFile=0x348, lpBuffer=0x1248a300*, nNumberOfBytesToWrite=0xb1, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1248a300*, lpNumberOfBytesWritten=0x124f1d00*=0xb1, lpOverlapped=0x124f1d0c) returned 1
	[0135.260] GetFileType (hFile=0x348) returned 0x1
	[0135.260] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0xb1, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0135.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0135.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0135.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744bf8 | out: pbBuffer=0x12744bf8) returned 1
	[0135.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.261] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.261] WriteFile (in: hFile=0x32c, lpBuffer=0x1272d900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1272d900*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.263] CloseHandle (hObject=0x32c) returned 1
	[0135.263] CloseHandle (hObject=0x348) returned 1
	[0135.265] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\nl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.268] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.276] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.276] SetEvent (hEvent=0x320) returned 1
	[0135.277] SetEvent (hEvent=0x70) returned 1
	[0135.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.277] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.277] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.277] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.277] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.277] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.279] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.279] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.281] CloseHandle (hObject=0x32c) returned 1
	[0135.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1
	[0135.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.282] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.282] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f54260, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.282] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.282] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.282] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.283] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.283] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.285] CloseHandle (hObject=0x32c) returned 1
	[0135.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1
	[0135.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.299] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.299] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.299] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.299] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.299] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.301] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.301] WriteFile (in: hFile=0x32c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.302] CloseHandle (hObject=0x32c) returned 1
	[0135.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1
	[0135.303] SetEvent (hEvent=0x70) returned 1
	[0135.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.304] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.304] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.304] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.304] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.304] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.305] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.305] WriteFile (in: hFile=0x32c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.307] CloseHandle (hObject=0x32c) returned 1
	[0135.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf)) returned 1
	[0135.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.320] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.320] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.320] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.322] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.322] WriteFile (in: hFile=0x32c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.324] CloseHandle (hObject=0x32c) returned 1
	[0135.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0135.325] SetEvent (hEvent=0x320) returned 1
	[0135.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.325] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.325] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.325] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.325] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.325] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.326] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.327] WriteFile (in: hFile=0x32c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.328] CloseHandle (hObject=0x32c) returned 1
	[0135.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\si\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x14e)) returned 1
	[0135.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.345] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.345] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.345] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.346] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.346] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.349] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.349] WriteFile (in: hFile=0x348, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.351] CloseHandle (hObject=0x348) returned 1
	[0135.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc5)) returned 1
	[0135.352] SetEvent (hEvent=0x70) returned 1
	[0135.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.352] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.352] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7a3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85f7a3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.352] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.352] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.352] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.353] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.357] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.357] WriteFile (in: hFile=0x32c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.360] CloseHandle (hObject=0x32c) returned 1
	[0135.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1
	[0135.361] SetEvent (hEvent=0x320) returned 1
	[0135.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.372] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.373] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.373] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.373] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.373] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.374] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.374] WriteFile (in: hFile=0x34c, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.376] CloseHandle (hObject=0x34c) returned 1
	[0135.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0135.377] SetEvent (hEvent=0x320) returned 1
	[0135.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.377] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.378] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.378] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.378] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.379] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.379] WriteFile (in: hFile=0x34c, lpBuffer=0x12613300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12613300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.380] CloseHandle (hObject=0x34c) returned 1
	[0135.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0135.381] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.395] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.395] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.395] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.395] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.395] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.396] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.396] WriteFile (in: hFile=0x34c, lpBuffer=0x12614600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12614600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.398] CloseHandle (hObject=0x34c) returned 1
	[0135.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1
	[0135.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.399] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.399] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.399] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x150, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.399] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.399] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.402] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.409] SetEvent (hEvent=0x70) returned 1
	[0135.409] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.409] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.410] SetEvent (hEvent=0x70) returned 1
	[0135.410] SetEvent (hEvent=0x80) returned 1
	[0135.410] WriteFile (in: hFile=0x34c, lpBuffer=0x12615900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12615900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.411] CloseHandle (hObject=0x34c) returned 1
	[0135.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ta\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1
	[0135.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.419] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa0520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fa0520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.419] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.419] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.419] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.420] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.420] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.421] CloseHandle (hObject=0x34c) returned 1
	[0135.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\te\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1
	[0135.422] SetEvent (hEvent=0x80) returned 1
	[0135.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.424] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.424] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.424] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.424] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.424] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.425] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.425] WriteFile (in: hFile=0x34c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.427] CloseHandle (hObject=0x34c) returned 1
	[0135.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x125)) returned 1
	[0135.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.436] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.436] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.437] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.437] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.437] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.438] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.438] WriteFile (in: hFile=0x34c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.439] CloseHandle (hObject=0x34c) returned 1
	[0135.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcd)) returned 1
	[0135.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.440] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.440] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.440] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.440] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.441] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.441] WriteFile (in: hFile=0x34c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.442] CloseHandle (hObject=0x34c) returned 1
	[0135.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x115)) returned 1
	[0135.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.449] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.449] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.450] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.451] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.451] WriteFile (in: hFile=0x348, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.452] CloseHandle (hObject=0x348) returned 1
	[0135.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ur\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x177)) returned 1
	[0135.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.452] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.452] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fc6680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.453] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.453] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.453] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.455] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.455] WriteFile (in: hFile=0x348, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.456] CloseHandle (hObject=0x348) returned 1
	[0135.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fc6680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fc6e50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0135.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.473] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.473] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.473] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.473] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.474] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.474] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.475] WriteFile (in: hFile=0x34c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.517] CloseHandle (hObject=0x34c) returned 1
	[0135.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1
	[0135.518] SetEvent (hEvent=0x320) returned 1
	[0135.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.519] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.519] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.519] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.519] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.521] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.521] WriteFile (in: hFile=0x34c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.522] CloseHandle (hObject=0x34c) returned 1
	[0135.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0135.523] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.537] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.537] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.537] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.537] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.538] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.539] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.539] WriteFile (in: hFile=0x34c, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.540] CloseHandle (hObject=0x34c) returned 1
	[0135.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaa)) returned 1
	[0135.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.541] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fec7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85fec7e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.542] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.542] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.542] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.543] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.543] WriteFile (in: hFile=0x34c, lpBuffer=0x12613300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12613300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.544] CloseHandle (hObject=0x34c) returned 1
	[0135.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2)) returned 1
	[0135.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.548] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.553] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.553] SetEvent (hEvent=0x70) returned 1
	[0135.553] SetEvent (hEvent=0x80) returned 1
	[0135.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.554] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x127d5d0c | out: lpMode=0x127d5d0c) returned 0
	[0135.554] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127d5ad0 | out: lpFileInformation=0x127d5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xc2)) returned 1
	[0135.554] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0135.554] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0135.554] ReadFile (in: hFile=0x34c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x127d5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x127d5d1c*=0xc2, lpOverlapped=0x0) returned 1
	[0135.555] GetFileType (hFile=0x34c) returned 0x1
	[0135.555] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x127d5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.555] WriteFile (in: hFile=0x34c, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0xc2, lpNumberOfBytesWritten=0x127d5d00, lpOverlapped=0x127d5d0c | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x127d5d00*=0xc2, lpOverlapped=0x127d5d0c) returned 1
	[0135.555] GetFileType (hFile=0x34c) returned 0x1
	[0135.556] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xc2, lpNewFilePointer=0x0, dwMoveMethod=0x127d5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0135.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0135.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0135.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0135.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.556] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x127d5d0c | out: lpMode=0x127d5d0c) returned 0
	[0135.556] WriteFile (in: hFile=0x348, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x127d5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x127d5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.556] CloseHandle (hObject=0x348) returned 1
	[0135.557] CloseHandle (hObject=0x34c) returned 1
	[0135.557] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.558] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.558] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.558] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8636e710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0135.558] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0135.558] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.558] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.562] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0135.562] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0135.563] CloseHandle (hObject=0x34c) returned 1
	[0135.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8636e710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8636e710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8636e710, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xaf3)) returned 1
	[0135.564] SetEvent (hEvent=0x80) returned 1
	[0135.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x4454)) returned 1
	[0135.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1103)) returned 1
	[0135.585] SetEvent (hEvent=0x70) returned 1
	[0135.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dasherSettingSchema.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\dashersettingschema.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x356)) returned 1
	[0135.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1
	[0135.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1
	[0135.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0135.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.587] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85dd4d90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1
	[0135.587] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322c0 | out: pbBuffer=0x127322c0) returned 1
	[0135.587] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e140 | out: pbBuffer=0x1251e140) returned 1
	[0135.587] ReadFile (in: hFile=0x348, lpBuffer=0x12686000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12686000*, lpNumberOfBytesRead=0x124f3d1c*=0x5b1, lpOverlapped=0x0) returned 1
	[0135.594] GetFileType (hFile=0x348) returned 0x1
	[0135.594] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.594] WriteFile (in: hFile=0x348, lpBuffer=0x12608000*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12608000*, lpNumberOfBytesWritten=0x124f3d00*=0x5b1, lpOverlapped=0x124f3d0c) returned 1
	[0135.595] GetFileType (hFile=0x348) returned 0x1
	[0135.595] SetFilePointerEx (in: hFile=0x348, liDistanceToMove=0x5b1, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.595] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0135.595] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0135.595] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0135.595] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e688 | out: pbBuffer=0x1251e688) returned 1
	[0135.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.596] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.596] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.607] CloseHandle (hObject=0x340) returned 1
	[0135.607] CloseHandle (hObject=0x348) returned 1
	[0135.703] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\manifest.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.710] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0135.710] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732580 | out: pbBuffer=0x12732580) returned 1
	[0135.710] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e6b0 | out: pbBuffer=0x1251e6b0) returned 1
	[0135.710] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0xe0, lpOverlapped=0x0) returned 1
	[0135.711] GetFileType (hFile=0x33c) returned 0x1
	[0135.711] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.711] WriteFile (in: hFile=0x33c, lpBuffer=0x127ec540*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127ec540*, lpNumberOfBytesWritten=0x124f3d00*=0xe0, lpOverlapped=0x124f3d0c) returned 1
	[0135.712] GetFileType (hFile=0x33c) returned 0x1
	[0135.712] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.712] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0135.712] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0135.712] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0135.712] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e768 | out: pbBuffer=0x1251e768) returned 1
	[0135.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.712] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.712] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.713] CloseHandle (hObject=0x2cc) returned 1
	[0135.713] CloseHandle (hObject=0x33c) returned 1
	[0135.722] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\page_embed_script.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.753] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.761] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.780] SetEvent (hEvent=0x80) returned 1
	[0135.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.781] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826b1200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1
	[0135.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0135.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0135.781] ReadFile (in: hFile=0x32c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0x282, lpOverlapped=0x0) returned 1
	[0135.798] GetFileType (hFile=0x32c) returned 0x1
	[0135.798] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.799] WriteFile (in: hFile=0x32c, lpBuffer=0x1248c2c0*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1248c2c0*, lpNumberOfBytesWritten=0x124f3d00*=0x282, lpOverlapped=0x124f3d0c) returned 1
	[0135.799] GetFileType (hFile=0x32c) returned 0x1
	[0135.799] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x282, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0135.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0135.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0135.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0135.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.800] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.800] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.800] CloseHandle (hObject=0x33c) returned 1
	[0135.800] CloseHandle (hObject=0x32c) returned 1
	[0135.800] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\da\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.801] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826df830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826e1f40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1
	[0135.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732520 | out: pbBuffer=0x12732520) returned 1
	[0135.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0135.801] ReadFile (in: hFile=0x32c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f3d1c*=0x269, lpOverlapped=0x0) returned 1
	[0135.816] GetFileType (hFile=0x32c) returned 0x1
	[0135.817] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.817] WriteFile (in: hFile=0x32c, lpBuffer=0x125f6500*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125f6500*, lpNumberOfBytesWritten=0x124f3d00*=0x269, lpOverlapped=0x124f3d0c) returned 1
	[0135.817] GetFileType (hFile=0x32c) returned 0x1
	[0135.817] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x269, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0135.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0135.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0135.818] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0135.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.818] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.818] WriteFile (in: hFile=0x344, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.818] CloseHandle (hObject=0x344) returned 1
	[0135.818] CloseHandle (hObject=0x32c) returned 1
	[0135.819] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_GB\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\en_gb\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.820] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.829] SetEvent (hEvent=0x80) returned 1
	[0135.829] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.830] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x127d5d0c | out: lpMode=0x127d5d0c) returned 0
	[0135.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127d5ad0 | out: lpFileInformation=0x127d5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1
	[0135.830] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732740 | out: pbBuffer=0x12732740) returned 1
	[0135.830] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0135.830] ReadFile (in: hFile=0x32c, lpBuffer=0x128f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x127d5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128f8000*, lpNumberOfBytesRead=0x127d5d1c*=0x2b8, lpOverlapped=0x0) returned 1
	[0135.836] GetFileType (hFile=0x32c) returned 0x1
	[0135.836] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x127d5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.836] WriteFile (in: hFile=0x32c, lpBuffer=0x1248cb00*, nNumberOfBytesToWrite=0x2b8, lpNumberOfBytesWritten=0x127d5d00, lpOverlapped=0x127d5d0c | out: lpBuffer=0x1248cb00*, lpNumberOfBytesWritten=0x127d5d00*=0x2b8, lpOverlapped=0x127d5d0c) returned 1
	[0135.836] GetFileType (hFile=0x32c) returned 0x1
	[0135.836] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x2b8, lpNewFilePointer=0x0, dwMoveMethod=0x127d5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0135.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0135.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0135.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0135.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.837] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x127d5d0c | out: lpMode=0x127d5d0c) returned 0
	[0135.837] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x127d5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x127d5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.837] CloseHandle (hObject=0x2cc) returned 1
	[0135.838] CloseHandle (hObject=0x32c) returned 1
	[0135.838] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.839] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261)) returned 1
	[0135.839] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732980 | out: pbBuffer=0x12732980) returned 1
	[0135.839] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788378 | out: pbBuffer=0x12788378) returned 1
	[0135.839] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0135.840] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0135.840] SetEvent (hEvent=0xa0) returned 1
	[0135.840] SetEvent (hEvent=0x68) returned 1
	[0135.840] ReadFile (in: hFile=0x32c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x261, lpOverlapped=0x0) returned 1
	[0135.842] GetFileType (hFile=0x32c) returned 0x1
	[0135.842] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.842] WriteFile (in: hFile=0x32c, lpBuffer=0x125d4c80*, nNumberOfBytesToWrite=0x261, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125d4c80*, lpNumberOfBytesWritten=0x12429d00*=0x261, lpOverlapped=0x12429d0c) returned 1
	[0135.842] GetFileType (hFile=0x32c) returned 0x1
	[0135.842] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x261, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0135.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0135.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e81 | out: pbBuffer=0x127e8e81) returned 1
	[0135.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788430 | out: pbBuffer=0x12788430) returned 1
	[0135.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.843] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.843] WriteFile (in: hFile=0x2cc, lpBuffer=0x1297e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1297e000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.843] CloseHandle (hObject=0x2cc) returned 1
	[0135.843] CloseHandle (hObject=0x32c) returned 1
	[0135.844] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.845] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0135.845] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0135.846] SetEvent (hEvent=0x80) returned 1
	[0135.846] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0135.863] GetFileType (hFile=0x344) returned 0x1
	[0135.863] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.863] WriteFile (in: hFile=0x344, lpBuffer=0x1248a000*, nNumberOfBytesToWrite=0x29b, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1248a000*, lpNumberOfBytesWritten=0x124f1d00*=0x29b, lpOverlapped=0x124f1d0c) returned 1
	[0135.863] GetFileType (hFile=0x344) returned 0x1
	[0135.863] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x29b, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.863] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0135.863] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0135.864] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0135.864] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0135.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.864] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.864] WriteFile (in: hFile=0x32c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.864] CloseHandle (hObject=0x32c) returned 1
	[0135.864] CloseHandle (hObject=0x344) returned 1
	[0135.864] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.866] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8270de60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2a1)) returned 1
	[0135.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0135.866] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103c8 | out: pbBuffer=0x124103c8) returned 1
	[0135.866] ReadFile (in: hFile=0x344, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x2a1, lpOverlapped=0x0) returned 1
	[0135.878] GetFileType (hFile=0x344) returned 0x1
	[0135.878] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.878] WriteFile (in: hFile=0x344, lpBuffer=0x1248a580*, nNumberOfBytesToWrite=0x2a1, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1248a580*, lpNumberOfBytesWritten=0x12429d00*=0x2a1, lpOverlapped=0x12429d0c) returned 1
	[0135.879] GetFileType (hFile=0x344) returned 0x1
	[0135.879] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x2a1, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.879] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0135.879] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0135.879] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0135.879] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0135.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.879] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.879] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.879] CloseHandle (hObject=0x2cc) returned 1
	[0135.879] CloseHandle (hObject=0x344) returned 1
	[0135.880] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.881] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827216e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82723df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c4)) returned 1
	[0135.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0135.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0135.881] ReadFile (in: hFile=0x344, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1242bd1c*=0x2c4, lpOverlapped=0x0) returned 1
	[0135.893] GetFileType (hFile=0x344) returned 0x1
	[0135.893] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.893] WriteFile (in: hFile=0x344, lpBuffer=0x1260a300*, nNumberOfBytesToWrite=0x2c4, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260a300*, lpNumberOfBytesWritten=0x1242bd00*=0x2c4, lpOverlapped=0x1242bd0c) returned 1
	[0135.893] GetFileType (hFile=0x344) returned 0x1
	[0135.893] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x2c4, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.893] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0135.893] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0135.894] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0135.894] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0135.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.894] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.894] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.894] CloseHandle (hObject=0x34c) returned 1
	[0135.894] CloseHandle (hObject=0x344) returned 1
	[0135.894] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.895] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.896] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827439c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827460d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x279)) returned 1
	[0135.896] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0135.896] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0135.896] ReadFile (in: hFile=0x344, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x12429d1c*=0x279, lpOverlapped=0x0) returned 1
	[0135.919] GetFileType (hFile=0x344) returned 0x1
	[0135.919] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.919] WriteFile (in: hFile=0x344, lpBuffer=0x12743900*, nNumberOfBytesToWrite=0x279, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12743900*, lpNumberOfBytesWritten=0x12429d00*=0x279, lpOverlapped=0x12429d0c) returned 1
	[0135.920] GetFileType (hFile=0x344) returned 0x1
	[0135.920] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x279, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0135.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0135.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0135.921] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106e0 | out: pbBuffer=0x124106e0) returned 1
	[0135.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.921] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.921] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.921] CloseHandle (hObject=0x33c) returned 1
	[0135.921] CloseHandle (hObject=0x344) returned 1
	[0135.921] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.923] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.923] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.923] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.923] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.923] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0135.924] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.925] WriteFile (in: hFile=0x344, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.926] CloseHandle (hObject=0x344) returned 1
	[0135.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e)) returned 1
	[0135.939] SetEvent (hEvent=0x320) returned 1
	[0135.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.939] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.939] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.940] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.940] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.940] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.941] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.941] WriteFile (in: hFile=0x2cc, lpBuffer=0x125ff300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x125ff300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.943] CloseHandle (hObject=0x2cc) returned 1
	[0135.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82765ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30a)) returned 1
	[0135.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.943] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.944] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.944] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.944] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.944] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.945] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.945] WriteFile (in: hFile=0x2cc, lpBuffer=0x12600600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12600600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.946] CloseHandle (hObject=0x2cc) returned 1
	[0135.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8276f8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29d)) returned 1
	[0135.951] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.951] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.951] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.951] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.951] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.952] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.953] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.953] WriteFile (in: hFile=0x32c, lpBuffer=0x12601900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12601900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.954] CloseHandle (hObject=0x32c) returned 1
	[0135.954] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82779520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2ae)) returned 1
	[0135.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.955] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.955] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.955] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.955] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.955] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.957] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.957] WriteFile (in: hFile=0x32c, lpBuffer=0x12602c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12602c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.958] CloseHandle (hObject=0x32c) returned 1
	[0135.960] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.968] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0135.993] SetEvent (hEvent=0x80) returned 1
	[0135.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.994] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82783160, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bb)) returned 1
	[0135.994] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0135.994] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0135.994] ReadFile (in: hFile=0x34c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f1d1c*=0x2bb, lpOverlapped=0x0) returned 1
	[0136.007] GetFileType (hFile=0x34c) returned 0x1
	[0136.007] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.007] WriteFile (in: hFile=0x34c, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x2bb, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x124f1d00*=0x2bb, lpOverlapped=0x124f1d0c) returned 1
	[0136.007] GetFileType (hFile=0x34c) returned 0x1
	[0136.007] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x2bb, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0136.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0136.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0136.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0136.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.008] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.008] WriteFile (in: hFile=0x2cc, lpBuffer=0x1298c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1298c000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.008] CloseHandle (hObject=0x2cc) returned 1
	[0136.009] CloseHandle (hObject=0x34c) returned 1
	[0136.009] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\lv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.010] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.011] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827942d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827969e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1
	[0136.011] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0136.011] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0136.011] ReadFile (in: hFile=0x34c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x282, lpOverlapped=0x0) returned 1
	[0136.030] GetFileType (hFile=0x34c) returned 0x1
	[0136.030] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.031] WriteFile (in: hFile=0x34c, lpBuffer=0x12624580*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12624580*, lpNumberOfBytesWritten=0x1242bd00*=0x282, lpOverlapped=0x1242bd0c) returned 1
	[0136.031] GetFileType (hFile=0x34c) returned 0x1
	[0136.031] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x282, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.031] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0136.031] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0136.031] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0136.032] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0136.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.032] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.032] WriteFile (in: hFile=0x33c, lpBuffer=0x1298c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1298c500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.032] CloseHandle (hObject=0x33c) returned 1
	[0136.032] CloseHandle (hObject=0x34c) returned 1
	[0136.032] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\nl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.034] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.035] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.035] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827b65b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.035] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.035] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.036] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.036] WriteFile (in: hFile=0x34c, lpBuffer=0x12616000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12616000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.038] CloseHandle (hObject=0x34c) returned 1
	[0136.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827b65b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b8cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29c)) returned 1
	[0136.060] SetEvent (hEvent=0x80) returned 1
	[0136.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.061] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.061] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.061] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827cc540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cec50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.061] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.061] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.063] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.063] WriteFile (in: hFile=0x32c, lpBuffer=0x12617300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12617300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.064] CloseHandle (hObject=0x32c) returned 1
	[0136.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827cc540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cec50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30f)) returned 1
	[0136.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0136.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0136.066] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0136.066] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0136.066] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827e72f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e9a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0136.066] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0136.066] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0136.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0136.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0136.066] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.067] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0136.067] WriteFile (in: hFile=0x32c, lpBuffer=0x12618600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12618600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0136.069] CloseHandle (hObject=0x32c) returned 1
	[0136.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827e72f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e9a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29f)) returned 1
	[0136.076] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0136.253] SetEvent (hEvent=0x80) returned 1
	[0136.253] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0136.257] SetEvent (hEvent=0x80) returned 1
	[0136.257] SetEvent (hEvent=0x68) returned 1
	[0136.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.258] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827cc540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cec50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x30f)) returned 1
	[0136.258] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0136.258] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0136.258] ReadFile (in: hFile=0x32c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0x30f, lpOverlapped=0x0) returned 1
	[0136.272] GetFileType (hFile=0x32c) returned 0x1
	[0136.272] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.272] WriteFile (in: hFile=0x32c, lpBuffer=0x124fa000*, nNumberOfBytesToWrite=0x30f, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124fa000*, lpNumberOfBytesWritten=0x124f5d00*=0x30f, lpOverlapped=0x124f5d0c) returned 1
	[0136.272] GetFileType (hFile=0x32c) returned 0x1
	[0136.272] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x30f, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.272] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0136.272] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0136.272] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0136.273] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0136.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.273] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.273] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.273] CloseHandle (hObject=0x2cc) returned 1
	[0136.273] CloseHandle (hObject=0x32c) returned 1
	[0136.273] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ru\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.275] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x827fab70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fd280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab2840, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1
	[0136.275] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0136.275] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0136.275] ReadFile (in: hFile=0x32c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x282, lpOverlapped=0x0) returned 1
	[0136.295] GetFileType (hFile=0x32c) returned 0x1
	[0136.295] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.295] WriteFile (in: hFile=0x32c, lpBuffer=0x126022c0*, nNumberOfBytesToWrite=0x282, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x126022c0*, lpNumberOfBytesWritten=0x12429d00*=0x282, lpOverlapped=0x12429d0c) returned 1
	[0136.295] GetFileType (hFile=0x32c) returned 0x1
	[0136.295] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x282, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0136.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0136.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0136.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0136.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.296] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.296] WriteFile (in: hFile=0x34c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.296] CloseHandle (hObject=0x34c) returned 1
	[0136.296] CloseHandle (hObject=0x32c) returned 1
	[0136.297] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\sl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.298] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0136.332] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0136.349] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0136.360] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0136.372] SetEvent (hEvent=0x68) returned 1
	[0136.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.373] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82885e00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab4f50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1
	[0136.373] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0136.373] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0136.373] ReadFile (in: hFile=0x344, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x12429d1c*=0x280, lpOverlapped=0x0) returned 1
	[0136.394] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0136.400] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0136.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.433] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x3b059)) returned 1
	[0136.433] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0136.433] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0136.433] ReadFile (in: hFile=0x34c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0136.478] GetFileType (hFile=0x34c) returned 0x1
	[0136.478] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.478] WriteFile (in: hFile=0x34c, lpBuffer=0x12958000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12958000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0136.479] GetFileType (hFile=0x34c) returned 0x1
	[0136.479] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.479] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0136.479] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0136.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0136.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744640 | out: pbBuffer=0x12744640) returned 1
	[0136.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0136.480] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.480] WriteFile (in: hFile=0x344, lpBuffer=0x125e4a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.503] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0136.519] SetEvent (hEvent=0x80) returned 1
	[0136.519] CloseHandle (hObject=0x344) returned 1
	[0136.519] CloseHandle (hObject=0x34c) returned 1
	[0136.519] SetEvent (hEvent=0x30c) returned 1
	[0136.519] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0137.304] SetEvent (hEvent=0x2e4) returned 1
	[0137.305] SetEvent (hEvent=0x70) returned 1
	[0137.305] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0137.310] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0137.310] SetEvent (hEvent=0x80) returned 1
	[0137.311] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0137.319] GetFileType (hFile=0x34c) returned 0x1
	[0137.319] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.320] WriteFile (in: hFile=0x34c, lpBuffer=0x12600000*, nNumberOfBytesToWrite=0x4b63, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12600000*, lpNumberOfBytesWritten=0x124f1d00*=0x4b63, lpOverlapped=0x124f1d0c) returned 1
	[0137.320] GetFileType (hFile=0x34c) returned 0x1
	[0137.320] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x4b63, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0137.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0137.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0137.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410430 | out: pbBuffer=0x12410430) returned 1
	[0137.320] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.321] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.321] WriteFile (in: hFile=0x32c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.321] CloseHandle (hObject=0x32c) returned 1
	[0137.321] CloseHandle (hObject=0x34c) returned 1
	[0137.321] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.322] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0137.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834126b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83414dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x405d)) returned 1
	[0137.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0137.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410468 | out: pbBuffer=0x12410468) returned 1
	[0137.323] ReadFile (in: hFile=0x34c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0x405d, lpOverlapped=0x0) returned 1
	[0137.339] GetFileType (hFile=0x34c) returned 0x1
	[0137.339] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.340] WriteFile (in: hFile=0x34c, lpBuffer=0x128d8000*, nNumberOfBytesToWrite=0x405d, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x128d8000*, lpNumberOfBytesWritten=0x124f5d00*=0x405d, lpOverlapped=0x124f5d0c) returned 1
	[0137.340] GetFileType (hFile=0x34c) returned 0x1
	[0137.340] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x405d, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.340] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0137.340] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0137.340] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0137.340] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410580 | out: pbBuffer=0x12410580) returned 1
	[0137.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0137.341] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0137.341] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.341] CloseHandle (hObject=0x344) returned 1
	[0137.341] CloseHandle (hObject=0x34c) returned 1
	[0137.341] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ca\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.343] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8342fb70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83432280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x406f)) returned 1
	[0137.343] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0137.343] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410598 | out: pbBuffer=0x12410598) returned 1
	[0137.343] ReadFile (in: hFile=0x34c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f1d1c*=0x406f, lpOverlapped=0x0) returned 1
	[0137.362] GetFileType (hFile=0x34c) returned 0x1
	[0137.363] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.363] WriteFile (in: hFile=0x34c, lpBuffer=0x128dc800*, nNumberOfBytesToWrite=0x406f, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x128dc800*, lpNumberOfBytesWritten=0x124f1d00*=0x406f, lpOverlapped=0x124f1d0c) returned 1
	[0137.363] GetFileType (hFile=0x34c) returned 0x1
	[0137.363] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x406f, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.363] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0137.363] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0137.363] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0137.363] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106a0 | out: pbBuffer=0x124106a0) returned 1
	[0137.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.364] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.364] WriteFile (in: hFile=0x32c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.364] CloseHandle (hObject=0x32c) returned 1
	[0137.364] CloseHandle (hObject=0x34c) returned 1
	[0137.364] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\de\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.365] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0137.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277fad0 | out: lpFileInformation=0x1277fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8343e5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83440ce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d7a)) returned 1
	[0137.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0137.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106b8 | out: pbBuffer=0x124106b8) returned 1
	[0137.365] ReadFile (in: hFile=0x34c, lpBuffer=0x1293c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1293c000*, lpNumberOfBytesRead=0x1277fd1c*=0x3d7a, lpOverlapped=0x0) returned 1
	[0137.382] GetFileType (hFile=0x34c) returned 0x1
	[0137.382] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.382] WriteFile (in: hFile=0x34c, lpBuffer=0x125ec000*, nNumberOfBytesToWrite=0x3d7a, lpNumberOfBytesWritten=0x1277fd00, lpOverlapped=0x1277fd0c | out: lpBuffer=0x125ec000*, lpNumberOfBytesWritten=0x1277fd00*=0x3d7a, lpOverlapped=0x1277fd0c) returned 1
	[0137.382] GetFileType (hFile=0x34c) returned 0x1
	[0137.383] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x3d7a, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0137.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0137.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0137.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410800 | out: pbBuffer=0x12410800) returned 1
	[0137.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.384] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0137.384] WriteFile (in: hFile=0x32c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x1277fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.384] CloseHandle (hObject=0x32c) returned 1
	[0137.384] CloseHandle (hObject=0x34c) returned 1
	[0137.384] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\en\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.385] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0137.398] SetEvent (hEvent=0x30c) returned 1
	[0137.399] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0137.412] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0137.412] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0137.412] SetEvent (hEvent=0x30c) returned 1
	[0137.413] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0137.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.437] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1277bd0c | out: lpMode=0x1277bd0c) returned 0
	[0137.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277bad0 | out: lpFileInformation=0x1277bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8345ba90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8345ba90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83984760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x46f5)) returned 1
	[0137.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0137.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0137.437] ReadFile (in: hFile=0x34c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1277bd1c*=0x46f5, lpOverlapped=0x0) returned 1
	[0137.459] GetFileType (hFile=0x34c) returned 0x1
	[0137.459] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277bce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.459] WriteFile (in: hFile=0x34c, lpBuffer=0x125ce000*, nNumberOfBytesToWrite=0x46f5, lpNumberOfBytesWritten=0x1277bd00, lpOverlapped=0x1277bd0c | out: lpBuffer=0x125ce000*, lpNumberOfBytesWritten=0x1277bd00*=0x46f5, lpOverlapped=0x1277bd0c) returned 1
	[0137.459] GetFileType (hFile=0x34c) returned 0x1
	[0137.459] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x46f5, lpNewFilePointer=0x0, dwMoveMethod=0x1277bce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0137.460] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0137.460] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0137.460] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0137.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0137.460] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1277bd0c | out: lpMode=0x1277bd0c) returned 0
	[0137.460] WriteFile (in: hFile=0x344, lpBuffer=0x12992000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12992000*, lpNumberOfBytesWritten=0x1277bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.461] CloseHandle (hObject=0x344) returned 1
	[0137.461] CloseHandle (hObject=0x34c) returned 1
	[0137.461] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fa\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.463] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125cdd0c | out: lpMode=0x125cdd0c) returned 0
	[0137.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x125cdad0 | out: lpFileInformation=0x125cdad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8346cc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83471a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4082)) returned 1
	[0137.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0137.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0137.463] ReadFile (in: hFile=0x34c, lpBuffer=0x128ec000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125cdd1c, lpOverlapped=0x0 | out: lpBuffer=0x128ec000*, lpNumberOfBytesRead=0x125cdd1c*=0x4082, lpOverlapped=0x0) returned 1
	[0137.514] GetFileType (hFile=0x34c) returned 0x1
	[0137.514] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125cdce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.514] WriteFile (in: hFile=0x34c, lpBuffer=0x125d2800*, nNumberOfBytesToWrite=0x4082, lpNumberOfBytesWritten=0x125cdd00, lpOverlapped=0x125cdd0c | out: lpBuffer=0x125d2800*, lpNumberOfBytesWritten=0x125cdd00*=0x4082, lpOverlapped=0x125cdd0c) returned 1
	[0137.548] GetFileType (hFile=0x34c) returned 0x1
	[0137.548] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x4082, lpNewFilePointer=0x0, dwMoveMethod=0x125cdce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.549] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0137.549] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0137.549] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0137.549] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0137.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0137.549] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x125cdd0c | out: lpMode=0x125cdd0c) returned 0
	[0137.549] WriteFile (in: hFile=0x2cc, lpBuffer=0x12992500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125cdd0c, lpOverlapped=0x0 | out: lpBuffer=0x12992500*, lpNumberOfBytesWritten=0x125cdd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.550] CloseHandle (hObject=0x2cc) returned 1
	[0137.550] CloseHandle (hObject=0x34c) returned 1
	[0137.550] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fil\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.551] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8348c7d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8348eee0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.552] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.552] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.553] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.554] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.555] CloseHandle (hObject=0x34c) returned 1
	[0137.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8348eee0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8348eee0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ff2)) returned 1
	[0137.610] SetEvent (hEvent=0x70) returned 1
	[0137.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.611] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.611] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83496410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83498b20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83498b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.611] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.611] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.611] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.612] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.612] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.614] CloseHandle (hObject=0x32c) returned 1
	[0137.614] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83498b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8349d940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40d4)) returned 1
	[0137.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.615] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a2760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a4e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.615] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.615] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.615] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.617] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.617] WriteFile (in: hFile=0x32c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.619] CloseHandle (hObject=0x32c) returned 1
	[0137.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a4e70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a4e70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e5d)) returned 1
	[0137.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.658] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.658] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834a7580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.658] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.658] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.658] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0137.660] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.660] WriteFile (in: hFile=0x344, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.661] CloseHandle (hObject=0x344) returned 1
	[0137.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c)) returned 1
	[0137.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.663] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834aeab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b11c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834b11c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.663] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.663] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.663] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0137.829] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.830] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0137.886] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0137.886] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0137.886] SetEvent (hEvent=0x30c) returned 1
	[0137.887] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0137.925] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0137.925] WriteFile (in: hFile=0x2cc, lpBuffer=0x125bd900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x125bd900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.926] CloseHandle (hObject=0x2cc) returned 1
	[0137.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074)) returned 1
	[0137.967] SetEvent (hEvent=0x30c) returned 1
	[0137.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.968] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.968] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834b86f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bae00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834bae00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.968] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.968] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.968] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.970] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.970] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.971] CloseHandle (hObject=0x33c) returned 1
	[0137.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834bae00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834bd510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x447a)) returned 1
	[0137.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0137.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0137.973] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0137.973] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834c4a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c7150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834c7150, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0137.973] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0137.973] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0137.973] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0137.973] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0137.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0137.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.974] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0137.974] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0137.976] CloseHandle (hObject=0x33c) returned 1
	[0137.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3)) returned 1
	[0138.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.025] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.026] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834cbf70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ce680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ce680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.026] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.026] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.026] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.026] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.027] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.027] WriteFile (in: hFile=0x2cc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.029] CloseHandle (hObject=0x2cc) returned 1
	[0138.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ce680, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d0d90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x403a)) returned 1
	[0138.029] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.030] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.030] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834d34a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d5bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834d5bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.030] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.030] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.030] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.032] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.032] WriteFile (in: hFile=0x2cc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.033] CloseHandle (hObject=0x2cc) returned 1
	[0138.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b)) returned 1
	[0138.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.077] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.077] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834da9d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834dd0e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834dd0e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.078] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.078] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.078] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0138.079] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.079] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.080] CloseHandle (hObject=0x344) returned 1
	[0138.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834dd0e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834df7f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x41bf)) returned 1
	[0138.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0138.081] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125cdd0c | out: lpMode=0x125cdd0c) returned 0
	[0138.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x125cdad0 | out: lpFileInformation=0x125cdad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834d5bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834d82c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x416b)) returned 1
	[0138.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0138.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410480 | out: pbBuffer=0x12410480) returned 1
	[0138.082] ReadFile (in: hFile=0x344, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125cdd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x125cdd1c*=0x416b, lpOverlapped=0x0) returned 1
	[0138.133] GetFileType (hFile=0x344) returned 0x1
	[0138.133] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125cdce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.133] WriteFile (in: hFile=0x344, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0x416b, lpNumberOfBytesWritten=0x125cdd00, lpOverlapped=0x125cdd0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x125cdd00*=0x416b, lpOverlapped=0x125cdd0c) returned 1
	[0138.133] GetFileType (hFile=0x344) returned 0x1
	[0138.133] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x416b, lpNewFilePointer=0x0, dwMoveMethod=0x125cdce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.133] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0138.133] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0138.133] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0138.134] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106e0 | out: pbBuffer=0x124106e0) returned 1
	[0138.134] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0138.134] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125cdd0c | out: lpMode=0x125cdd0c) returned 0
	[0138.134] WriteFile (in: hFile=0x33c, lpBuffer=0x12720500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125cdd0c, lpOverlapped=0x0 | out: lpBuffer=0x12720500*, lpNumberOfBytesWritten=0x125cdd0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.134] CloseHandle (hObject=0x33c) returned 1
	[0138.134] CloseHandle (hObject=0x344) returned 1
	[0138.134] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\lt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0138.183] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0138.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f)) returned 1
	[0138.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732520 | out: pbBuffer=0x12732520) returned 1
	[0138.183] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410770 | out: pbBuffer=0x12410770) returned 1
	[0138.183] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0138.269] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0138.269] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0138.269] SetEvent (hEvent=0xa0) returned 1
	[0138.269] SetEvent (hEvent=0x68) returned 1
	[0138.269] ReadFile (in: hFile=0x344, lpBuffer=0x1254c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1254c000*, lpNumberOfBytesRead=0x124f1d1c*=0x583f, lpOverlapped=0x0) returned 1
	[0138.370] GetFileType (hFile=0x344) returned 0x1
	[0138.370] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.370] WriteFile (in: hFile=0x344, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x583f, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x124f1d00*=0x583f, lpOverlapped=0x124f1d0c) returned 1
	[0138.370] GetFileType (hFile=0x344) returned 0x1
	[0138.370] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x583f, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0138.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0138.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0138.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410848 | out: pbBuffer=0x12410848) returned 1
	[0138.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.371] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0138.372] WriteFile (in: hFile=0x2cc, lpBuffer=0x12720a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12720a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.372] CloseHandle (hObject=0x2cc) returned 1
	[0138.372] CloseHandle (hObject=0x344) returned 1
	[0138.372] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.374] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0138.411] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0138.411] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0138.411] SetEvent (hEvent=0x30c) returned 1
	[0138.411] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0138.449] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0138.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0138.450] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0138.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224)) returned 1
	[0138.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0138.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0138.450] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f3d1c*=0x5224, lpOverlapped=0x0) returned 1
	[0138.498] GetFileType (hFile=0x344) returned 0x1
	[0138.498] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.498] WriteFile (in: hFile=0x344, lpBuffer=0x124a1500*, nNumberOfBytesToWrite=0x5224, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124a1500*, lpNumberOfBytesWritten=0x124f3d00*=0x5224, lpOverlapped=0x124f3d0c) returned 1
	[0138.498] GetFileType (hFile=0x344) returned 0x1
	[0138.498] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x5224, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.498] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0138.498] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0138.499] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0138.499] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0138.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.499] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0138.499] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.499] CloseHandle (hObject=0x2cc) returned 1
	[0138.499] CloseHandle (hObject=0x344) returned 1
	[0138.500] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0138.502] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0138.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b)) returned 1
	[0138.502] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0138.502] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0138.502] ReadFile (in: hFile=0x344, lpBuffer=0x125b2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125b2000*, lpNumberOfBytesRead=0x124f1d1c*=0x3f8b, lpOverlapped=0x0) returned 1
	[0138.561] GetFileType (hFile=0x344) returned 0x1
	[0138.561] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.561] WriteFile (in: hFile=0x344, lpBuffer=0x12460000*, nNumberOfBytesToWrite=0x3f8b, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12460000*, lpNumberOfBytesWritten=0x124f1d00*=0x3f8b, lpOverlapped=0x124f1d0c) returned 1
	[0138.561] GetFileType (hFile=0x344) returned 0x1
	[0138.561] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x3f8b, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.561] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0138.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0138.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0138.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0138.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0138.562] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0138.562] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.563] CloseHandle (hObject=0x33c) returned 1
	[0138.563] CloseHandle (hObject=0x344) returned 1
	[0138.563] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.564] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0138.565] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0138.565] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45)) returned 1
	[0138.565] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0138.565] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0138.565] ReadFile (in: hFile=0x344, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1276dd1c*=0x3f45, lpOverlapped=0x0) returned 1
	[0138.612] GetFileType (hFile=0x344) returned 0x1
	[0138.612] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.612] WriteFile (in: hFile=0x344, lpBuffer=0x12522000*, nNumberOfBytesToWrite=0x3f45, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12522000*, lpNumberOfBytesWritten=0x1276dd00*=0x3f45, lpOverlapped=0x1276dd0c) returned 1
	[0138.620] GetFileType (hFile=0x344) returned 0x1
	[0138.620] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x3f45, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.620] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0138.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0138.665] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0138.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0138.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.666] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0138.666] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.666] CloseHandle (hObject=0x2cc) returned 1
	[0138.666] CloseHandle (hObject=0x344) returned 1
	[0138.667] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0138.669] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0138.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1
	[0138.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0138.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e748 | out: pbBuffer=0x1251e748) returned 1
	[0138.669] ReadFile (in: hFile=0x344, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x124f1d1c*=0x3fdc, lpOverlapped=0x0) returned 1
	[0138.721] GetFileType (hFile=0x344) returned 0x1
	[0138.721] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.721] WriteFile (in: hFile=0x344, lpBuffer=0x1262a000*, nNumberOfBytesToWrite=0x3fdc, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1262a000*, lpNumberOfBytesWritten=0x124f1d00*=0x3fdc, lpOverlapped=0x124f1d0c) returned 1
	[0138.721] GetFileType (hFile=0x344) returned 0x1
	[0138.722] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x3fdc, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0138.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0138.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0138.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e860 | out: pbBuffer=0x1251e860) returned 1
	[0138.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.722] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0138.722] WriteFile (in: hFile=0x34c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.723] CloseHandle (hObject=0x34c) returned 1
	[0138.723] CloseHandle (hObject=0x344) returned 1
	[0138.723] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0138.725] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0138.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1
	[0138.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8c0 | out: pbBuffer=0x1252e8c0) returned 1
	[0138.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e878 | out: pbBuffer=0x1251e878) returned 1
	[0138.726] ReadFile (in: hFile=0x344, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x1276dd1c*=0x3fdc, lpOverlapped=0x0) returned 1
	[0138.816] GetFileType (hFile=0x344) returned 0x1
	[0138.816] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.816] WriteFile (in: hFile=0x344, lpBuffer=0x12584000*, nNumberOfBytesToWrite=0x3fdc, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12584000*, lpNumberOfBytesWritten=0x1276dd00*=0x3fdc, lpOverlapped=0x1276dd0c) returned 1
	[0138.817] GetFileType (hFile=0x344) returned 0x1
	[0138.817] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x3fdc, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0138.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0138.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0138.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ea90 | out: pbBuffer=0x1251ea90) returned 1
	[0138.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.818] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0138.818] WriteFile (in: hFile=0x34c, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.818] CloseHandle (hObject=0x34c) returned 1
	[0138.818] CloseHandle (hObject=0x344) returned 1
	[0138.818] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0138.820] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0138.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e)) returned 1
	[0138.820] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252eae0 | out: pbBuffer=0x1252eae0) returned 1
	[0138.821] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251eab8 | out: pbBuffer=0x1251eab8) returned 1
	[0138.821] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0138.856] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0138.856] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0138.856] SetEvent (hEvent=0xa0) returned 1
	[0138.856] SetEvent (hEvent=0x80) returned 1
	[0138.856] SetEvent (hEvent=0x2e4) returned 1
	[0138.856] ReadFile (in: hFile=0x344, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x124f1d1c*=0x490e, lpOverlapped=0x0) returned 1
	[0138.923] SetEvent (hEvent=0x2e4) returned 1
	[0138.923] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0138.957] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0138.957] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0138.994] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0138.995] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0138.995] SetEvent (hEvent=0x80) returned 1
	[0138.995] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0139.042] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0139.042] GetFileType (hFile=0x344) returned 0x1
	[0139.043] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.043] WriteFile (in: hFile=0x344, lpBuffer=0x125e4000*, nNumberOfBytesToWrite=0x490e, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x125e4000*, lpNumberOfBytesWritten=0x1276bd00*=0x490e, lpOverlapped=0x1276bd0c) returned 1
	[0139.043] GetFileType (hFile=0x344) returned 0x1
	[0139.043] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x490e, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.043] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0139.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0139.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0139.044] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0139.044] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0139.044] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0139.044] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.045] CloseHandle (hObject=0x2cc) returned 1
	[0139.045] CloseHandle (hObject=0x344) returned 1
	[0139.045] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0139.047] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0139.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a)) returned 1
	[0139.047] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c640 | out: pbBuffer=0x1244c640) returned 1
	[0139.047] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0139.048] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0x407a, lpOverlapped=0x0) returned 1
	[0140.773] SetEvent (hEvent=0xa0) returned 1
	[0140.774] GetFileType (hFile=0x344) returned 0x1
	[0140.774] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0140.774] WriteFile (in: hFile=0x344, lpBuffer=0x12614800*, nNumberOfBytesToWrite=0x407a, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12614800*, lpNumberOfBytesWritten=0x124f5d00*=0x407a, lpOverlapped=0x124f5d0c) returned 1
	[0140.774] GetFileType (hFile=0x344) returned 0x1
	[0140.774] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x407a, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0140.774] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0140.775] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0140.775] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0140.775] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0140.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0140.775] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0140.775] WriteFile (in: hFile=0x33c, lpBuffer=0x1298c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1298c500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0140.776] CloseHandle (hObject=0x33c) returned 1
	[0140.776] CloseHandle (hObject=0x344) returned 1
	[0140.776] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0140.777] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0141.944] SetEvent (hEvent=0x2e4) returned 1
	[0141.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0141.945] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0141.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836e0310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39)) returned 1
	[0141.945] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e280 | out: pbBuffer=0x1252e280) returned 1
	[0141.945] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f8 | out: pbBuffer=0x1251e5f8) returned 1
	[0141.945] ReadFile (in: hFile=0x33c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x1276bd1c*=0x3e39, lpOverlapped=0x0) returned 1
	[0142.442] GetFileType (hFile=0x33c) returned 0x1
	[0142.442] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.442] WriteFile (in: hFile=0x33c, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x3e39, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x1276bd00*=0x3e39, lpOverlapped=0x1276bd0c) returned 1
	[0142.443] GetFileType (hFile=0x33c) returned 0x1
	[0142.443] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3e39, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0142.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0142.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0142.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788180 | out: pbBuffer=0x12788180) returned 1
	[0142.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0142.444] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.444] WriteFile (in: hFile=0x348, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.444] CloseHandle (hObject=0x348) returned 1
	[0142.445] CloseHandle (hObject=0x33c) returned 1
	[0142.446] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.447] SetEvent (hEvent=0x2f4) returned 1
	[0142.447] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0142.447] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x181aa)) returned 1
	[0142.447] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ea60 | out: pbBuffer=0x1240ea60) returned 1
	[0142.447] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881a8 | out: pbBuffer=0x127881a8) returned 1
	[0142.448] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1276bd1c*=0x181aa, lpOverlapped=0x0) returned 1
	[0142.519] GetFileType (hFile=0x33c) returned 0x1
	[0142.519] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.519] WriteFile (in: hFile=0x33c, lpBuffer=0x12714000*, nNumberOfBytesToWrite=0x181aa, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x12714000*, lpNumberOfBytesWritten=0x1276bd00*=0x181aa, lpOverlapped=0x1276bd0c) returned 1
	[0142.520] GetFileType (hFile=0x33c) returned 0x1
	[0142.520] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x181aa, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.520] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0142.520] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0142.520] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0142.520] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788260 | out: pbBuffer=0x12788260) returned 1
	[0142.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0142.520] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.520] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.520] CloseHandle (hObject=0x2cc) returned 1
	[0142.521] CloseHandle (hObject=0x33c) returned 1
	[0142.521] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.665] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0142.698] SetEvent (hEvent=0x68) returned 1
	[0142.698] SetEvent (hEvent=0x320) returned 1
	[0142.699] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0142.699] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0142.699] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0142.699] SetEvent (hEvent=0x68) returned 1
	[0142.699] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0142.707] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0142.707] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0142.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8366b010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8366d720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x221da)) returned 1
	[0142.708] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0142.708] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0142.708] ReadFile (in: hFile=0x2cc, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0142.919] GetFileType (hFile=0x2cc) returned 0x1
	[0142.919] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.919] WriteFile (in: hFile=0x2cc, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0142.919] GetFileType (hFile=0x2cc) returned 0x1
	[0142.920] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0142.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0142.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0142.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0142.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0142.920] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0142.920] WriteFile (in: hFile=0x33c, lpBuffer=0x12608500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12608500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.930] CloseHandle (hObject=0x33c) returned 1
	[0142.931] CloseHandle (hObject=0x2cc) returned 1
	[0142.931] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0142.933] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0142.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836b6b00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836b9210, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x7c33)) returned 1
	[0142.933] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0142.933] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0142.933] ReadFile (in: hFile=0x2cc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x7c33, lpOverlapped=0x0) returned 1
	[0143.100] GetFileType (hFile=0x2cc) returned 0x1
	[0143.100] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.100] WriteFile (in: hFile=0x2cc, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x7c33, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x12429d00*=0x7c33, lpOverlapped=0x12429d0c) returned 1
	[0143.101] GetFileType (hFile=0x2cc) returned 0x1
	[0143.101] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x7c33, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.101] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0143.101] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0143.101] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0143.101] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788450 | out: pbBuffer=0x12788450) returned 1
	[0143.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.102] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.102] WriteFile (in: hFile=0x33c, lpBuffer=0x12609400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12609400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.102] CloseHandle (hObject=0x33c) returned 1
	[0143.102] CloseHandle (hObject=0x2cc) returned 1
	[0143.102] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_cast_streaming.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0143.108] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_webrtc.js"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836d3fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836d66d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x941)) returned 1
	[0143.109] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f8a0 | out: pbBuffer=0x1240f8a0) returned 1
	[0143.109] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788468 | out: pbBuffer=0x12788468) returned 1
	[0143.109] ReadFile (in: hFile=0x2cc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12429d1c*=0x941, lpOverlapped=0x0) returned 1
	[0143.132] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0143.237] SetEvent (hEvent=0x68) returned 1
	[0143.237] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0143.978] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0144.080] SetEvent (hEvent=0x70) returned 1
	[0144.080] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0144.115] SetEvent (hEvent=0x70) returned 1
	[0144.115] SetEvent (hEvent=0x320) returned 1
	[0144.115] SwitchToThread () returned 1
	[0144.151] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0145.387] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0146.140] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0146.168] SetEvent (hEvent=0x68) returned 1
	[0146.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0146.169] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0146.169] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1
	[0146.169] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0146.169] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0146.170] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0146.174] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0146.174] SetEvent (hEvent=0x68) returned 1
	[0146.174] ReadFile (in: hFile=0x2cc, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0146.187] GetFileType (hFile=0x2cc) returned 0x1
	[0146.187] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.187] WriteFile (in: hFile=0x2cc, lpBuffer=0x128f8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x128f8000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0146.188] GetFileType (hFile=0x2cc) returned 0x1
	[0146.188] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.188] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0146.188] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0146.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0146.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ea80 | out: pbBuffer=0x1251ea80) returned 1
	[0146.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.189] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0146.189] WriteFile (in: hFile=0x344, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0146.189] CloseHandle (hObject=0x344) returned 1
	[0146.198] CloseHandle (hObject=0x2cc) returned 1
	[0146.203] SwitchToThread () returned 1
	[0146.205] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\visited links.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0146.241] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0146.257] SetEvent (hEvent=0x80) returned 1
	[0146.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0146.259] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0146.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86989eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86989eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86989eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0146.259] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0146.259] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127442a8 | out: pbBuffer=0x127442a8) returned 1
	[0146.259] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f1d1c*=0x10, lpOverlapped=0x0) returned 1
	[0146.261] GetFileType (hFile=0x33c) returned 0x1
	[0146.261] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.261] WriteFile (in: hFile=0x33c, lpBuffer=0x12744310*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12744310*, lpNumberOfBytesWritten=0x124f1d00*=0x10, lpOverlapped=0x124f1d0c) returned 1
	[0146.261] GetFileType (hFile=0x33c) returned 0x1
	[0146.262] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0146.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec301 | out: pbBuffer=0x124ec301) returned 1
	[0146.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec401 | out: pbBuffer=0x124ec401) returned 1
	[0146.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127443f0 | out: pbBuffer=0x127443f0) returned 1
	[0146.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0146.263] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0146.263] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0146.263] CloseHandle (hObject=0x2cc) returned 1
	[0146.263] CloseHandle (hObject=0x33c) returned 1
	[0146.263] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0146.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0146.267] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0146.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8687f510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28df6)) returned 1
	[0146.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0146.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744428 | out: pbBuffer=0x12744428) returned 1
	[0146.267] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0146.284] GetFileType (hFile=0x33c) returned 0x1
	[0146.284] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.284] WriteFile (in: hFile=0x33c, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0146.284] GetFileType (hFile=0x33c) returned 0x1
	[0146.285] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec501 | out: pbBuffer=0x124ec501) returned 1
	[0146.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec601 | out: pbBuffer=0x124ec601) returned 1
	[0146.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0146.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744570 | out: pbBuffer=0x12744570) returned 1
	[0146.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0146.285] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0146.285] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0146.286] CloseHandle (hObject=0x340) returned 1
	[0146.286] CloseHandle (hObject=0x33c) returned 1
	[0146.286] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0146.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0146.290] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0146.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0146.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744588 | out: pbBuffer=0x12744588) returned 1
	[0146.290] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0x0, lpOverlapped=0x0) returned 1
	[0146.290] CloseHandle (hObject=0x33c) returned 1
	[0146.290] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0146.318] SetEvent (hEvent=0x80) returned 1
	[0146.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.319] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0146.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x802d66a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.319] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732560 | out: pbBuffer=0x12732560) returned 1
	[0146.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744598 | out: pbBuffer=0x12744598) returned 1
	[0146.320] ReadFile (in: hFile=0x344, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f3d1c*=0x0, lpOverlapped=0x0) returned 1
	[0146.320] CloseHandle (hObject=0x344) returned 1
	[0146.320] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0146.789] SetEvent (hEvent=0x80) returned 1
	[0146.790] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0147.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.094] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.094] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.094] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\swreporter\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0147.096] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0147.096] WriteFile (in: hFile=0x340, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0147.097] CloseHandle (hObject=0x340) returned 1
	[0147.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.098] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.098] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.099] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.099] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0147.100] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0147.101] WriteFile (in: hFile=0x340, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0147.102] CloseHandle (hObject=0x340) returned 1
	[0147.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.104] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.104] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.104] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.104] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pnacl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0147.106] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0147.106] WriteFile (in: hFile=0x340, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0147.107] CloseHandle (hObject=0x340) returned 1
	[0147.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.109] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.109] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.109] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.109] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\CrashReports\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\crashreports\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0147.110] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0147.110] WriteFile (in: hFile=0x340, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0147.112] CloseHandle (hObject=0x340) returned 1
	[0147.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29175f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29175f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29175f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.151] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\history"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x344
	[0147.151] GetFileInformationByHandle (in: hFile=0x344, lpFileInformation=0x124f7a84 | out: lpFileInformation=0x124f7a84) returned 1
	[0147.151] GetFileInformationByHandleEx (in: hFile=0x344, FileInformationClass=0x9, lpFileInformation=0x124f7a7c, dwBufferSize=0x8 | out: lpFileInformation=0x124f7a7c) returned 1
	[0147.151] CloseHandle (hObject=0x344) returned 1
	[0147.152] SetEvent (hEvent=0x80) returned 1
	[0147.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8de8eaa0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x126da7)) returned 1
	[0147.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0147.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.161] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x962f4540, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x962f4540, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f3aae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f780d90, ftCreationTime.dwHighDateTime=0x1d2dda2, ftLastAccessTime.dwLowDateTime=0x4bb72310, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb72310, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3dc40980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4bb4c1b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3abef650, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3abef650, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3abef650, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x962f4540, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5ef99320, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd8d1fc80, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xd8d1fc80, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0147.161] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c881c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c881c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~3")) returned 1
	[0147.162] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media", cAlternateFileName="WINDOW~2")) returned 1
	[0147.162] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1
	[0147.162] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.162] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0147.287] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0147.287] WriteFile (in: hFile=0x344, lpBuffer=0x1245b300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x1245b300*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0147.288] CloseHandle (hObject=0x344) returned 1
	[0147.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.289] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.289] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.289] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Credentials\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\credentials\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0147.327] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0147.327] WriteFile (in: hFile=0x33c, lpBuffer=0x1245c600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1245c600*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0147.328] CloseHandle (hObject=0x33c) returned 1
	[0147.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.334] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x32121370, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x32121370, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x32121370, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.334] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.335] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Event Viewer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\event viewer\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0147.336] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0147.336] WriteFile (in: hFile=0x33c, lpBuffer=0x1245d900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1245d900*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0147.337] CloseHandle (hObject=0x33c) returned 1
	[0147.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.341] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d1d6940, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.341] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1
	[0147.341] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.341] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0147.343] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0147.343] WriteFile (in: hFile=0x33c, lpBuffer=0x1245ec00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1245ec00*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0147.344] CloseHandle (hObject=0x33c) returned 1
	[0147.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc)) returned 1
	[0147.345] SetEvent (hEvent=0x2e4) returned 1
	[0147.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff0498b1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.357] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0147.363] SetEvent (hEvent=0x80) returned 1
	[0147.363] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0155.632] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0155.647] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0155.688] SetEvent (hEvent=0x320) returned 1
	[0155.688] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0155.709] SetEvent (hEvent=0x320) returned 1
	[0155.710] SetEvent (hEvent=0x2e4) returned 1
	[0155.710] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0155.711] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0155.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000)) returned 1
	[0155.711] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0155.711] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0155.711] ReadFile (in: hFile=0x340, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0155.740] GetFileType (hFile=0x340) returned 0x1
	[0155.740] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.740] WriteFile (in: hFile=0x340, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0155.741] GetFileType (hFile=0x340) returned 0x1
	[0155.741] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0155.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0155.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0155.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0155.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0155.742] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0155.742] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.747] CloseHandle (hObject=0x34c) returned 1
	[0155.747] CloseHandle (hObject=0x340) returned 1
	[0155.747] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0155.757] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0155.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1
	[0155.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0155.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0155.760] ReadFile (in: hFile=0x340, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f5d1c*=0x4f3, lpOverlapped=0x0) returned 1
	[0155.883] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0155.886] GetFileType (hFile=0x340) returned 0x1
	[0155.886] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.887] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x4f3, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d00*=0x4f3, lpOverlapped=0x124f5d0c) returned 1
	[0155.888] GetFileType (hFile=0x340) returned 0x1
	[0155.888] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x4f3, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0155.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0155.890] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0155.892] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0155.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0155.892] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0155.892] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.893] CloseHandle (hObject=0x2cc) returned 1
	[0155.895] CloseHandle (hObject=0x340) returned 1
	[0155.897] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.936] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0155.950] SetEvent (hEvent=0x2e4) returned 1
	[0155.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0155.951] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0155.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1
	[0155.952] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0155.952] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744388 | out: pbBuffer=0x12744388) returned 1
	[0155.952] ReadFile (in: hFile=0x2cc, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x12605d1c*=0x311, lpOverlapped=0x0) returned 1
	[0155.955] GetFileType (hFile=0x2cc) returned 0x1
	[0155.957] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.957] WriteFile (in: hFile=0x2cc, lpBuffer=0x127aa380*, nNumberOfBytesToWrite=0x311, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x127aa380*, lpNumberOfBytesWritten=0x12605d00*=0x311, lpOverlapped=0x12605d0c) returned 1
	[0155.957] GetFileType (hFile=0x2cc) returned 0x1
	[0155.957] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x311, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.957] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0155.958] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0155.958] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0155.958] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744500 | out: pbBuffer=0x12744500) returned 1
	[0155.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0155.958] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0155.958] WriteFile (in: hFile=0x340, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.958] CloseHandle (hObject=0x340) returned 1
	[0155.960] CloseHandle (hObject=0x2cc) returned 1
	[0155.960] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.019] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.020] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.022] SetEvent (hEvent=0x30c) returned 1
	[0156.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0156.023] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1
	[0156.023] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0156.023] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0156.023] ReadFile (in: hFile=0x2cc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x401, lpOverlapped=0x0) returned 1
	[0156.026] GetFileType (hFile=0x2cc) returned 0x1
	[0156.026] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.027] WriteFile (in: hFile=0x2cc, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x401, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x1242bd00*=0x401, lpOverlapped=0x1242bd0c) returned 1
	[0156.027] GetFileType (hFile=0x2cc) returned 0x1
	[0156.027] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x401, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.027] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0156.027] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0156.027] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434501 | out: pbBuffer=0x12434501) returned 1
	[0156.027] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0156.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.028] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.028] WriteFile (in: hFile=0x340, lpBuffer=0x1263c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.028] CloseHandle (hObject=0x340) returned 1
	[0156.030] CloseHandle (hObject=0x2cc) returned 1
	[0156.031] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.076] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.105] SetEvent (hEvent=0x30c) returned 1
	[0156.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.106] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1
	[0156.106] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c7a0 | out: pbBuffer=0x1244c7a0) returned 1
	[0156.106] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127883a8 | out: pbBuffer=0x127883a8) returned 1
	[0156.106] ReadFile (in: hFile=0x340, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f3d1c*=0x437, lpOverlapped=0x0) returned 1
	[0156.126] GetFileType (hFile=0x340) returned 0x1
	[0156.126] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.126] WriteFile (in: hFile=0x340, lpBuffer=0x12779200*, nNumberOfBytesToWrite=0x437, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12779200*, lpNumberOfBytesWritten=0x124f3d00*=0x437, lpOverlapped=0x124f3d0c) returned 1
	[0156.126] GetFileType (hFile=0x340) returned 0x1
	[0156.126] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x437, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435001 | out: pbBuffer=0x12435001) returned 1
	[0156.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435101 | out: pbBuffer=0x12435101) returned 1
	[0156.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435201 | out: pbBuffer=0x12435201) returned 1
	[0156.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788460 | out: pbBuffer=0x12788460) returned 1
	[0156.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.127] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.127] WriteFile (in: hFile=0x344, lpBuffer=0x1263cf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263cf00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.127] CloseHandle (hObject=0x344) returned 1
	[0156.160] CloseHandle (hObject=0x340) returned 1
	[0156.208] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.212] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.214] SetEvent (hEvent=0x2f4) returned 1
	[0156.214] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.215] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.219] SetEvent (hEvent=0x2f4) returned 1
	[0156.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0156.220] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1
	[0156.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c9c0 | out: pbBuffer=0x1244c9c0) returned 1
	[0156.220] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788478 | out: pbBuffer=0x12788478) returned 1
	[0156.220] ReadFile (in: hFile=0x2cc, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f3d1c*=0x504, lpOverlapped=0x0) returned 1
	[0156.230] GetFileType (hFile=0x2cc) returned 0x1
	[0156.230] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.230] WriteFile (in: hFile=0x2cc, lpBuffer=0x12614000*, nNumberOfBytesToWrite=0x504, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12614000*, lpNumberOfBytesWritten=0x124f3d00*=0x504, lpOverlapped=0x124f3d0c) returned 1
	[0156.230] GetFileType (hFile=0x2cc) returned 0x1
	[0156.230] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x504, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435401 | out: pbBuffer=0x12435401) returned 1
	[0156.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435501 | out: pbBuffer=0x12435501) returned 1
	[0156.230] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435601 | out: pbBuffer=0x12435601) returned 1
	[0156.231] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788530 | out: pbBuffer=0x12788530) returned 1
	[0156.231] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.231] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.231] WriteFile (in: hFile=0x344, lpBuffer=0x1263d400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263d400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.231] CloseHandle (hObject=0x344) returned 1
	[0156.232] CloseHandle (hObject=0x2cc) returned 1
	[0156.234] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.274] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.285] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.313] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.327] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.351] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.384] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.479] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0156.499] SetEvent (hEvent=0x30c) returned 1
	[0156.499] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0161.204] SetEvent (hEvent=0x320) returned 1
	[0161.204] SetEvent (hEvent=0x80) returned 1
	[0161.204] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.145] SetEvent (hEvent=0x320) returned 1
	[0163.145] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.147] SetEvent (hEvent=0x320) returned 1
	[0163.147] SetEvent (hEvent=0x30c) returned 1
	[0163.147] SwitchToThread () returned 1
	[0163.148] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.152] SetEvent (hEvent=0x30c) returned 1
	[0163.152] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3130b1871a126520a8c47861efe3ed4d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.153] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3130b1871a126520a8c47861efe3ed4d"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209)) returned 1
	[0163.153] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0163.153] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0163.153] ReadFile (in: hFile=0x350, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f3d1c*=0x209, lpOverlapped=0x0) returned 1
	[0163.155] GetFileType (hFile=0x350) returned 0x1
	[0163.155] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.155] WriteFile (in: hFile=0x350, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0x209, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x124f3d00*=0x209, lpOverlapped=0x124f3d0c) returned 1
	[0163.155] GetFileType (hFile=0x350) returned 0x1
	[0163.155] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x209, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.155] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0163.155] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0163.155] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0163.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0163.156] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3130b1871a126520a8c47861efe3ed4d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.156] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.156] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.156] CloseHandle (hObject=0x2cc) returned 1
	[0163.157] CloseHandle (hObject=0x350) returned 1
	[0163.158] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3130b1871a126520a8c47861efe3ed4d"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\3130b1871a126520a8c47861efe3ed4d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.198] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.204] SetEvent (hEvent=0x80) returned 1
	[0163.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.206] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0163.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0163.207] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0163.207] ReadFile (in: hFile=0x350, lpBuffer=0x12924000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12924000*, lpNumberOfBytesRead=0x1245dd1c*=0x1d7, lpOverlapped=0x0) returned 1
	[0163.209] GetFileType (hFile=0x350) returned 0x1
	[0163.209] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.209] WriteFile (in: hFile=0x350, lpBuffer=0x12740000*, nNumberOfBytesToWrite=0x1d7, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12740000*, lpNumberOfBytesWritten=0x1245dd00*=0x1d7, lpOverlapped=0x1245dd0c) returned 1
	[0163.210] GetFileType (hFile=0x350) returned 0x1
	[0163.210] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1d7, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.210] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0163.210] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0163.210] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0163.210] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0163.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.211] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.211] WriteFile (in: hFile=0x34c, lpBuffer=0x1253e000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1253e000*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.211] CloseHandle (hObject=0x34c) returned 1
	[0163.215] CloseHandle (hObject=0x350) returned 1
	[0163.216] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.243] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.246] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7)) returned 1
	[0163.246] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0163.246] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0163.246] ReadFile (in: hFile=0x350, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1245dd1c*=0x2d7, lpOverlapped=0x0) returned 1
	[0163.250] GetFileType (hFile=0x350) returned 0x1
	[0163.250] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.250] WriteFile (in: hFile=0x350, lpBuffer=0x124b4000*, nNumberOfBytesToWrite=0x2d7, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x124b4000*, lpNumberOfBytesWritten=0x1245dd00*=0x2d7, lpOverlapped=0x1245dd0c) returned 1
	[0163.250] GetFileType (hFile=0x350) returned 0x1
	[0163.250] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x2d7, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0163.251] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0163.251] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0163.251] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0163.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.251] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.251] WriteFile (in: hFile=0x2cc, lpBuffer=0x1253e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1253e500*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.252] CloseHandle (hObject=0x2cc) returned 1
	[0163.253] CloseHandle (hObject=0x350) returned 1
	[0163.254] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.291] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.297] SetEvent (hEvent=0x30c) returned 1
	[0163.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\696f3de637e6de85b458996d49d759ad"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.299] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\696f3de637e6de85b458996d49d759ad"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d)) returned 1
	[0163.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0163.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744100 | out: pbBuffer=0x12744100) returned 1
	[0163.300] ReadFile (in: hFile=0x350, lpBuffer=0x12562000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12562000*, lpNumberOfBytesRead=0x124f5d1c*=0x32d, lpOverlapped=0x0) returned 1
	[0163.314] GetFileType (hFile=0x350) returned 0x1
	[0163.314] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.314] WriteFile (in: hFile=0x350, lpBuffer=0x124b2380*, nNumberOfBytesToWrite=0x32d, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124b2380*, lpNumberOfBytesWritten=0x124f5d00*=0x32d, lpOverlapped=0x124f5d0c) returned 1
	[0163.314] GetFileType (hFile=0x350) returned 0x1
	[0163.314] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x32d, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca901 | out: pbBuffer=0x127ca901) returned 1
	[0163.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127caa01 | out: pbBuffer=0x127caa01) returned 1
	[0163.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cab01 | out: pbBuffer=0x127cab01) returned 1
	[0163.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744468 | out: pbBuffer=0x12744468) returned 1
	[0163.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\696f3de637e6de85b458996d49d759ad"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.316] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.316] WriteFile (in: hFile=0x34c, lpBuffer=0x124b0500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b0500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.316] CloseHandle (hObject=0x34c) returned 1
	[0163.316] CloseHandle (hObject=0x350) returned 1
	[0163.316] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\696f3de637e6de85b458996d49d759ad"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\696f3de637e6de85b458996d49d759ad.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.345] SetEvent (hEvent=0x2e4) returned 1
	[0163.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.346] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0163.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0163.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e010 | out: pbBuffer=0x1251e010) returned 1
	[0163.346] ReadFile (in: hFile=0x350, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x1d7, lpOverlapped=0x0) returned 1
	[0163.348] GetFileType (hFile=0x350) returned 0x1
	[0163.348] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.348] WriteFile (in: hFile=0x350, lpBuffer=0x12534000*, nNumberOfBytesToWrite=0x1d7, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12534000*, lpNumberOfBytesWritten=0x124f5d00*=0x1d7, lpOverlapped=0x124f5d0c) returned 1
	[0163.348] GetFileType (hFile=0x350) returned 0x1
	[0163.349] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1d7, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca001 | out: pbBuffer=0x127ca001) returned 1
	[0163.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca101 | out: pbBuffer=0x127ca101) returned 1
	[0163.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca201 | out: pbBuffer=0x127ca201) returned 1
	[0163.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e8 | out: pbBuffer=0x1251e0e8) returned 1
	[0163.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.350] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.350] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.351] CloseHandle (hObject=0x2cc) returned 1
	[0163.352] CloseHandle (hObject=0x350) returned 1
	[0163.353] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.374] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c)) returned 1
	[0163.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324a0 | out: pbBuffer=0x127324a0) returned 1
	[0163.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f0 | out: pbBuffer=0x1251e5f0) returned 1
	[0163.374] ReadFile (in: hFile=0x350, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f3d1c*=0x67c, lpOverlapped=0x0) returned 1
	[0163.388] GetFileType (hFile=0x350) returned 0x1
	[0163.388] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.388] WriteFile (in: hFile=0x350, lpBuffer=0x12518700*, nNumberOfBytesToWrite=0x67c, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12518700*, lpNumberOfBytesWritten=0x124f3d00*=0x67c, lpOverlapped=0x124f3d0c) returned 1
	[0163.388] GetFileType (hFile=0x350) returned 0x1
	[0163.388] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x67c, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca881 | out: pbBuffer=0x127ca881) returned 1
	[0163.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca981 | out: pbBuffer=0x127ca981) returned 1
	[0163.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127caa81 | out: pbBuffer=0x127caa81) returned 1
	[0163.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e738 | out: pbBuffer=0x1251e738) returned 1
	[0163.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.389] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.389] WriteFile (in: hFile=0x344, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.389] CloseHandle (hObject=0x344) returned 1
	[0163.392] CloseHandle (hObject=0x350) returned 1
	[0163.393] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.413] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.414] SetEvent (hEvent=0x2f4) returned 1
	[0163.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.415] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.415] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127328e0 | out: pbBuffer=0x127328e0) returned 1
	[0163.415] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e880 | out: pbBuffer=0x1251e880) returned 1
	[0163.415] ReadFile (in: hFile=0x350, lpBuffer=0x12944000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12944000*, lpNumberOfBytesRead=0x124f3d1c*=0x1cf, lpOverlapped=0x0) returned 1
	[0163.417] GetFileType (hFile=0x350) returned 0x1
	[0163.417] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.417] WriteFile (in: hFile=0x350, lpBuffer=0x12534960*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12534960*, lpNumberOfBytesWritten=0x124f3d00*=0x1cf, lpOverlapped=0x124f3d0c) returned 1
	[0163.417] GetFileType (hFile=0x350) returned 0x1
	[0163.417] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1cf, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cae81 | out: pbBuffer=0x127cae81) returned 1
	[0163.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127caf81 | out: pbBuffer=0x127caf81) returned 1
	[0163.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cb081 | out: pbBuffer=0x127cb081) returned 1
	[0163.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e988 | out: pbBuffer=0x1251e988) returned 1
	[0163.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.418] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.418] WriteFile (in: hFile=0x2cc, lpBuffer=0x125ce500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ce500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.418] CloseHandle (hObject=0x2cc) returned 1
	[0163.421] CloseHandle (hObject=0x350) returned 1
	[0163.422] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.443] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.448] SetEvent (hEvent=0x2f4) returned 1
	[0163.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.449] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732d20 | out: pbBuffer=0x12732d20) returned 1
	[0163.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251eb00 | out: pbBuffer=0x1251eb00) returned 1
	[0163.450] ReadFile (in: hFile=0x344, lpBuffer=0x12582000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12582000*, lpNumberOfBytesRead=0x124f3d1c*=0x1cf, lpOverlapped=0x0) returned 1
	[0163.452] GetFileType (hFile=0x344) returned 0x1
	[0163.452] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.452] WriteFile (in: hFile=0x344, lpBuffer=0x12534d20*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12534d20*, lpNumberOfBytesWritten=0x124f3d00*=0x1cf, lpOverlapped=0x124f3d0c) returned 1
	[0163.452] GetFileType (hFile=0x344) returned 0x1
	[0163.452] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1cf, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.452] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cb481 | out: pbBuffer=0x127cb481) returned 1
	[0163.452] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cb581 | out: pbBuffer=0x127cb581) returned 1
	[0163.453] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cb681 | out: pbBuffer=0x127cb681) returned 1
	[0163.453] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ebb8 | out: pbBuffer=0x1251ebb8) returned 1
	[0163.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.453] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.453] WriteFile (in: hFile=0x2cc, lpBuffer=0x125cef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125cef00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.453] CloseHandle (hObject=0x2cc) returned 1
	[0163.455] CloseHandle (hObject=0x344) returned 1
	[0163.456] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.474] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.475] SetEvent (hEvent=0x2f4) returned 1
	[0163.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.476] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.476] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12733160 | out: pbBuffer=0x12733160) returned 1
	[0163.476] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ecb0 | out: pbBuffer=0x1251ecb0) returned 1
	[0163.476] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0163.478] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.478] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0163.478] SetEvent (hEvent=0xa0) returned 1
	[0163.478] SetEvent (hEvent=0x2f4) returned 1
	[0163.478] ReadFile (in: hFile=0x344, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x124f5d1c*=0x1cf, lpOverlapped=0x0) returned 1
	[0163.480] GetFileType (hFile=0x344) returned 0x1
	[0163.480] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.480] WriteFile (in: hFile=0x344, lpBuffer=0x125350e0*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125350e0*, lpNumberOfBytesWritten=0x124f5d00*=0x1cf, lpOverlapped=0x124f5d0c) returned 1
	[0163.480] GetFileType (hFile=0x344) returned 0x1
	[0163.480] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1cf, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.481] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cba81 | out: pbBuffer=0x127cba81) returned 1
	[0163.481] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cbb81 | out: pbBuffer=0x127cbb81) returned 1
	[0163.481] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cbc81 | out: pbBuffer=0x127cbc81) returned 1
	[0163.481] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251eda8 | out: pbBuffer=0x1251eda8) returned 1
	[0163.481] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.481] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.481] WriteFile (in: hFile=0x34c, lpBuffer=0x125cf900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125cf900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.482] CloseHandle (hObject=0x34c) returned 1
	[0163.483] CloseHandle (hObject=0x344) returned 1
	[0163.485] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.535] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.541] SetEvent (hEvent=0x320) returned 1
	[0163.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.541] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c280 | out: pbBuffer=0x1244c280) returned 1
	[0163.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788118 | out: pbBuffer=0x12788118) returned 1
	[0163.542] ReadFile (in: hFile=0x34c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f5d1c*=0x1cf, lpOverlapped=0x0) returned 1
	[0163.543] GetFileType (hFile=0x34c) returned 0x1
	[0163.543] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.543] WriteFile (in: hFile=0x34c, lpBuffer=0x125341e0*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125341e0*, lpNumberOfBytesWritten=0x124f5d00*=0x1cf, lpOverlapped=0x124f5d0c) returned 1
	[0163.543] GetFileType (hFile=0x34c) returned 0x1
	[0163.544] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1cf, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca301 | out: pbBuffer=0x127ca301) returned 1
	[0163.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca401 | out: pbBuffer=0x127ca401) returned 1
	[0163.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca501 | out: pbBuffer=0x127ca501) returned 1
	[0163.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881d0 | out: pbBuffer=0x127881d0) returned 1
	[0163.544] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.544] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.544] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.544] CloseHandle (hObject=0x2cc) returned 1
	[0163.546] CloseHandle (hObject=0x34c) returned 1
	[0163.547] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.569] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0163.572] SetEvent (hEvent=0x320) returned 1
	[0163.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.573] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e)) returned 1
	[0163.573] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c780 | out: pbBuffer=0x1244c780) returned 1
	[0163.573] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882b8 | out: pbBuffer=0x127882b8) returned 1
	[0163.573] ReadFile (in: hFile=0x34c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f5d1c*=0x56e, lpOverlapped=0x0) returned 1
	[0163.580] GetFileType (hFile=0x34c) returned 0x1
	[0163.580] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.580] WriteFile (in: hFile=0x34c, lpBuffer=0x12740000*, nNumberOfBytesToWrite=0x56e, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12740000*, lpNumberOfBytesWritten=0x124f5d00*=0x56e, lpOverlapped=0x124f5d0c) returned 1
	[0163.580] GetFileType (hFile=0x34c) returned 0x1
	[0163.580] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x56e, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0163.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0163.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0163.581] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e720 | out: pbBuffer=0x1251e720) returned 1
	[0163.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.581] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.581] WriteFile (in: hFile=0x344, lpBuffer=0x125cea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125cea00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.581] CloseHandle (hObject=0x344) returned 1
	[0163.581] CloseHandle (hObject=0x34c) returned 1
	[0163.587] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.604] SetEvent (hEvent=0x2e4) returned 1
	[0163.604] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.605] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0163.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d)) returned 1
	[0163.605] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732880 | out: pbBuffer=0x12732880) returned 1
	[0163.605] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e868 | out: pbBuffer=0x1251e868) returned 1
	[0163.605] ReadFile (in: hFile=0x350, lpBuffer=0x1288a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1288a000*, lpNumberOfBytesRead=0x124f5d1c*=0x59d, lpOverlapped=0x0) returned 1
	[0164.020] SetEvent (hEvent=0xa0) returned 1
	[0164.020] GetFileType (hFile=0x350) returned 0x1
	[0164.020] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.020] WriteFile (in: hFile=0x350, lpBuffer=0x124fc000*, nNumberOfBytesToWrite=0x59d, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124fc000*, lpNumberOfBytesWritten=0x124f5d00*=0x59d, lpOverlapped=0x124f5d0c) returned 1
	[0164.020] GetFileType (hFile=0x350) returned 0x1
	[0164.020] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x59d, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.020] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0164.021] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0164.021] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0164.021] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104e0 | out: pbBuffer=0x124104e0) returned 1
	[0164.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0164.021] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0164.021] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0164.022] CloseHandle (hObject=0x2cc) returned 1
	[0164.022] CloseHandle (hObject=0x350) returned 1
	[0164.023] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8e4e510f44a56b8c8ecfec352907c373_411140098d71f028134e9b8a21255c61.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0164.025] SetEvent (hEvent=0x320) returned 1
	[0164.025] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0164.026] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0164.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1
	[0164.026] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0164.026] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104f8 | out: pbBuffer=0x124104f8) returned 1
	[0164.026] ReadFile (in: hFile=0x350, lpBuffer=0x128ca000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128ca000*, lpNumberOfBytesRead=0x124f5d1c*=0x652, lpOverlapped=0x0) returned 1
	[0164.031] GetFileType (hFile=0x350) returned 0x1
	[0164.031] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.031] WriteFile (in: hFile=0x350, lpBuffer=0x12518700*, nNumberOfBytesToWrite=0x652, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12518700*, lpNumberOfBytesWritten=0x124f5d00*=0x652, lpOverlapped=0x124f5d0c) returned 1
	[0164.031] GetFileType (hFile=0x350) returned 0x1
	[0164.031] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x652, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.031] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0164.032] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0164.032] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0164.032] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0164.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0164.032] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0164.032] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0164.032] CloseHandle (hObject=0x2cc) returned 1
	[0164.033] CloseHandle (hObject=0x350) returned 1
	[0164.033] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0164.038] SetEvent (hEvent=0x320) returned 1
	[0164.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0164.040] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0164.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0164.040] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f120 | out: pbBuffer=0x1240f120) returned 1
	[0164.040] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0164.040] ReadFile (in: hFile=0x350, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x1d7, lpOverlapped=0x0) returned 1
	[0164.042] GetFileType (hFile=0x350) returned 0x1
	[0164.042] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.042] WriteFile (in: hFile=0x350, lpBuffer=0x124c81e0*, nNumberOfBytesToWrite=0x1d7, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124c81e0*, lpNumberOfBytesWritten=0x124f5d00*=0x1d7, lpOverlapped=0x124f5d0c) returned 1
	[0164.042] GetFileType (hFile=0x350) returned 0x1
	[0164.042] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1d7, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.042] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0164.042] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0164.043] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0164.043] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106e0 | out: pbBuffer=0x124106e0) returned 1
	[0164.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0164.043] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0164.043] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0164.043] CloseHandle (hObject=0x2cc) returned 1
	[0164.044] CloseHandle (hObject=0x350) returned 1
	[0164.044] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0164.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee)) returned 1
	[0164.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1
	[0164.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0164.048] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0164.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee)) returned 1
	[0164.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4e0 | out: pbBuffer=0x1240f4e0) returned 1
	[0164.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106f8 | out: pbBuffer=0x124106f8) returned 1
	[0164.048] ReadFile (in: hFile=0x350, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f5d1c*=0x5ee, lpOverlapped=0x0) returned 1
	[0164.717] GetFileType (hFile=0x350) returned 0x1
	[0164.717] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.717] WriteFile (in: hFile=0x350, lpBuffer=0x124fcc00*, nNumberOfBytesToWrite=0x5ee, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124fcc00*, lpNumberOfBytesWritten=0x124f5d00*=0x5ee, lpOverlapped=0x124f5d0c) returned 1
	[0164.718] GetFileType (hFile=0x350) returned 0x1
	[0164.718] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x5ee, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401781 | out: pbBuffer=0x12401781) returned 1
	[0164.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401881 | out: pbBuffer=0x12401881) returned 1
	[0164.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401981 | out: pbBuffer=0x12401981) returned 1
	[0164.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410a50 | out: pbBuffer=0x12410a50) returned 1
	[0164.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0164.719] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0164.720] WriteFile (in: hFile=0x344, lpBuffer=0x1253aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1253aa00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0164.720] CloseHandle (hObject=0x344) returned 1
	[0164.720] CloseHandle (hObject=0x350) returned 1
	[0164.742] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0164.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0164.747] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0164.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed)) returned 1
	[0164.747] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240fb40 | out: pbBuffer=0x1240fb40) returned 1
	[0164.747] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410a68 | out: pbBuffer=0x12410a68) returned 1
	[0164.747] ReadFile (in: hFile=0x34c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f5d1c*=0x5ed, lpOverlapped=0x0) returned 1
	[0164.800] GetFileType (hFile=0x34c) returned 0x1
	[0164.800] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.801] WriteFile (in: hFile=0x34c, lpBuffer=0x124fd200*, nNumberOfBytesToWrite=0x5ed, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124fd200*, lpNumberOfBytesWritten=0x124f5d00*=0x5ed, lpOverlapped=0x124f5d0c) returned 1
	[0164.801] GetFileType (hFile=0x34c) returned 0x1
	[0164.801] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x5ed, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401a81 | out: pbBuffer=0x12401a81) returned 1
	[0164.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401b81 | out: pbBuffer=0x12401b81) returned 1
	[0164.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401c81 | out: pbBuffer=0x12401c81) returned 1
	[0164.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410b40 | out: pbBuffer=0x12410b40) returned 1
	[0164.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0164.802] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0164.803] WriteFile (in: hFile=0x344, lpBuffer=0x1253af00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1253af00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0164.803] CloseHandle (hObject=0x344) returned 1
	[0164.803] CloseHandle (hObject=0x34c) returned 1
	[0164.803] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0166.476] SetEvent (hEvent=0xa0) returned 1
	[0166.476] SetEvent (hEvent=0x70) returned 1
	[0166.476] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0166.477] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0166.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0166.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0166.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788108 | out: pbBuffer=0x12788108) returned 1
	[0166.478] ReadFile (in: hFile=0x34c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f5d1c*=0x6e3, lpOverlapped=0x0) returned 1
	[0166.532] GetFileType (hFile=0x34c) returned 0x1
	[0166.532] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.532] WriteFile (in: hFile=0x34c, lpBuffer=0x12518e00*, nNumberOfBytesToWrite=0x6e3, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12518e00*, lpNumberOfBytesWritten=0x124f5d00*=0x6e3, lpOverlapped=0x124f5d0c) returned 1
	[0166.533] GetFileType (hFile=0x34c) returned 0x1
	[0166.533] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x6e3, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.533] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0166.533] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0166.533] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0166.533] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0166.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0166.533] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0166.533] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0166.534] CloseHandle (hObject=0x2cc) returned 1
	[0166.601] CloseHandle (hObject=0x34c) returned 1
	[0166.818] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0166.889] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0166.897] SetEvent (hEvent=0x68) returned 1
	[0166.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0166.898] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0166.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1
	[0166.898] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732120 | out: pbBuffer=0x12732120) returned 1
	[0166.898] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e128 | out: pbBuffer=0x1251e128) returned 1
	[0166.899] ReadFile (in: hFile=0x344, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0x5ae, lpOverlapped=0x0) returned 1
	[0166.903] GetFileType (hFile=0x344) returned 0x1
	[0166.903] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.903] WriteFile (in: hFile=0x344, lpBuffer=0x12534600*, nNumberOfBytesToWrite=0x5ae, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12534600*, lpNumberOfBytesWritten=0x1242bd00*=0x5ae, lpOverlapped=0x1242bd0c) returned 1
	[0166.904] GetFileType (hFile=0x344) returned 0x1
	[0166.904] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x5ae, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0166.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0166.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0166.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5f0 | out: pbBuffer=0x1251e5f0) returned 1
	[0166.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0166.905] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0166.905] WriteFile (in: hFile=0x350, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0166.905] CloseHandle (hObject=0x350) returned 1
	[0166.906] CloseHandle (hObject=0x344) returned 1
	[0166.907] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0166.958] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0166.961] SetEvent (hEvent=0x68) returned 1
	[0166.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0166.962] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0166.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c)) returned 1
	[0166.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732340 | out: pbBuffer=0x12732340) returned 1
	[0166.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e698 | out: pbBuffer=0x1251e698) returned 1
	[0166.963] ReadFile (in: hFile=0x344, lpBuffer=0x1290a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1290a000*, lpNumberOfBytesRead=0x1245bd1c*=0x64c, lpOverlapped=0x0) returned 1
	[0166.966] GetFileType (hFile=0x344) returned 0x1
	[0166.966] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.966] WriteFile (in: hFile=0x344, lpBuffer=0x127d2000*, nNumberOfBytesToWrite=0x64c, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x127d2000*, lpNumberOfBytesWritten=0x1245bd00*=0x64c, lpOverlapped=0x1245bd0c) returned 1
	[0166.966] GetFileType (hFile=0x344) returned 0x1
	[0166.967] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x64c, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.967] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0166.967] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0166.967] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0166.967] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e770 | out: pbBuffer=0x1251e770) returned 1
	[0166.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0166.967] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0166.967] WriteFile (in: hFile=0x350, lpBuffer=0x12628500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12628500*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0166.967] CloseHandle (hObject=0x350) returned 1
	[0166.968] CloseHandle (hObject=0x344) returned 1
	[0166.969] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.028] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0167.100] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0167.119] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0167.146] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0167.292] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0167.351] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0167.547] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0167.563] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0167.594] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0167.609] SetEvent (hEvent=0x30c) returned 1
	[0167.609] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0167.614] SetEvent (hEvent=0x68) returned 1
	[0167.614] SetEvent (hEvent=0x80) returned 1
	[0167.614] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0167.616] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0167.617] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0167.617] SetEvent (hEvent=0x68) returned 1
	[0167.617] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0167.618] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0167.841] SetEvent (hEvent=0x68) returned 1
	[0167.841] SetEvent (hEvent=0x80) returned 1
	[0167.841] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.051] SetEvent (hEvent=0x80) returned 1
	[0168.051] SetEvent (hEvent=0x68) returned 1
	[0168.051] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.072] SwitchToThread () returned 1
	[0168.073] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.082] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.093] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.109] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.129] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.145] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.164] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.197] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.238] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.256] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.272] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.282] SetEvent (hEvent=0x30c) returned 1
	[0168.282] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.286] SetEvent (hEvent=0x80) returned 1
	[0168.287] SetEvent (hEvent=0x2f4) returned 1
	[0168.287] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0168.293] SetEvent (hEvent=0x318) returned 1
	[0168.293] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0168.294] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.294] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0168.297] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0168.297] SetEvent (hEvent=0x80) returned 1
	[0168.297] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0168.299] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.299] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0168.491] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0169.127] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0169.137] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0169.171] SetEvent (hEvent=0x68) returned 1
	[0169.171] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0169.175] SetEvent (hEvent=0x318) returned 1
	[0169.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517)) returned 1
	[0169.176] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0169.191] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0169.191] SetEvent (hEvent=0x318) returned 1
	[0169.191] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0169.226] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0169.226] GetFileType (hFile=0x2dc) returned 0x1
	[0169.227] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.227] WriteFile (in: hFile=0x2dc, lpBuffer=0x124ee000*, nNumberOfBytesToWrite=0x9347, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x124ee000*, lpNumberOfBytesWritten=0x1276dd00*=0x9347, lpOverlapped=0x1276dd0c) returned 1
	[0169.228] GetFileType (hFile=0x2dc) returned 0x1
	[0169.228] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x9347, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0169.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0169.228] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0169.229] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0169.229] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0169.229] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.229] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.229] CloseHandle (hObject=0x1e4) returned 1
	[0169.229] CloseHandle (hObject=0x2dc) returned 1
	[0169.230] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\A9B8213768ADC68AF64FCC6409E8BE414726687F.crl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\crlcache\\a9b8213768adc68af64fcc6409e8be414726687f.crl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.238] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.014] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.068] SetEvent (hEvent=0x70) returned 1
	[0170.068] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0170.082] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0170.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd)) returned 1
	[0170.083] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e820 | out: pbBuffer=0x1252e820) returned 1
	[0170.083] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744580 | out: pbBuffer=0x12744580) returned 1
	[0170.083] ReadFile (in: hFile=0x33c, lpBuffer=0x1281a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x1281a000*, lpNumberOfBytesRead=0x12611d1c*=0x8dd, lpOverlapped=0x0) returned 1
	[0170.102] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.123] GetFileType (hFile=0x33c) returned 0x1
	[0170.123] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.123] WriteFile (in: hFile=0x33c, lpBuffer=0x12494900*, nNumberOfBytesToWrite=0x8dd, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x12494900*, lpNumberOfBytesWritten=0x12611d00*=0x8dd, lpOverlapped=0x12611d0c) returned 1
	[0170.123] GetFileType (hFile=0x33c) returned 0x1
	[0170.123] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x8dd, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0170.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0170.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0170.124] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0170.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.125] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0170.125] WriteFile (in: hFile=0x34c, lpBuffer=0x1265a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x1265a000*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.125] CloseHandle (hObject=0x34c) returned 1
	[0170.133] CloseHandle (hObject=0x33c) returned 1
	[0170.138] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.186] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.213] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.385] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.401] SetEvent (hEvent=0x68) returned 1
	[0170.401] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.411] SetEvent (hEvent=0x68) returned 1
	[0170.411] SwitchToThread () returned 1
	[0170.426] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.449] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0170.628] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0171.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.141] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0171.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472)) returned 1
	[0171.141] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4c0 | out: pbBuffer=0x1252e4c0) returned 1
	[0171.141] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744358 | out: pbBuffer=0x12744358) returned 1
	[0171.141] ReadFile (in: hFile=0x344, lpBuffer=0x126a8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x126a8000*, lpNumberOfBytesRead=0x12611d1c*=0x472, lpOverlapped=0x0) returned 1
	[0171.333] GetFileType (hFile=0x344) returned 0x1
	[0171.334] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.334] WriteFile (in: hFile=0x344, lpBuffer=0x12462900*, nNumberOfBytesToWrite=0x472, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x12462900*, lpNumberOfBytesWritten=0x12611d00*=0x472, lpOverlapped=0x12611d0c) returned 1
	[0171.334] GetFileType (hFile=0x344) returned 0x1
	[0171.334] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x472, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec401 | out: pbBuffer=0x124ec401) returned 1
	[0171.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec501 | out: pbBuffer=0x124ec501) returned 1
	[0171.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec601 | out: pbBuffer=0x124ec601) returned 1
	[0171.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e680 | out: pbBuffer=0x1251e680) returned 1
	[0171.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0171.335] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0171.335] WriteFile (in: hFile=0x34c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.335] CloseHandle (hObject=0x34c) returned 1
	[0171.340] CloseHandle (hObject=0x344) returned 1
	[0171.341] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.349] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0171.539] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0171.590] SetEvent (hEvent=0x30c) returned 1
	[0171.591] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.591] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0171.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28de3e80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0171.592] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0171.592] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0171.592] ReadFile (in: hFile=0x344, lpBuffer=0x126e8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x126e8000*, lpNumberOfBytesRead=0x12769d1c*=0x18, lpOverlapped=0x0) returned 1
	[0171.593] GetFileType (hFile=0x344) returned 0x1
	[0171.593] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.593] WriteFile (in: hFile=0x344, lpBuffer=0x1252e1c0*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1252e1c0*, lpNumberOfBytesWritten=0x12769d00*=0x18, lpOverlapped=0x12769d0c) returned 1
	[0171.594] GetFileType (hFile=0x344) returned 0x1
	[0171.594] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0171.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0171.595] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0171.595] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744340 | out: pbBuffer=0x12744340) returned 1
	[0171.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.595] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0171.595] WriteFile (in: hFile=0x2dc, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.596] CloseHandle (hObject=0x2dc) returned 1
	[0171.596] CloseHandle (hObject=0x344) returned 1
	[0171.596] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.599] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0171.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.600] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4e0 | out: pbBuffer=0x1252e4e0) returned 1
	[0171.600] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443b8 | out: pbBuffer=0x127443b8) returned 1
	[0171.600] ReadFile (in: hFile=0x344, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12611d1c*=0x1d4, lpOverlapped=0x0) returned 1
	[0171.602] GetFileType (hFile=0x344) returned 0x1
	[0171.602] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.602] WriteFile (in: hFile=0x344, lpBuffer=0x12742780*, nNumberOfBytesToWrite=0x1d4, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x12742780*, lpNumberOfBytesWritten=0x12611d00*=0x1d4, lpOverlapped=0x12611d0c) returned 1
	[0171.602] GetFileType (hFile=0x344) returned 0x1
	[0171.602] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1d4, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.602] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0171.602] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0171.602] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0171.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444a0 | out: pbBuffer=0x127444a0) returned 1
	[0171.603] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.603] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0171.603] WriteFile (in: hFile=0x2dc, lpBuffer=0x124b0500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b0500*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.603] CloseHandle (hObject=0x2dc) returned 1
	[0171.603] CloseHandle (hObject=0x344) returned 1
	[0171.603] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.606] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0171.646] SetEvent (hEvent=0x30c) returned 1
	[0171.646] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0171.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x89f54240, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0171.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\synchist"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2b1e4b40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2b1e4b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x36031920, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4c)) returned 1
	[0171.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.675] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0171.680] SetEvent (hEvent=0xa0) returned 1
	[0171.680] SetEvent (hEvent=0x30c) returned 1
	[0171.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.680] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0171.700] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43bcc750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x43bcc750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x43bcc750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.700] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.702] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.702] WriteFile (in: hFile=0x2dc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.703] CloseHandle (hObject=0x2dc) returned 1
	[0171.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.825] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.826] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbec39d0, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.826] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1
	[0171.826] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.826] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.827] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.828] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.828] WriteFile (in: hFile=0x2dc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.830] CloseHandle (hObject=0x2dc) returned 1
	[0171.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1
	[0171.848] SetEvent (hEvent=0x318) returned 1
	[0171.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.851] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Speech\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\speech\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.861] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.861] WriteFile (in: hFile=0x344, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.864] CloseHandle (hObject=0x344) returned 1
	[0171.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.867] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.867] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.867] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1
	[0171.867] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.867] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.869] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.869] WriteFile (in: hFile=0x344, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.871] CloseHandle (hObject=0x344) returned 1
	[0171.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.871] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
	[0171.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1
	[0171.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1
	[0171.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.872] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.873] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0171.873] WriteFile (in: hFile=0x344, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0171.875] CloseHandle (hObject=0x344) returned 1
	[0171.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.876] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.876] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.876] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.877] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0171.877] WriteFile (in: hFile=0x344, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0171.879] CloseHandle (hObject=0x344) returned 1
	[0171.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.879] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.880] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.882] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0171.882] WriteFile (in: hFile=0x344, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0171.883] CloseHandle (hObject=0x344) returned 1
	[0171.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.884] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.884] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.884] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.884] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.886] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0171.886] WriteFile (in: hFile=0x344, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0171.887] CloseHandle (hObject=0x344) returned 1
	[0171.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.896] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.896] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31d42f10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x2795d470, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x2795d470, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.896] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1
	[0171.896] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.896] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.896] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.905] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.905] WriteFile (in: hFile=0x344, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.906] CloseHandle (hObject=0x344) returned 1
	[0171.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b)) returned 1
	[0171.907] SetEvent (hEvent=0x318) returned 1
	[0171.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.920] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.920] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.920] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1
	[0171.920] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.920] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.923] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.923] WriteFile (in: hFile=0x2dc, lpBuffer=0x127eb300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x127eb300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.926] CloseHandle (hObject=0x2dc) returned 1
	[0171.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2)) returned 1
	[0171.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0171.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.928] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.928] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.928] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2c7870d0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2c7870d0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0171.928] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1
	[0171.928] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETldCache", cAlternateFileName="IETLDC~1")) returned 1
	[0171.928] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2d22d5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0171.928] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1
	[0171.928] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1
	[0171.928] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x94fde710, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x94fde710, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1
	[0171.929] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xe0bb0100, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xe0bb0100, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0171.929] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0171.929] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d97bc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0171.929] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0171.929] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0171.929] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.929] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.945] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.945] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4f71aa70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.945] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1
	[0171.945] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.945] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.946] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.946] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.947] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.947] WriteFile (in: hFile=0x33c, lpBuffer=0x127ec600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x127ec600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.948] CloseHandle (hObject=0x33c) returned 1
	[0171.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.949] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x27c7d150, ftCreationTime.dwHighDateTime=0x1d3aaba, ftLastAccessTime.dwLowDateTime=0x27c7d150, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x27c7d150, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.950] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.950] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.950] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\word\\startup\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.951] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0171.951] WriteFile (in: hFile=0x33c, lpBuffer=0x127ed900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x127ed900*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0171.959] CloseHandle (hObject=0x33c) returned 1
	[0171.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.963] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1
	[0171.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1
	[0171.963] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.963] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.964] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.966] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0171.966] WriteFile (in: hFile=0x33c, lpBuffer=0x127eec00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x127eec00*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0171.967] CloseHandle (hObject=0x33c) returned 1
	[0171.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.972] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.972] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb458e750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.972] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.972] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.972] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Extensions\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\extensions\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.974] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.974] WriteFile (in: hFile=0x33c, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.975] CloseHandle (hObject=0x33c) returned 1
	[0171.975] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.977] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.978] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.978] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crash Reports", cAlternateFileName="CRASHR~1")) returned 1
	[0171.978] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
	[0171.978] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 1
	[0171.978] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.978] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.978] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.980] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.980] WriteFile (in: hFile=0x33c, lpBuffer=0x1276f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1276f300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.981] CloseHandle (hObject=0x33c) returned 1
	[0171.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.983] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.983] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20131025151332", cAlternateFileName="INSTAL~1")) returned 1
	[0171.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.984] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.985] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0171.985] WriteFile (in: hFile=0x33c, lpBuffer=0x12770600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12770600*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0171.987] CloseHandle (hObject=0x33c) returned 1
	[0171.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20131025151332" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20131025151332"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa)) returned 1
	[0172.001] SetEvent (hEvent=0x318) returned 1
	[0172.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.011] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0172.011] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0172.011] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.012] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="silmbjec.default", cAlternateFileName="SILMBJ~1.DEF")) returned 1
	[0172.012] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0172.012] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0172.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0172.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0172.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.015] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0172.015] WriteFile (in: hFile=0x344, lpBuffer=0x12771900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12771900*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0172.022] CloseHandle (hObject=0x344) returned 1
	[0172.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0172.024] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0172.026] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.028] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb76a6d10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb76a6d10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb76a6d10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="addons.json", cAlternateFileName="ADDONS~1.JSO")) returned 1
	[0172.028] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarkbackups", cAlternateFileName="BOOKMA~1")) returned 1
	[0172.028] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb47c9bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb47c9bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1
	[0172.028] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1
	[0172.028] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1
	[0172.028] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1
	[0172.028] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads.sqlite", cAlternateFileName="DOWNLO~1.SQL")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.ini", cAlternateFileName="EXTENS~1.INI")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.sqlite", cAlternateFileName="EXTENS~1.SQL")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexedDB", cAlternateFileName="INDEXE~1")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501, dwReserved0=0x0, dwReserved1=0x0, cFileName="localstore.rdf", cAlternateFileName="LOCALS~1.RDF")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="marionette.log", cAlternateFileName="MARION~1.LOG")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb50b6e70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5175550, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb5175550, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mimeTypes.rdf", cAlternateFileName="MIMETY~1.RDF")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb43eb830, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb43eb830, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3b3f6e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6fa8c70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6fa8c70, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6fa8c70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4183, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json", cAlternateFileName="SEARCH~1.JSO")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb477d930, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb477d930, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb47c9bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.bak", cAlternateFileName="SESSIO~1.BAK")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000, dwReserved0=0x0, dwReserved1=0x0, cFileName="signons.sqlite", cAlternateFileName="SIGNON~1.SQL")) returned 1
	[0172.029] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1
	[0172.030] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps", cAlternateFileName="")) returned 1
	[0172.030] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1
	[0172.030] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0172.030] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0172.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0172.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0172.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.037] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0172.037] WriteFile (in: hFile=0x344, lpBuffer=0x12772c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12772c00*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0172.039] CloseHandle (hObject=0x344) returned 1
	[0172.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\addons.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\addons.json"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb76a6d10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb76a6d10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb76a6d10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0172.040] SetEvent (hEvent=0x318) returned 1
	[0172.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0172.052] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0172.058] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5233c30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x8503de70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8503de70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.058] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc37c9330, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc37c9330, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc37df2c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-05_5.json", cAlternateFileName="BOOKMA~1.JSO")) returned 1
	[0172.058] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-16_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 1
	[0172.058] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0172.058] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0172.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0172.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0172.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.062] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0172.062] WriteFile (in: hFile=0x33c, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0172.063] CloseHandle (hObject=0x33c) returned 1
	[0172.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc37c9330, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc37c9330, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc37df2c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xbdb)) returned 1
	[0172.066] SetEvent (hEvent=0x318) returned 1
	[0172.066] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb)) returned 1
	[0172.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb47c9bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb47c9bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0172.076] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.093] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.093] SetEvent (hEvent=0x30c) returned 1
	[0172.093] SetEvent (hEvent=0x68) returned 1
	[0172.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\compatibility.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\compatibility.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0172.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\content-prefs.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\content-prefs.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5e8ce50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5e8ce50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb639bd10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x38000)) returned 1
	[0172.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cookies.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cookies.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb5ad4bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5ad4bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x83256a10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0172.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1
	[0172.163] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.192] SetEvent (hEvent=0x2f4) returned 1
	[0172.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4b81e50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4b81e50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b81e50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x8d)) returned 1
	[0172.216] SetEvent (hEvent=0x80) returned 1
	[0172.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000)) returned 1
	[0172.225] SetEvent (hEvent=0x318) returned 1
	[0172.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.253] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0172.253] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0172.253] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb6ff4f30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.253] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 1
	[0172.253] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0172.253] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0172.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0172.253] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0172.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.257] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0172.257] WriteFile (in: hFile=0x1e4, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0172.258] CloseHandle (hObject=0x1e4) returned 1
	[0172.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.259] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0172.260] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x1276b7d8 | out: lpFindFileData=0x1276b7d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0172.260] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b81c | out: lpFindFileData=0x1276b81c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.260] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b81c | out: lpFindFileData=0x1276b81c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".metadata", cAlternateFileName="METADA~1")) returned 1
	[0172.260] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b81c | out: lpFindFileData=0x1276b81c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 1
	[0172.260] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b81c | out: lpFindFileData=0x1276b81c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0172.260] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0172.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b4a0 | out: lpFileInformation=0x1276b4a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0172.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0172.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.262] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276b6b0 | out: lpMode=0x1276b6b0) returned 0
	[0172.262] WriteFile (in: hFile=0x1e4, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b6b0, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b6b0*=0x1180, lpOverlapped=0x0) returned 1
	[0172.264] CloseHandle (hObject=0x1e4) returned 1
	[0172.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\.metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\.metadata"), fInfoLevelId=0x0, lpFileInformation=0x1276b89c | out: lpFileInformation=0x1276b89c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.267] SetEvent (hEvent=0x30c) returned 1
	[0172.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb"), fInfoLevelId=0x0, lpFileInformation=0x1276b89c | out: lpFileInformation=0x1276b89c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0172.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x1276b774 | out: lpFindFileData=0x1276b774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0172.277] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.282] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b7b8 | out: lpFindFileData=0x1276b7b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8110d50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8110d50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.282] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b7b8 | out: lpFindFileData=0x1276b7b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht", cAlternateFileName="818200~1")) returned 1
	[0172.282] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b7b8 | out: lpFindFileData=0x1276b7b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 1
	[0172.282] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b7b8 | out: lpFindFileData=0x1276b7b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0172.282] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0172.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b43c | out: lpFileInformation=0x1276b43c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0172.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0172.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.285] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276b64c | out: lpMode=0x1276b64c) returned 0
	[0172.286] WriteFile (in: hFile=0x1e4, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b64c, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b64c*=0x1180, lpOverlapped=0x0) returned 1
	[0172.287] CloseHandle (hObject=0x1e4) returned 1
	[0172.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht"), fInfoLevelId=0x0, lpFileInformation=0x1276b838 | out: lpFileInformation=0x1276b838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0172.289] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x1276b710 | out: lpFindFileData=0x1276b710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0172.290] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b754 | out: lpFindFileData=0x1276b754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb70ff8d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb70ff8d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb70ff8d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.290] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b754 | out: lpFindFileData=0x1276b754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0172.290] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0172.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b3d8 | out: lpFileInformation=0x1276b3d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0172.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0172.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.292] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276b5e8 | out: lpMode=0x1276b5e8) returned 0
	[0172.292] WriteFile (in: hFile=0x1e4, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b5e8, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b5e8*=0x1180, lpOverlapped=0x0) returned 1
	[0172.293] CloseHandle (hObject=0x1e4) returned 1
	[0172.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1276b838 | out: lpFileInformation=0x1276b838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1
	[0172.298] SetEvent (hEvent=0x318) returned 1
	[0172.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0172.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\localstore.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\localstore.rdf"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501)) returned 1
	[0172.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\marionette.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\marionette.log"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1
	[0172.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\mimeTypes.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\mimetypes.rdf"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb50b6e70, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb5175550, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb5175550, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xef3)) returned 1
	[0172.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0172.362] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0172.362] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.362] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0172.362] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0172.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0172.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0172.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\minidumps\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\minidumps\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.366] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0172.366] WriteFile (in: hFile=0x34c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0172.367] CloseHandle (hObject=0x34c) returned 1
	[0172.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\parent.lock" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\parent.lock"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.378] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.389] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.432] SetEvent (hEvent=0x70) returned 1
	[0172.432] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0172.443] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.443] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0172.445] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.445] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0172.445] SetEvent (hEvent=0x2f4) returned 1
	[0172.446] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0172.454] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.455] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84c85c10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x853f60d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x12069be0, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0xfde)) returned 1
	[0172.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e1c0 | out: pbBuffer=0x1252e1c0) returned 1
	[0172.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0172.455] ReadFile (in: hFile=0x34c, lpBuffer=0x128f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x128f8000*, lpNumberOfBytesRead=0x12767d1c*=0xfde, lpOverlapped=0x0) returned 1
	[0172.461] GetFileType (hFile=0x34c) returned 0x1
	[0172.461] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.461] WriteFile (in: hFile=0x34c, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0xfde, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x12767d00*=0xfde, lpOverlapped=0x12767d0c) returned 1
	[0172.461] GetFileType (hFile=0x34c) returned 0x1
	[0172.461] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xfde, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.461] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0172.461] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0172.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0172.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0172.462] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0172.462] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.462] WriteFile (in: hFile=0x350, lpBuffer=0x1263c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.462] CloseHandle (hObject=0x350) returned 1
	[0172.467] CloseHandle (hObject=0x34c) returned 1
	[0172.473] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\prefs.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\prefs.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.569] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.575] SetEvent (hEvent=0x68) returned 1
	[0172.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.576] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6)) returned 1
	[0172.576] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0172.576] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0172.576] ReadFile (in: hFile=0x34c, lpBuffer=0x12958000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12958000*, lpNumberOfBytesRead=0x12767d1c*=0x3d6, lpOverlapped=0x0) returned 1
	[0172.579] GetFileType (hFile=0x34c) returned 0x1
	[0172.579] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.579] WriteFile (in: hFile=0x34c, lpBuffer=0x12498400*, nNumberOfBytesToWrite=0x3d6, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12498400*, lpNumberOfBytesWritten=0x12767d00*=0x3d6, lpOverlapped=0x12767d0c) returned 1
	[0172.579] GetFileType (hFile=0x34c) returned 0x1
	[0172.579] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x3d6, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0172.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0172.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0172.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0172.580] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.580] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.580] WriteFile (in: hFile=0x2dc, lpBuffer=0x1263ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263ca00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.580] CloseHandle (hObject=0x2dc) returned 1
	[0172.581] CloseHandle (hObject=0x34c) returned 1
	[0172.582] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.621] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.625] SetEvent (hEvent=0x80) returned 1
	[0172.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\times.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\times.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.627] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\times.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\times.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d)) returned 1
	[0172.627] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0172.627] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744368 | out: pbBuffer=0x12744368) returned 1
	[0172.627] ReadFile (in: hFile=0x344, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x12429d1c*=0x1d, lpOverlapped=0x0) returned 1
	[0172.628] GetFileType (hFile=0x344) returned 0x1
	[0172.629] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.629] WriteFile (in: hFile=0x344, lpBuffer=0x1240e640*, nNumberOfBytesToWrite=0x1d, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1240e640*, lpNumberOfBytesWritten=0x12429d00*=0x1d, lpOverlapped=0x12429d0c) returned 1
	[0172.629] GetFileType (hFile=0x344) returned 0x1
	[0172.629] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1d, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.629] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0172.629] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0172.629] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0172.629] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444a0 | out: pbBuffer=0x127444a0) returned 1
	[0172.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\times.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\times.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.630] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.630] WriteFile (in: hFile=0x34c, lpBuffer=0x124f2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x124f2500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.630] CloseHandle (hObject=0x34c) returned 1
	[0172.631] CloseHandle (hObject=0x344) returned 1
	[0172.633] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\times.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\times.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\times.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\times.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.661] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.673] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0172.954] SetEvent (hEvent=0x70) returned 1
	[0172.954] SetEvent (hEvent=0x2f4) returned 1
	[0172.954] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0173.685] SetEvent (hEvent=0x80) returned 1
	[0173.686] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0173.690] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0173.722] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0173.745] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0173.782] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0173.839] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0173.850] SetEvent (hEvent=0x80) returned 1
	[0173.850] SetEvent (hEvent=0x68) returned 1
	[0173.850] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0173.852] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0173.852] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0173.852] SetEvent (hEvent=0x68) returned 1
	[0173.852] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0173.853] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0173.853] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0174.323] SetEvent (hEvent=0x2f4) returned 1
	[0174.323] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0174.324] SetEvent (hEvent=0x2f4) returned 1
	[0174.325] SwitchToThread () returned 1
	[0174.333] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0174.335] SetEvent (hEvent=0x2f4) returned 1
	[0174.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\gOredi507MvcX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\goredi507mvcx.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.337] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\gOredi507MvcX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\goredi507mvcx.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe75df30, ftCreationTime.dwHighDateTime=0x1d5d862, ftLastAccessTime.dwLowDateTime=0xec0d53a0, ftLastAccessTime.dwHighDateTime=0x1d5e3c0, ftLastWriteTime.dwLowDateTime=0xec0d53a0, ftLastWriteTime.dwHighDateTime=0x1d5e3c0, nFileSizeHigh=0x0, nFileSizeLow=0x18509)) returned 1
	[0174.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0174.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0174.337] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x18509, lpOverlapped=0x0) returned 1
	[0174.344] GetFileType (hFile=0x33c) returned 0x1
	[0174.344] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.344] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x18509, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1242bd00*=0x18509, lpOverlapped=0x1242bd0c) returned 1
	[0174.345] GetFileType (hFile=0x33c) returned 0x1
	[0174.345] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x18509, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.345] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0174.345] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0174.345] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0174.345] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410430 | out: pbBuffer=0x12410430) returned 1
	[0174.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\gOredi507MvcX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\goredi507mvcx.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.346] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.346] WriteFile (in: hFile=0x34c, lpBuffer=0x1263c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.346] CloseHandle (hObject=0x34c) returned 1
	[0174.347] CloseHandle (hObject=0x33c) returned 1
	[0174.348] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\gOredi507MvcX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\goredi507mvcx.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\gOredi507MvcX.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\goredi507mvcx.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.382] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0174.385] SetEvent (hEvent=0x2f4) returned 1
	[0174.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tPIzGgvgvVnR SD5f.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\tpizggvgvvnr sd5f.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.386] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tPIzGgvgvVnR SD5f.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\tpizggvgvvnr sd5f.ppt"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fcbf0, ftCreationTime.dwHighDateTime=0x1d5da33, ftLastAccessTime.dwLowDateTime=0x1b129490, ftLastAccessTime.dwHighDateTime=0x1d5dd12, ftLastWriteTime.dwLowDateTime=0x1b129490, ftLastWriteTime.dwHighDateTime=0x1d5dd12, nFileSizeHigh=0x0, nFileSizeLow=0x18a73)) returned 1
	[0174.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0174.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0174.387] ReadFile (in: hFile=0x344, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12767d1c*=0x18a73, lpOverlapped=0x0) returned 1
	[0174.391] GetFileType (hFile=0x344) returned 0x1
	[0174.391] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.391] WriteFile (in: hFile=0x344, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x18a73, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x12767d00*=0x18a73, lpOverlapped=0x12767d0c) returned 1
	[0174.392] GetFileType (hFile=0x344) returned 0x1
	[0174.392] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x18a73, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400401 | out: pbBuffer=0x12400401) returned 1
	[0174.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0174.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400601 | out: pbBuffer=0x12400601) returned 1
	[0174.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0174.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tPIzGgvgvVnR SD5f.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\tpizggvgvvnr sd5f.ppt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.392] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.392] WriteFile (in: hFile=0x34c, lpBuffer=0x12614000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12614000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.393] CloseHandle (hObject=0x34c) returned 1
	[0174.407] CloseHandle (hObject=0x344) returned 1
	[0174.409] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tPIzGgvgvVnR SD5f.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\tpizggvgvvnr sd5f.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tPIzGgvgvVnR SD5f.ppt.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\tpizggvgvvnr sd5f.ppt.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lpgKJypqLWtbDF.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lpgkjypqlwtbdf.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.576] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lpgKJypqLWtbDF.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lpgkjypqlwtbdf.ppt"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa52d740, ftCreationTime.dwHighDateTime=0x1d5dd22, ftLastAccessTime.dwLowDateTime=0x791f60e0, ftLastAccessTime.dwHighDateTime=0x1d5e6e0, ftLastWriteTime.dwLowDateTime=0x791f60e0, ftLastWriteTime.dwHighDateTime=0x1d5e6e0, nFileSizeHigh=0x0, nFileSizeLow=0x1088c)) returned 1
	[0174.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0174.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0174.577] ReadFile (in: hFile=0x34c, lpBuffer=0x126ee000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ee000*, lpNumberOfBytesRead=0x12767d1c*=0x1088c, lpOverlapped=0x0) returned 1
	[0174.607] GetFileType (hFile=0x34c) returned 0x1
	[0174.607] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.607] WriteFile (in: hFile=0x34c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x1088c, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12767d00*=0x1088c, lpOverlapped=0x12767d0c) returned 1
	[0174.608] GetFileType (hFile=0x34c) returned 0x1
	[0174.608] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1088c, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0174.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0174.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0174.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0174.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lpgKJypqLWtbDF.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lpgkjypqlwtbdf.ppt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.609] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.609] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.609] CloseHandle (hObject=0x344) returned 1
	[0174.609] CloseHandle (hObject=0x34c) returned 1
	[0174.609] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lpgKJypqLWtbDF.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lpgkjypqlwtbdf.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\lpgKJypqLWtbDF.ppt.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lpgkjypqlwtbdf.ppt.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.649] SetEvent (hEvent=0xa0) returned 1
	[0174.649] SetEvent (hEvent=0x318) returned 1
	[0174.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uqpR.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uqpr.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.650] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uqpR.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uqpr.rtf"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x939d79d0, ftCreationTime.dwHighDateTime=0x1d5e1bc, ftLastAccessTime.dwLowDateTime=0x5134e280, ftLastAccessTime.dwHighDateTime=0x1d5db73, ftLastWriteTime.dwLowDateTime=0x5134e280, ftLastWriteTime.dwHighDateTime=0x1d5db73, nFileSizeHigh=0x0, nFileSizeLow=0x10be6)) returned 1
	[0174.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c760 | out: pbBuffer=0x1244c760) returned 1
	[0174.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e768 | out: pbBuffer=0x1251e768) returned 1
	[0174.650] ReadFile (in: hFile=0x34c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12767d1c*=0x10be6, lpOverlapped=0x0) returned 1
	[0174.655] GetFileType (hFile=0x34c) returned 0x1
	[0174.655] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.655] WriteFile (in: hFile=0x34c, lpBuffer=0x12818000*, nNumberOfBytesToWrite=0x10be6, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12818000*, lpNumberOfBytesWritten=0x12767d00*=0x10be6, lpOverlapped=0x12767d0c) returned 1
	[0174.656] GetFileType (hFile=0x34c) returned 0x1
	[0174.656] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x10be6, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.656] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0174.656] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401481 | out: pbBuffer=0x12401481) returned 1
	[0174.656] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401581 | out: pbBuffer=0x12401581) returned 1
	[0174.657] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e880 | out: pbBuffer=0x1251e880) returned 1
	[0174.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uqpR.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uqpr.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0174.657] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.657] WriteFile (in: hFile=0x2dc, lpBuffer=0x12614f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12614f00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.657] CloseHandle (hObject=0x2dc) returned 1
	[0174.658] CloseHandle (hObject=0x34c) returned 1
	[0174.660] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uqpR.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uqpr.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uqpR.rtf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uqpr.rtf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zupETiL.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zupetil.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.675] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zupETiL.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zupetil.pps"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a28740, ftCreationTime.dwHighDateTime=0x1d5dfe8, ftLastAccessTime.dwLowDateTime=0x27ac29c0, ftLastAccessTime.dwHighDateTime=0x1d5e689, ftLastWriteTime.dwLowDateTime=0x27ac29c0, ftLastWriteTime.dwHighDateTime=0x1d5e689, nFileSizeHigh=0x0, nFileSizeLow=0x11acd)) returned 1
	[0174.675] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0174.675] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e0 | out: pbBuffer=0x124103e0) returned 1
	[0174.675] ReadFile (in: hFile=0x33c, lpBuffer=0x1282a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1282a000*, lpNumberOfBytesRead=0x1276dd1c*=0x11acd, lpOverlapped=0x0) returned 1
	[0174.683] GetFileType (hFile=0x33c) returned 0x1
	[0174.683] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.683] WriteFile (in: hFile=0x33c, lpBuffer=0x1286a000*, nNumberOfBytesToWrite=0x11acd, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1286a000*, lpNumberOfBytesWritten=0x1276dd00*=0x11acd, lpOverlapped=0x1276dd0c) returned 1
	[0174.684] GetFileType (hFile=0x33c) returned 0x1
	[0174.684] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x11acd, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8501 | out: pbBuffer=0x127e8501) returned 1
	[0174.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0174.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0174.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b8 | out: pbBuffer=0x124104b8) returned 1
	[0174.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zupETiL.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zupetil.pps"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0174.685] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.685] WriteFile (in: hFile=0x1e4, lpBuffer=0x1263c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.685] CloseHandle (hObject=0x1e4) returned 1
	[0174.685] CloseHandle (hObject=0x33c) returned 1
	[0174.685] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zupETiL.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zupetil.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zupETiL.pps.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zupetil.pps.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.700] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0174.715] SetEvent (hEvent=0x68) returned 1
	[0174.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1iQ5eZl-8 jZV2Rg.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1iq5ezl-8 jzv2rg.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.716] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1iQ5eZl-8 jZV2Rg.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1iq5ezl-8 jzv2rg.doc"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f960400, ftCreationTime.dwHighDateTime=0x1d5e04b, ftLastAccessTime.dwLowDateTime=0xa8f8a0e0, ftLastAccessTime.dwHighDateTime=0x1d5e3e5, ftLastWriteTime.dwLowDateTime=0xa8f8a0e0, ftLastWriteTime.dwHighDateTime=0x1d5e3e5, nFileSizeHigh=0x0, nFileSizeLow=0x16c23)) returned 1
	[0174.716] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0174.716] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d0 | out: pbBuffer=0x124104d0) returned 1
	[0174.716] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0174.719] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0174.719] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0174.719] SetEvent (hEvent=0xa0) returned 1
	[0174.719] SetEvent (hEvent=0x68) returned 1
	[0174.719] ReadFile (in: hFile=0x344, lpBuffer=0x1287c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1287c000*, lpNumberOfBytesRead=0x1260fd1c*=0x16c23, lpOverlapped=0x0) returned 1
	[0174.724] GetFileType (hFile=0x344) returned 0x1
	[0174.724] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.725] WriteFile (in: hFile=0x344, lpBuffer=0x128d4000*, nNumberOfBytesToWrite=0x16c23, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x128d4000*, lpNumberOfBytesWritten=0x1260fd00*=0x16c23, lpOverlapped=0x1260fd0c) returned 1
	[0174.725] GetFileType (hFile=0x344) returned 0x1
	[0174.725] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x16c23, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a01 | out: pbBuffer=0x127e8a01) returned 1
	[0174.726] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0174.726] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0174.726] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410588 | out: pbBuffer=0x12410588) returned 1
	[0174.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1iQ5eZl-8 jZV2Rg.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1iq5ezl-8 jzv2rg.doc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.728] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.728] WriteFile (in: hFile=0x33c, lpBuffer=0x1263ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x1263ca00*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.729] CloseHandle (hObject=0x33c) returned 1
	[0174.729] CloseHandle (hObject=0x344) returned 1
	[0174.729] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1iQ5eZl-8 jZV2Rg.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1iq5ezl-8 jzv2rg.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1iQ5eZl-8 jZV2Rg.doc.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1iq5ezl-8 jzv2rg.doc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.732] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0174.734] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0174.736] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0174.736] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0174.738] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0174.739] SetEvent (hEvent=0xa0) returned 1
	[0174.739] SetEvent (hEvent=0x80) returned 1
	[0174.739] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0174.739] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TkKqc395uI.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2tkkqc395ui.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.741] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0174.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TkKqc395uI.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2tkkqc395ui.ods"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1cce750, ftCreationTime.dwHighDateTime=0x1d5e1b5, ftLastAccessTime.dwLowDateTime=0x646a6b10, ftLastAccessTime.dwHighDateTime=0x1d5e70b, ftLastWriteTime.dwLowDateTime=0x646a6b10, ftLastWriteTime.dwHighDateTime=0x1d5e70b, nFileSizeHigh=0x0, nFileSizeLow=0x5a80)) returned 1
	[0174.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0174.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0174.741] ReadFile (in: hFile=0x344, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12769d1c*=0x5a80, lpOverlapped=0x0) returned 1
	[0174.754] GetFileType (hFile=0x344) returned 0x1
	[0174.754] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.754] WriteFile (in: hFile=0x344, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x5a80, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x12769d00*=0x5a80, lpOverlapped=0x12769d0c) returned 1
	[0174.755] GetFileType (hFile=0x344) returned 0x1
	[0174.755] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x5a80, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.755] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0174.755] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0174.755] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0174.755] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0174.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TkKqc395uI.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2tkkqc395ui.ods"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.756] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0174.756] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.756] CloseHandle (hObject=0x34c) returned 1
	[0174.756] CloseHandle (hObject=0x344) returned 1
	[0174.756] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TkKqc395uI.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2tkkqc395ui.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TkKqc395uI.ods.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2tkkqc395ui.ods.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.802] SetEvent (hEvent=0x318) returned 1
	[0174.803] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\48zhrX ioKlU.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\48zhrx ioklu.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.804] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0174.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\48zhrX ioKlU.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\48zhrx ioklu.xls"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4b9600, ftCreationTime.dwHighDateTime=0x1d5dae0, ftLastAccessTime.dwLowDateTime=0x46d24030, ftLastAccessTime.dwHighDateTime=0x1d5d9c0, ftLastWriteTime.dwLowDateTime=0x46d24030, ftLastWriteTime.dwHighDateTime=0x1d5d9c0, nFileSizeHigh=0x0, nFileSizeLow=0x10e95)) returned 1
	[0174.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732460 | out: pbBuffer=0x12732460) returned 1
	[0174.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0174.804] ReadFile (in: hFile=0x344, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12769d1c*=0x10e95, lpOverlapped=0x0) returned 1
	[0174.809] GetFileType (hFile=0x344) returned 0x1
	[0174.809] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.810] WriteFile (in: hFile=0x344, lpBuffer=0x125ea000*, nNumberOfBytesToWrite=0x10e95, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x125ea000*, lpNumberOfBytesWritten=0x12769d00*=0x10e95, lpOverlapped=0x12769d0c) returned 1
	[0174.810] GetFileType (hFile=0x344) returned 0x1
	[0174.810] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x10e95, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.810] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0174.810] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0174.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0174.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744470 | out: pbBuffer=0x12744470) returned 1
	[0174.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\48zhrX ioKlU.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\48zhrx ioklu.xls"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0174.811] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0174.811] WriteFile (in: hFile=0x2dc, lpBuffer=0x1272c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x1272c500*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.812] CloseHandle (hObject=0x2dc) returned 1
	[0174.813] CloseHandle (hObject=0x344) returned 1
	[0174.814] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\48zhrX ioKlU.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\48zhrx ioklu.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\48zhrX ioKlU.xls.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\48zhrx ioklu.xls.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.845] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0174.850] SetEvent (hEvent=0x80) returned 1
	[0174.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8PUh8WY_5dKhCbfa.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8puh8wy_5dkhcbfa.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.851] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8PUh8WY_5dKhCbfa.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8puh8wy_5dkhcbfa.ots"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aee7710, ftCreationTime.dwHighDateTime=0x1d5e11e, ftLastAccessTime.dwLowDateTime=0x9dbb1fe0, ftLastAccessTime.dwHighDateTime=0x1d5d9d7, ftLastWriteTime.dwLowDateTime=0x9dbb1fe0, ftLastWriteTime.dwHighDateTime=0x1d5d9d7, nFileSizeHigh=0x0, nFileSizeLow=0xa55f)) returned 1
	[0174.851] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732a80 | out: pbBuffer=0x12732a80) returned 1
	[0174.851] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744558 | out: pbBuffer=0x12744558) returned 1
	[0174.851] ReadFile (in: hFile=0x344, lpBuffer=0x1269e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1269e000*, lpNumberOfBytesRead=0x12767d1c*=0xa55f, lpOverlapped=0x0) returned 1
	[0174.856] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0174.856] SetEvent (hEvent=0x80) returned 1
	[0174.857] GetFileType (hFile=0x344) returned 0x1
	[0174.857] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.857] WriteFile (in: hFile=0x344, lpBuffer=0x126de000*, nNumberOfBytesToWrite=0xa55f, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x126de000*, lpNumberOfBytesWritten=0x12767d00*=0xa55f, lpOverlapped=0x12767d0c) returned 1
	[0174.857] GetFileType (hFile=0x344) returned 0x1
	[0174.857] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xa55f, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401681 | out: pbBuffer=0x12401681) returned 1
	[0174.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401781 | out: pbBuffer=0x12401781) returned 1
	[0174.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401881 | out: pbBuffer=0x12401881) returned 1
	[0174.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744610 | out: pbBuffer=0x12744610) returned 1
	[0174.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8PUh8WY_5dKhCbfa.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8puh8wy_5dkhcbfa.ots"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.858] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.858] WriteFile (in: hFile=0x33c, lpBuffer=0x1272cf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1272cf00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.859] CloseHandle (hObject=0x33c) returned 1
	[0174.861] CloseHandle (hObject=0x344) returned 1
	[0174.863] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8PUh8WY_5dKhCbfa.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8puh8wy_5dkhcbfa.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8PUh8WY_5dKhCbfa.ots.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8puh8wy_5dkhcbfa.ots.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.897] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0174.901] SetEvent (hEvent=0x30c) returned 1
	[0174.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AHAdZE.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ahadze.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.902] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0174.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AHAdZE.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ahadze.docx"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba42f770, ftCreationTime.dwHighDateTime=0x1d5bc89, ftLastAccessTime.dwLowDateTime=0xa64a6c60, ftLastAccessTime.dwHighDateTime=0x1d59b4d, ftLastWriteTime.dwLowDateTime=0xa64a6c60, ftLastWriteTime.dwHighDateTime=0x1d59b4d, nFileSizeHigh=0x0, nFileSizeLow=0x195e)) returned 1
	[0174.903] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0174.903] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0174.903] ReadFile (in: hFile=0x344, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12611d1c*=0x195e, lpOverlapped=0x0) returned 1
	[0174.906] GetFileType (hFile=0x344) returned 0x1
	[0174.906] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.906] WriteFile (in: hFile=0x344, lpBuffer=0x124ff980*, nNumberOfBytesToWrite=0x195e, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x124ff980*, lpNumberOfBytesWritten=0x12611d00*=0x195e, lpOverlapped=0x12611d0c) returned 1
	[0174.907] GetFileType (hFile=0x344) returned 0x1
	[0174.907] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x195e, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0174.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0174.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0174.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0174.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AHAdZE.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ahadze.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.908] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0174.908] WriteFile (in: hFile=0x33c, lpBuffer=0x1272c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x1272c500*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.908] CloseHandle (hObject=0x33c) returned 1
	[0174.909] CloseHandle (hObject=0x344) returned 1
	[0174.911] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AHAdZE.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ahadze.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AHAdZE.docx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ahadze.docx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.943] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0174.948] SetEvent (hEvent=0x30c) returned 1
	[0174.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HFb0VzgrvhmDy7R.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hfb0vzgrvhmdy7r.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.949] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HFb0VzgrvhmDy7R.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hfb0vzgrvhmdy7r.doc"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1dcd650, ftCreationTime.dwHighDateTime=0x1d5dd56, ftLastAccessTime.dwLowDateTime=0x212b7b20, ftLastAccessTime.dwHighDateTime=0x1d5e079, ftLastWriteTime.dwLowDateTime=0x212b7b20, ftLastWriteTime.dwHighDateTime=0x1d5e079, nFileSizeHigh=0x0, nFileSizeLow=0x4304)) returned 1
	[0174.949] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0174.949] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f8 | out: pbBuffer=0x1251e5f8) returned 1
	[0174.949] ReadFile (in: hFile=0x344, lpBuffer=0x128f0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128f0000*, lpNumberOfBytesRead=0x1242bd1c*=0x4304, lpOverlapped=0x0) returned 1
	[0174.952] GetFileType (hFile=0x344) returned 0x1
	[0174.952] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.952] WriteFile (in: hFile=0x344, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x4304, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1242bd00*=0x4304, lpOverlapped=0x1242bd0c) returned 1
	[0174.953] GetFileType (hFile=0x344) returned 0x1
	[0174.953] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x4304, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0174.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0174.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d01 | out: pbBuffer=0x127e8d01) returned 1
	[0174.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0174.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HFb0VzgrvhmDy7R.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hfb0vzgrvhmdy7r.doc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.954] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.954] WriteFile (in: hFile=0x33c, lpBuffer=0x1272ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1272ca00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.954] CloseHandle (hObject=0x33c) returned 1
	[0174.955] CloseHandle (hObject=0x344) returned 1
	[0174.956] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HFb0VzgrvhmDy7R.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hfb0vzgrvhmdy7r.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HFb0VzgrvhmDy7R.doc.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hfb0vzgrvhmdy7r.doc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.995] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0175.001] SetEvent (hEvent=0x30c) returned 1
	[0175.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KGTu5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kgtu5.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0175.002] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0175.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KGTu5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kgtu5.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865ed790, ftCreationTime.dwHighDateTime=0x1d5b873, ftLastAccessTime.dwLowDateTime=0x13bff150, ftLastAccessTime.dwHighDateTime=0x1d570b7, ftLastWriteTime.dwLowDateTime=0x13bff150, ftLastWriteTime.dwHighDateTime=0x1d570b7, nFileSizeHigh=0x0, nFileSizeLow=0x12576)) returned 1
	[0175.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0175.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744010 | out: pbBuffer=0x12744010) returned 1
	[0175.003] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0175.004] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0175.004] SetEvent (hEvent=0x30c) returned 1
	[0175.004] ReadFile (in: hFile=0x344, lpBuffer=0x12594000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12594000*, lpNumberOfBytesRead=0x1276dd1c*=0x12576, lpOverlapped=0x0) returned 1
	[0175.008] GetFileType (hFile=0x344) returned 0x1
	[0175.008] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.009] WriteFile (in: hFile=0x344, lpBuffer=0x12978000*, nNumberOfBytesToWrite=0x12576, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12978000*, lpNumberOfBytesWritten=0x1276dd00*=0x12576, lpOverlapped=0x1276dd0c) returned 1
	[0175.009] GetFileType (hFile=0x344) returned 0x1
	[0175.009] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x12576, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0175.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435081 | out: pbBuffer=0x12435081) returned 1
	[0175.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435181 | out: pbBuffer=0x12435181) returned 1
	[0175.009] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0175.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KGTu5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kgtu5.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0175.010] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0175.010] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0175.010] CloseHandle (hObject=0x1e4) returned 1
	[0175.011] CloseHandle (hObject=0x344) returned 1
	[0175.012] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KGTu5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kgtu5.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KGTu5.pptx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kgtu5.pptx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0175.030] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0175.047] SetEvent (hEvent=0x30c) returned 1
	[0175.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0175.048] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0175.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0175.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0175.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788020 | out: pbBuffer=0x12788020) returned 1
	[0175.049] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x0, lpOverlapped=0x0) returned 1
	[0175.049] CloseHandle (hObject=0x344) returned 1
	[0175.049] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0175.354] SetEvent (hEvent=0x68) returned 1
	[0175.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0175.355] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0175.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0175.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3a0 | out: pbBuffer=0x1240e3a0) returned 1
	[0175.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788030 | out: pbBuffer=0x12788030) returned 1
	[0175.355] ReadFile (in: hFile=0x34c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0xd8, lpOverlapped=0x0) returned 1
	[0175.361] GetFileType (hFile=0x34c) returned 0x1
	[0175.361] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.361] WriteFile (in: hFile=0x34c, lpBuffer=0x12740000*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12740000*, lpNumberOfBytesWritten=0x124f5d00*=0xd8, lpOverlapped=0x124f5d0c) returned 1
	[0175.361] GetFileType (hFile=0x34c) returned 0x1
	[0175.361] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0175.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0175.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0175.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0175.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0175.362] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0175.362] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0175.363] CloseHandle (hObject=0x1e4) returned 1
	[0175.363] CloseHandle (hObject=0x34c) returned 1
	[0175.363] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0175.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0175.377] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x1276da44 | out: lpFindFileData=0x1276da44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0175.377] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0175.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TGOFHW8t2ZIbPsvWYke.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tgofhw8t2zibpsvwyke.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0175.919] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0175.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TGOFHW8t2ZIbPsvWYke.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tgofhw8t2zibpsvwyke.ots"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25edb50, ftCreationTime.dwHighDateTime=0x1d5e061, ftLastAccessTime.dwLowDateTime=0x2b323ac0, ftLastAccessTime.dwHighDateTime=0x1d5d979, ftLastWriteTime.dwLowDateTime=0x2b323ac0, ftLastWriteTime.dwHighDateTime=0x1d5d979, nFileSizeHigh=0x0, nFileSizeLow=0x8eff)) returned 1
	[0175.919] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c080 | out: pbBuffer=0x1244c080) returned 1
	[0175.919] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410410 | out: pbBuffer=0x12410410) returned 1
	[0175.919] ReadFile (in: hFile=0x1e4, lpBuffer=0x1283e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1283e000*, lpNumberOfBytesRead=0x1276dd1c*=0x8eff, lpOverlapped=0x0) returned 1
	[0175.922] GetFileType (hFile=0x1e4) returned 0x1
	[0175.922] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.922] WriteFile (in: hFile=0x1e4, lpBuffer=0x127d6000*, nNumberOfBytesToWrite=0x8eff, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x127d6000*, lpNumberOfBytesWritten=0x1276dd00*=0x8eff, lpOverlapped=0x1276dd0c) returned 1
	[0175.923] GetFileType (hFile=0x1e4) returned 0x1
	[0175.923] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x8eff, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8501 | out: pbBuffer=0x127e8501) returned 1
	[0175.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0175.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0175.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104f8 | out: pbBuffer=0x124104f8) returned 1
	[0175.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TGOFHW8t2ZIbPsvWYke.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tgofhw8t2zibpsvwyke.ots"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0175.923] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0175.924] WriteFile (in: hFile=0x33c, lpBuffer=0x1258a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1258a000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0175.924] CloseHandle (hObject=0x33c) returned 1
	[0175.924] CloseHandle (hObject=0x1e4) returned 1
	[0175.924] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TGOFHW8t2ZIbPsvWYke.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tgofhw8t2zibpsvwyke.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TGOFHW8t2ZIbPsvWYke.ots.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tgofhw8t2zibpsvwyke.ots.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0175.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xi5_KGPIcF9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xi5_kgpicf9.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68516b70, ftCreationTime.dwHighDateTime=0x1d59ddc, ftLastAccessTime.dwLowDateTime=0xb53d0670, ftLastAccessTime.dwHighDateTime=0x1d5bed3, ftLastWriteTime.dwLowDateTime=0xb53d0670, ftLastWriteTime.dwHighDateTime=0x1d5bed3, nFileSizeHigh=0x0, nFileSizeLow=0x14cce)) returned 1
	[0175.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YtI7_FGncRuMw7mgwRkV.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yti7_fgncrumw7mgwrkv.docx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9029fd60, ftCreationTime.dwHighDateTime=0x1d57ac3, ftLastAccessTime.dwLowDateTime=0x16ddf530, ftLastAccessTime.dwHighDateTime=0x1d5bc9d, ftLastWriteTime.dwLowDateTime=0x16ddf530, ftLastWriteTime.dwHighDateTime=0x1d5bc9d, nFileSizeHigh=0x0, nFileSizeLow=0xa759)) returned 1
	[0175.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZRae5xMKGljR.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zrae5xmkgljr.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe598a90, ftCreationTime.dwHighDateTime=0x1d5a663, ftLastAccessTime.dwLowDateTime=0xa1b17860, ftLastAccessTime.dwHighDateTime=0x1d56c9f, ftLastWriteTime.dwLowDateTime=0xa1b17860, ftLastWriteTime.dwHighDateTime=0x1d56c9f, nFileSizeHigh=0x0, nFileSizeLow=0x7e06)) returned 1
	[0175.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YtI7_FGncRuMw7mgwRkV.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yti7_fgncrumw7mgwrkv.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0176.082] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0176.092] SetEvent (hEvent=0x2f4) returned 1
	[0176.092] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0176.127] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0176.127] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0176.173] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0176.173] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0176.227] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0176.227] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0176.227] SetEvent (hEvent=0x2f4) returned 1
	[0176.227] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0176.250] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0176.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YtI7_FGncRuMw7mgwRkV.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yti7_fgncrumw7mgwrkv.docx"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9029fd60, ftCreationTime.dwHighDateTime=0x1d57ac3, ftLastAccessTime.dwLowDateTime=0x16ddf530, ftLastAccessTime.dwHighDateTime=0x1d5bc9d, ftLastWriteTime.dwLowDateTime=0x16ddf530, ftLastWriteTime.dwHighDateTime=0x1d5bc9d, nFileSizeHigh=0x0, nFileSizeLow=0xa759)) returned 1
	[0176.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0176.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0176.250] ReadFile (in: hFile=0x2dc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0xa759, lpOverlapped=0x0) returned 1
	[0176.340] GetFileType (hFile=0x2dc) returned 0x1
	[0176.340] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.340] WriteFile (in: hFile=0x2dc, lpBuffer=0x12978000*, nNumberOfBytesToWrite=0xa759, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12978000*, lpNumberOfBytesWritten=0x124f3d00*=0xa759, lpOverlapped=0x124f3d0c) returned 1
	[0176.340] GetFileType (hFile=0x2dc) returned 0x1
	[0176.340] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0xa759, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.340] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0176.340] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0176.341] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0176.341] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0176.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YtI7_FGncRuMw7mgwRkV.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yti7_fgncrumw7mgwrkv.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0176.341] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0176.341] WriteFile (in: hFile=0x34c, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.341] CloseHandle (hObject=0x34c) returned 1
	[0176.351] CloseHandle (hObject=0x2dc) returned 1
	[0176.363] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YtI7_FGncRuMw7mgwRkV.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yti7_fgncrumw7mgwrkv.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YtI7_FGncRuMw7mgwRkV.docx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yti7_fgncrumw7mgwrkv.docx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.682] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0176.804] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0176.811] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0x2ca, buf=0x1260a000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0x2ca, lpOverlapped=0x124e2088) returned 0
	[0176.812] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0176.839] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0176.849] SetEvent (hEvent=0x30c) returned 1
	[0176.850] SetEvent (hEvent=0x70) returned 1
	[0176.850] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0176.852] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0176.853] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0176.853] SetEvent (hEvent=0x30c) returned 1
	[0176.853] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0176.854] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0177.156] SetEvent (hEvent=0x318) returned 1
	[0177.157] SetEvent (hEvent=0x70) returned 1
	[0177.157] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0180.888] SetEvent (hEvent=0x70) returned 1
	[0180.888] SetEvent (hEvent=0x80) returned 1
	[0180.889] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0181.235] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0181.374] SetEvent (hEvent=0x70) returned 1
	[0181.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0181.376] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0181.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b)) returned 1
	[0181.376] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0181.376] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0181.377] ReadFile (in: hFile=0x2dc, lpBuffer=0x128e4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e4000*, lpNumberOfBytesRead=0x12769d1c*=0x16b, lpOverlapped=0x0) returned 1
	[0181.379] GetFileType (hFile=0x2dc) returned 0x1
	[0181.379] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0181.379] WriteFile (in: hFile=0x2dc, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x16b, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x12769d00*=0x16b, lpOverlapped=0x12769d0c) returned 1
	[0181.380] GetFileType (hFile=0x2dc) returned 0x1
	[0181.381] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x16b, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0181.381] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0181.381] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0181.381] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0181.381] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0181.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0181.382] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0181.382] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0181.382] CloseHandle (hObject=0x344) returned 1
	[0181.451] CloseHandle (hObject=0x2dc) returned 1
	[0181.575] SetEvent (hEvent=0xa0) returned 1
	[0181.575] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0182.968] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0183.106] SetEvent (hEvent=0x2f4) returned 1
	[0183.106] SetEvent (hEvent=0x80) returned 1
	[0183.106] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0183.238] SetEvent (hEvent=0x318) returned 1
	[0183.238] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0183.241] SetEvent (hEvent=0x318) returned 1
	[0183.241] SetEvent (hEvent=0x30c) returned 1
	[0183.241] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\7cnWgjSIxz6a6j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\7cnwgjsixz6a6j.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.243] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0183.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\7cnWgjSIxz6a6j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\7cnwgjsixz6a6j.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c26adc0, ftCreationTime.dwHighDateTime=0x1d5d8d3, ftLastAccessTime.dwLowDateTime=0x362d7ac0, ftLastAccessTime.dwHighDateTime=0x1d5e257, ftLastWriteTime.dwLowDateTime=0x362d7ac0, ftLastWriteTime.dwHighDateTime=0x1d5e257, nFileSizeHigh=0x0, nFileSizeLow=0x134b5)) returned 1
	[0183.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0183.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0183.243] ReadFile (in: hFile=0x33c, lpBuffer=0x126ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126ac000*, lpNumberOfBytesRead=0x1276dd1c*=0x134b5, lpOverlapped=0x0) returned 1
	[0183.273] GetFileType (hFile=0x33c) returned 0x1
	[0183.273] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.273] WriteFile (in: hFile=0x33c, lpBuffer=0x126cc000*, nNumberOfBytesToWrite=0x134b5, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x126cc000*, lpNumberOfBytesWritten=0x1276dd00*=0x134b5, lpOverlapped=0x1276dd0c) returned 1
	[0183.274] GetFileType (hFile=0x33c) returned 0x1
	[0183.274] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x134b5, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0183.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0183.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0183.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0183.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\7cnWgjSIxz6a6j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\7cnwgjsixz6a6j.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.274] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0183.275] WriteFile (in: hFile=0x344, lpBuffer=0x125ee500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125ee500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.275] CloseHandle (hObject=0x344) returned 1
	[0183.275] CloseHandle (hObject=0x33c) returned 1
	[0183.275] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\7cnWgjSIxz6a6j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\7cnwgjsixz6a6j.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\7cnWgjSIxz6a6j.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\7cnwgjsixz6a6j.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.277] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\NNAdwgveVEO78I2MW.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\nnadwgveveo78i2mw.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.278] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0183.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\NNAdwgveVEO78I2MW.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\nnadwgveveo78i2mw.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c4040, ftCreationTime.dwHighDateTime=0x1d5de47, ftLastAccessTime.dwLowDateTime=0x5f999720, ftLastAccessTime.dwHighDateTime=0x1d5e07e, ftLastWriteTime.dwLowDateTime=0x5f999720, ftLastWriteTime.dwHighDateTime=0x1d5e07e, nFileSizeHigh=0x0, nFileSizeLow=0x2570)) returned 1
	[0183.278] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0183.278] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0183.278] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12769d1c*=0x2570, lpOverlapped=0x0) returned 1
	[0183.293] GetFileType (hFile=0x33c) returned 0x1
	[0183.293] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.293] WriteFile (in: hFile=0x33c, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x2570, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x12769d00*=0x2570, lpOverlapped=0x12769d0c) returned 1
	[0183.293] GetFileType (hFile=0x33c) returned 0x1
	[0183.293] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x2570, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0183.294] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0183.294] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0183.294] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0183.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\NNAdwgveVEO78I2MW.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\nnadwgveveo78i2mw.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.294] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0183.294] WriteFile (in: hFile=0x2dc, lpBuffer=0x125eea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x125eea00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.294] CloseHandle (hObject=0x2dc) returned 1
	[0183.294] CloseHandle (hObject=0x33c) returned 1
	[0183.295] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\NNAdwgveVEO78I2MW.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\nnadwgveveo78i2mw.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\NNAdwgveVEO78I2MW.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\nnadwgveveo78i2mw.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.297] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0183.332] SetEvent (hEvent=0x30c) returned 1
	[0183.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\3W059.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\3w059.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.333] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0183.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\3W059.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\3w059.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10b71b0, ftCreationTime.dwHighDateTime=0x1d5dbd2, ftLastAccessTime.dwLowDateTime=0x2015aac0, ftLastAccessTime.dwHighDateTime=0x1d5e1ec, ftLastWriteTime.dwLowDateTime=0x2015aac0, ftLastWriteTime.dwHighDateTime=0x1d5e1ec, nFileSizeHigh=0x0, nFileSizeLow=0xc216)) returned 1
	[0183.333] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0183.333] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f8 | out: pbBuffer=0x1251e5f8) returned 1
	[0183.333] ReadFile (in: hFile=0x2dc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x1276dd1c*=0xc216, lpOverlapped=0x0) returned 1
	[0183.347] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0183.355] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0183.357] SetEvent (hEvent=0x318) returned 1
	[0183.357] SetEvent (hEvent=0x68) returned 1
	[0183.357] GetFileType (hFile=0x34c) returned 0x1
	[0183.357] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.357] WriteFile (in: hFile=0x34c, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x3754, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x12767d00*=0x3754, lpOverlapped=0x12767d0c) returned 1
	[0183.358] GetFileType (hFile=0x34c) returned 0x1
	[0183.358] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x3754, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0183.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0183.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0183.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0183.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\kGT4gm0xlJ Hu4Fzmv1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\kgt4gm0xlj hu4fzmv1.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.358] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.358] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.358] CloseHandle (hObject=0x344) returned 1
	[0183.359] CloseHandle (hObject=0x34c) returned 1
	[0183.359] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\kGT4gm0xlJ Hu4Fzmv1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\kgt4gm0xlj hu4fzmv1.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\kGT4gm0xlJ Hu4Fzmv1.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\kgt4gm0xlj hu4fzmv1.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.361] GetFileType (hFile=0x2dc) returned 0x1
	[0183.361] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.361] WriteFile (in: hFile=0x2dc, lpBuffer=0x12798000*, nNumberOfBytesToWrite=0xc216, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12798000*, lpNumberOfBytesWritten=0x1276dd00*=0xc216, lpOverlapped=0x1276dd0c) returned 1
	[0183.362] GetFileType (hFile=0x2dc) returned 0x1
	[0183.362] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0xc216, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0183.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0183.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0183.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e3a0 | out: pbBuffer=0x1251e3a0) returned 1
	[0183.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\3W059.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\3w059.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.362] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0183.362] WriteFile (in: hFile=0x34c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.362] CloseHandle (hObject=0x34c) returned 1
	[0183.362] CloseHandle (hObject=0x2dc) returned 1
	[0183.363] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\3W059.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\3w059.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\3W059.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\3w059.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.365] SwitchToThread () returned 1
	[0183.377] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0183.486] SetEvent (hEvent=0x68) returned 1
	[0183.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\-oZreAdEPM2NUuGwrAv.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\-ozreadepm2nuugwrav.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.488] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0183.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\-oZreAdEPM2NUuGwrAv.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\-ozreadepm2nuugwrav.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5ea1c0, ftCreationTime.dwHighDateTime=0x1d5e590, ftLastAccessTime.dwLowDateTime=0x4b48c020, ftLastAccessTime.dwHighDateTime=0x1d5ddd1, ftLastWriteTime.dwLowDateTime=0x4b48c020, ftLastWriteTime.dwHighDateTime=0x1d5ddd1, nFileSizeHigh=0x0, nFileSizeLow=0x11f2b)) returned 1
	[0183.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0183.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0183.488] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x11f2b, lpOverlapped=0x0) returned 1
	[0183.516] GetFileType (hFile=0x33c) returned 0x1
	[0183.516] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.516] WriteFile (in: hFile=0x33c, lpBuffer=0x128c0000*, nNumberOfBytesToWrite=0x11f2b, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x128c0000*, lpNumberOfBytesWritten=0x12429d00*=0x11f2b, lpOverlapped=0x12429d0c) returned 1
	[0183.516] GetFileType (hFile=0x33c) returned 0x1
	[0183.516] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x11f2b, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.517] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0183.517] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0183.517] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0183.517] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0183.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\-oZreAdEPM2NUuGwrAv.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\-ozreadepm2nuugwrav.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.517] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0183.518] WriteFile (in: hFile=0x34c, lpBuffer=0x12602000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12602000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.518] CloseHandle (hObject=0x34c) returned 1
	[0183.518] CloseHandle (hObject=0x33c) returned 1
	[0183.518] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\-oZreAdEPM2NUuGwrAv.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\-ozreadepm2nuugwrav.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\-oZreAdEPM2NUuGwrAv.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\-ozreadepm2nuugwrav.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\aDmUv.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\admuv.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.529] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0183.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\aDmUv.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\admuv.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6ea6480, ftCreationTime.dwHighDateTime=0x1d5e3c3, ftLastAccessTime.dwLowDateTime=0xb9837510, ftLastAccessTime.dwHighDateTime=0x1d5d932, ftLastWriteTime.dwLowDateTime=0xb9837510, ftLastWriteTime.dwHighDateTime=0x1d5d932, nFileSizeHigh=0x0, nFileSizeLow=0xe293)) returned 1
	[0183.529] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c2e0 | out: pbBuffer=0x1244c2e0) returned 1
	[0183.529] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103f8 | out: pbBuffer=0x124103f8) returned 1
	[0183.529] ReadFile (in: hFile=0x33c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1276dd1c*=0xe293, lpOverlapped=0x0) returned 1
	[0183.569] GetFileType (hFile=0x33c) returned 0x1
	[0183.569] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.569] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0xe293, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1276dd00*=0xe293, lpOverlapped=0x1276dd0c) returned 1
	[0183.569] GetFileType (hFile=0x33c) returned 0x1
	[0183.569] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xe293, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.570] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0183.570] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0183.570] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0183.570] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410550 | out: pbBuffer=0x12410550) returned 1
	[0183.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\aDmUv.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\admuv.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0183.570] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0183.570] WriteFile (in: hFile=0x1e4, lpBuffer=0x12602500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12602500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.570] CloseHandle (hObject=0x1e4) returned 1
	[0183.570] CloseHandle (hObject=0x33c) returned 1
	[0183.571] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\aDmUv.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\admuv.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\aDmUv.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\admuv.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6EB2NMUfOJHLz_o.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6eb2nmufojhlz_o.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.644] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x128ddd0c | out: lpMode=0x128ddd0c) returned 0
	[0183.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6EB2NMUfOJHLz_o.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6eb2nmufojhlz_o.m4a"), fInfoLevelId=0x0, lpFileInformation=0x128ddad0 | out: lpFileInformation=0x128ddad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x859b5f0, ftCreationTime.dwHighDateTime=0x1d5d7e4, ftLastAccessTime.dwLowDateTime=0x71f34ff0, ftLastAccessTime.dwHighDateTime=0x1d5e516, ftLastWriteTime.dwLowDateTime=0x71f34ff0, ftLastWriteTime.dwHighDateTime=0x1d5e516, nFileSizeHigh=0x0, nFileSizeLow=0x14e07)) returned 1
	[0183.644] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c640 | out: pbBuffer=0x1244c640) returned 1
	[0183.644] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410568 | out: pbBuffer=0x12410568) returned 1
	[0183.644] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0183.652] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0183.652] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0183.652] SetEvent (hEvent=0xa0) returned 1
	[0183.652] SetEvent (hEvent=0x2f4) returned 1
	[0183.652] ReadFile (in: hFile=0x33c, lpBuffer=0x1256c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x128ddd1c, lpOverlapped=0x0 | out: lpBuffer=0x1256c000*, lpNumberOfBytesRead=0x128ddd1c*=0x14e07, lpOverlapped=0x0) returned 1
	[0183.663] GetFileType (hFile=0x33c) returned 0x1
	[0183.663] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x128ddce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.663] WriteFile (in: hFile=0x33c, lpBuffer=0x128e4000*, nNumberOfBytesToWrite=0x14e07, lpNumberOfBytesWritten=0x128ddd00, lpOverlapped=0x128ddd0c | out: lpBuffer=0x128e4000*, lpNumberOfBytesWritten=0x128ddd00*=0x14e07, lpOverlapped=0x128ddd0c) returned 1
	[0183.664] GetFileType (hFile=0x33c) returned 0x1
	[0183.664] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x14e07, lpNewFilePointer=0x0, dwMoveMethod=0x128ddce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.664] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f01 | out: pbBuffer=0x12400f01) returned 1
	[0183.664] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401001 | out: pbBuffer=0x12401001) returned 1
	[0183.664] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401101 | out: pbBuffer=0x12401101) returned 1
	[0183.664] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444f0 | out: pbBuffer=0x127444f0) returned 1
	[0183.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6EB2NMUfOJHLz_o.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6eb2nmufojhlz_o.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.665] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x128ddd0c | out: lpMode=0x128ddd0c) returned 0
	[0183.665] WriteFile (in: hFile=0x2dc, lpBuffer=0x12742f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x128ddd0c, lpOverlapped=0x0 | out: lpBuffer=0x12742f00*, lpNumberOfBytesWritten=0x128ddd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.665] CloseHandle (hObject=0x2dc) returned 1
	[0183.665] CloseHandle (hObject=0x33c) returned 1
	[0183.665] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6EB2NMUfOJHLz_o.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6eb2nmufojhlz_o.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6EB2NMUfOJHLz_o.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6eb2nmufojhlz_o.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.669] SetEvent (hEvent=0x30c) returned 1
	[0183.669] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0186.317] SetEvent (hEvent=0x68) returned 1
	[0186.317] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0186.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\aepOA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aepoa.png"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb022b40, ftCreationTime.dwHighDateTime=0x1d5d945, ftLastAccessTime.dwLowDateTime=0x7efa9c40, ftLastAccessTime.dwHighDateTime=0x1d5dd90, ftLastWriteTime.dwLowDateTime=0x7efa9c40, ftLastWriteTime.dwHighDateTime=0x1d5dd90, nFileSizeHigh=0x0, nFileSizeLow=0x11430)) returned 1
	[0186.377] SetEvent (hEvent=0x318) returned 1
	[0186.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dM0lseJn14p.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dm0lsejn14p.png"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54cb4f20, ftCreationTime.dwHighDateTime=0x1d5e4c8, ftLastAccessTime.dwLowDateTime=0x5394e220, ftLastAccessTime.dwHighDateTime=0x1d5e3f0, ftLastWriteTime.dwLowDateTime=0x5394e220, ftLastWriteTime.dwHighDateTime=0x1d5e3f0, nFileSizeHigh=0x0, nFileSizeLow=0xcfa5)) returned 1
	[0186.396] SetEvent (hEvent=0xa0) returned 1
	[0186.396] SetEvent (hEvent=0x30c) returned 1
	[0186.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0186.409] SetEvent (hEvent=0x68) returned 1
	[0186.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hBmyV.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hbmyv.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f55c4f0, ftCreationTime.dwHighDateTime=0x1d5d9cf, ftLastAccessTime.dwLowDateTime=0x5ef5fd50, ftLastAccessTime.dwHighDateTime=0x1d5e0f0, ftLastWriteTime.dwLowDateTime=0x5ef5fd50, ftLastWriteTime.dwHighDateTime=0x1d5e0f0, nFileSizeHigh=0x0, nFileSizeLow=0x1396)) returned 1
	[0186.423] SetEvent (hEvent=0x318) returned 1
	[0186.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\j3Rq Ii5dtLqm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\j3rq ii5dtlqm.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed51a2d0, ftCreationTime.dwHighDateTime=0x1d5e5d6, ftLastAccessTime.dwLowDateTime=0x122cdb40, ftLastAccessTime.dwHighDateTime=0x1d5e223, ftLastWriteTime.dwLowDateTime=0x122cdb40, ftLastWriteTime.dwHighDateTime=0x1d5e223, nFileSizeHigh=0x0, nFileSizeLow=0xa45c)) returned 1
	[0186.432] SetEvent (hEvent=0x318) returned 1
	[0186.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\msM- tsE9FgNH.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\msm- tse9fgnh.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a8b00, ftCreationTime.dwHighDateTime=0x1d5e704, ftLastAccessTime.dwLowDateTime=0x7b93abf0, ftLastAccessTime.dwHighDateTime=0x1d5d7dc, ftLastWriteTime.dwLowDateTime=0x7b93abf0, ftLastWriteTime.dwHighDateTime=0x1d5d7dc, nFileSizeHigh=0x0, nFileSizeLow=0xeb1f)) returned 1
	[0186.445] SetEvent (hEvent=0x68) returned 1
	[0186.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oRq7IhOIsJvjWIQ1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\orq7ihoisjvjwiq1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bba91b0, ftCreationTime.dwHighDateTime=0x1d5e67e, ftLastAccessTime.dwLowDateTime=0xa5ec5c70, ftLastAccessTime.dwHighDateTime=0x1d5e34f, ftLastWriteTime.dwLowDateTime=0xa5ec5c70, ftLastWriteTime.dwHighDateTime=0x1d5e34f, nFileSizeHigh=0x0, nFileSizeLow=0x180b3)) returned 1
	[0186.456] SetEvent (hEvent=0x30c) returned 1
	[0186.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ow0iTrzqcyPAOKrzeb.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ow0itrzqcypaokrzeb.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f01500, ftCreationTime.dwHighDateTime=0x1d5de81, ftLastAccessTime.dwLowDateTime=0xcef2ebe0, ftLastAccessTime.dwHighDateTime=0x1d5e479, ftLastWriteTime.dwLowDateTime=0xcef2ebe0, ftLastWriteTime.dwHighDateTime=0x1d5e479, nFileSizeHigh=0x0, nFileSizeLow=0x13f56)) returned 1
	[0186.467] SetEvent (hEvent=0x318) returned 1
	[0186.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\scwtaQ7.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\scwtaq7.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd33017e0, ftCreationTime.dwHighDateTime=0x1d5debc, ftLastAccessTime.dwLowDateTime=0x40a93300, ftLastAccessTime.dwHighDateTime=0x1d5e4bd, ftLastWriteTime.dwLowDateTime=0x40a93300, ftLastWriteTime.dwHighDateTime=0x1d5e4bd, nFileSizeHigh=0x0, nFileSizeLow=0x106fc)) returned 1
	[0186.485] SetEvent (hEvent=0x68) returned 1
	[0186.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vidbZBYUutx.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vidbzbyuutx.png"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dba22c0, ftCreationTime.dwHighDateTime=0x1d5e52d, ftLastAccessTime.dwLowDateTime=0xa421e660, ftLastAccessTime.dwHighDateTime=0x1d5de51, ftLastWriteTime.dwLowDateTime=0xa421e660, ftLastWriteTime.dwHighDateTime=0x1d5de51, nFileSizeHigh=0x0, nFileSizeLow=0x13de8)) returned 1
	[0186.498] SetEvent (hEvent=0x30c) returned 1
	[0186.499] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x-kG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x-kg.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6434ba0, ftCreationTime.dwHighDateTime=0x1d5d8c5, ftLastAccessTime.dwLowDateTime=0xc8459360, ftLastAccessTime.dwHighDateTime=0x1d5e73a, ftLastWriteTime.dwLowDateTime=0xc8459360, ftLastWriteTime.dwHighDateTime=0x1d5e73a, nFileSizeHigh=0x0, nFileSizeLow=0xf1bc)) returned 1
	[0186.515] SetEvent (hEvent=0x318) returned 1
	[0186.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0186.517] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0186.517] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0186.517] CloseHandle (hObject=0x33c) returned 1
	[0186.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.518] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0186.518] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0186.518] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0186.518] CloseHandle (hObject=0x33c) returned 1
	[0186.518] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\printhood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x1276da44 | out: lpFindFileData=0x1276da44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0186.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\recent"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.519] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x1276da44 | out: lpFindFileData=0x1276da44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0186.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.520] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.520] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.520] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0186.521] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.521] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.522] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0186.522] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0186.524] CloseHandle (hObject=0x33c) returned 1
	[0186.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0186.530] SetEvent (hEvent=0x80) returned 1
	[0186.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.531] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.535] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0186.547] SetEvent (hEvent=0x68) returned 1
	[0186.547] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0186.549] SetEvent (hEvent=0x68) returned 1
	[0186.549] SetEvent (hEvent=0x80) returned 1
	[0186.549] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.549] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0186.549] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0186.549] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1
	[0186.549] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.549] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.555] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0186.555] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0186.556] CloseHandle (hObject=0x33c) returned 1
	[0186.556] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1
	[0186.559] SetEvent (hEvent=0x80) returned 1
	[0186.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1
	[0186.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c)) returned 1
	[0186.562] SetEvent (hEvent=0x68) returned 1
	[0186.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.563] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x2dc
	[0186.563] GetFileInformationByHandle (in: hFile=0x2dc, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0186.563] GetFileInformationByHandleEx (in: hFile=0x2dc, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0186.564] CloseHandle (hObject=0x2dc) returned 1
	[0186.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.565] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x2dc
	[0186.565] GetFileInformationByHandle (in: hFile=0x2dc, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0186.565] GetFileInformationByHandleEx (in: hFile=0x2dc, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0186.565] CloseHandle (hObject=0x2dc) returned 1
	[0186.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x2dc
	[0186.567] GetFileInformationByHandle (in: hFile=0x2dc, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0186.567] GetFileInformationByHandleEx (in: hFile=0x2dc, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0186.567] CloseHandle (hObject=0x2dc) returned 1
	[0186.567] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\start menu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.567] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x12727a44 | out: lpFindFileData=0x12727a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0186.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\templates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.568] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x12727a44 | out: lpFindFileData=0x12727a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0186.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9ea3120, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ea3120, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.568] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9ea3120, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ea3120, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.581] SetEvent (hEvent=0xa0) returned 1
	[0186.581] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9ea3120, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9ea3120, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.581] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x579136c0, ftCreationTime.dwHighDateTime=0x1d5dbd1, ftLastAccessTime.dwLowDateTime=0x7b434c0, ftLastAccessTime.dwHighDateTime=0x1d5e335, ftLastWriteTime.dwLowDateTime=0x7b434c0, ftLastWriteTime.dwHighDateTime=0x1d5e335, nFileSizeHigh=0x0, nFileSizeLow=0x13220, dwReserved0=0x0, dwReserved1=0x0, cFileName="0lwQDDkDOmzghUp7Q3s.flv", cAlternateFileName="0LWQDD~1.FLV")) returned 1
	[0186.581] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d381680, ftCreationTime.dwHighDateTime=0x1d5dc09, ftLastAccessTime.dwLowDateTime=0x532354b0, ftLastAccessTime.dwHighDateTime=0x1d5dc26, ftLastWriteTime.dwLowDateTime=0x532354b0, ftLastWriteTime.dwHighDateTime=0x1d5dc26, nFileSizeHigh=0x0, nFileSizeLow=0x7b97, dwReserved0=0x0, dwReserved1=0x0, cFileName="a5l-oc.flv", cAlternateFileName="")) returned 1
	[0186.581] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0186.581] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b4ebc0, ftCreationTime.dwHighDateTime=0x1d5e3d2, ftLastAccessTime.dwLowDateTime=0x9d91f9c0, ftLastAccessTime.dwHighDateTime=0x1d5dc58, ftLastWriteTime.dwLowDateTime=0x9d91f9c0, ftLastWriteTime.dwHighDateTime=0x1d5dc58, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gnNi_MtzmvS0IEV", cAlternateFileName="GNNI_M~1")) returned 1
	[0186.582] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44cd79f0, ftCreationTime.dwHighDateTime=0x1d5db49, ftLastAccessTime.dwLowDateTime=0xd42e9690, ftLastAccessTime.dwHighDateTime=0x1d5d9a2, ftLastWriteTime.dwLowDateTime=0xd42e9690, ftLastWriteTime.dwHighDateTime=0x1d5d9a2, nFileSizeHigh=0x0, nFileSizeLow=0x82f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="iA9TzO1cn.flv", cAlternateFileName="IA9TZO~1.FLV")) returned 1
	[0186.582] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd621df80, ftCreationTime.dwHighDateTime=0x1d5ddde, ftLastAccessTime.dwLowDateTime=0x1b712a00, ftLastAccessTime.dwHighDateTime=0x1d5dc3b, ftLastWriteTime.dwLowDateTime=0x1b712a00, ftLastWriteTime.dwHighDateTime=0x1d5dc3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSzkCrHqLW-", cAlternateFileName="RSZKCR~1")) returned 1
	[0186.582] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f8ff30, ftCreationTime.dwHighDateTime=0x1d5e06f, ftLastAccessTime.dwLowDateTime=0x2b23aa90, ftLastAccessTime.dwHighDateTime=0x1d5dfb5, ftLastWriteTime.dwLowDateTime=0x2b23aa90, ftLastWriteTime.dwHighDateTime=0x1d5dfb5, nFileSizeHigh=0x0, nFileSizeLow=0x2b6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="_w4JzebHnf1R2Z0O8.avi", cAlternateFileName="_W4JZE~1.AVI")) returned 1
	[0186.582] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.582] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.585] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0186.585] WriteFile (in: hFile=0x2dc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0186.586] CloseHandle (hObject=0x2dc) returned 1
	[0186.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\0lwQDDkDOmzghUp7Q3s.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\0lwqddkdomzghup7q3s.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x579136c0, ftCreationTime.dwHighDateTime=0x1d5dbd1, ftLastAccessTime.dwLowDateTime=0x7b434c0, ftLastAccessTime.dwHighDateTime=0x1d5e335, ftLastWriteTime.dwLowDateTime=0x7b434c0, ftLastWriteTime.dwHighDateTime=0x1d5e335, nFileSizeHigh=0x0, nFileSizeLow=0x13220)) returned 1
	[0186.587] SetEvent (hEvent=0x68) returned 1
	[0186.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd621df80, ftCreationTime.dwHighDateTime=0x1d5ddde, ftLastAccessTime.dwLowDateTime=0x1b712a00, ftLastAccessTime.dwHighDateTime=0x1d5dc3b, ftLastWriteTime.dwLowDateTime=0x1b712a00, ftLastWriteTime.dwHighDateTime=0x1d5dc3b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.589] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd621df80, ftCreationTime.dwHighDateTime=0x1d5ddde, ftLastAccessTime.dwLowDateTime=0x1b712a00, ftLastAccessTime.dwHighDateTime=0x1d5dc3b, ftLastWriteTime.dwLowDateTime=0x1b712a00, ftLastWriteTime.dwHighDateTime=0x1d5dc3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.594] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd621df80, ftCreationTime.dwHighDateTime=0x1d5ddde, ftLastAccessTime.dwLowDateTime=0x1b712a00, ftLastAccessTime.dwHighDateTime=0x1d5dc3b, ftLastWriteTime.dwLowDateTime=0x1b712a00, ftLastWriteTime.dwHighDateTime=0x1d5dc3b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.594] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb07e8b50, ftCreationTime.dwHighDateTime=0x1d5db1f, ftLastAccessTime.dwLowDateTime=0xdff47030, ftLastAccessTime.dwHighDateTime=0x1d5ddb7, ftLastWriteTime.dwLowDateTime=0xdff47030, ftLastWriteTime.dwHighDateTime=0x1d5ddb7, nFileSizeHigh=0x0, nFileSizeLow=0x5c9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUdfd7wmTZqkCb0Hce1.mkv", cAlternateFileName="JUDFD7~1.MKV")) returned 1
	[0186.594] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2029fa10, ftCreationTime.dwHighDateTime=0x1d5df4f, ftLastAccessTime.dwLowDateTime=0xf38df460, ftLastAccessTime.dwHighDateTime=0x1d5e2f1, ftLastWriteTime.dwLowDateTime=0xf38df460, ftLastWriteTime.dwHighDateTime=0x1d5e2f1, nFileSizeHigh=0x0, nFileSizeLow=0x9eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOzTc32Y.mkv", cAlternateFileName="")) returned 1
	[0186.594] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8a01a0, ftCreationTime.dwHighDateTime=0x1d5d7d3, ftLastAccessTime.dwLowDateTime=0x8e368e40, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0x8e368e40, ftLastWriteTime.dwHighDateTime=0x1d5e0ff, nFileSizeHigh=0x0, nFileSizeLow=0x13ccb, dwReserved0=0x0, dwReserved1=0x0, cFileName="NdW_5URKAQjN7DRqKU.swf", cAlternateFileName="NDW_5U~1.SWF")) returned 1
	[0186.594] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x820f7d10, ftCreationTime.dwHighDateTime=0x1d5dc82, ftLastAccessTime.dwLowDateTime=0xcd57c3e0, ftLastAccessTime.dwHighDateTime=0x1d5e344, ftLastWriteTime.dwLowDateTime=0xcd57c3e0, ftLastWriteTime.dwHighDateTime=0x1d5e344, nFileSizeHigh=0x0, nFileSizeLow=0x11461, dwReserved0=0x0, dwReserved1=0x0, cFileName="qCVTujkIRlBIORf8zpLj.avi", cAlternateFileName="QCVTUJ~1.AVI")) returned 1
	[0186.594] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacecf390, ftCreationTime.dwHighDateTime=0x1d5db34, ftLastAccessTime.dwLowDateTime=0x80ff1960, ftLastAccessTime.dwHighDateTime=0x1d5e323, ftLastWriteTime.dwLowDateTime=0x80ff1960, ftLastWriteTime.dwHighDateTime=0x1d5e323, nFileSizeHigh=0x0, nFileSizeLow=0x114c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zw4Y8xErWav.flv", cAlternateFileName="ZW4Y8X~1.FLV")) returned 1
	[0186.594] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.594] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.597] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0186.597] WriteFile (in: hFile=0x2dc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0186.599] CloseHandle (hObject=0x2dc) returned 1
	[0186.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\JUdfd7wmTZqkCb0Hce1.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\judfd7wmtzqkcb0hce1.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb07e8b50, ftCreationTime.dwHighDateTime=0x1d5db1f, ftLastAccessTime.dwLowDateTime=0xdff47030, ftLastAccessTime.dwHighDateTime=0x1d5ddb7, ftLastWriteTime.dwLowDateTime=0xdff47030, ftLastWriteTime.dwHighDateTime=0x1d5ddb7, nFileSizeHigh=0x0, nFileSizeLow=0x5c9b)) returned 1
	[0186.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\MOzTc32Y.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\moztc32y.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2029fa10, ftCreationTime.dwHighDateTime=0x1d5df4f, ftLastAccessTime.dwLowDateTime=0xf38df460, ftLastAccessTime.dwHighDateTime=0x1d5e2f1, ftLastWriteTime.dwLowDateTime=0xf38df460, ftLastWriteTime.dwHighDateTime=0x1d5e2f1, nFileSizeHigh=0x0, nFileSizeLow=0x9eae)) returned 1
	[0186.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\NdW_5URKAQjN7DRqKU.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\ndw_5urkaqjn7drqku.swf"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8a01a0, ftCreationTime.dwHighDateTime=0x1d5d7d3, ftLastAccessTime.dwLowDateTime=0x8e368e40, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0x8e368e40, ftLastWriteTime.dwHighDateTime=0x1d5e0ff, nFileSizeHigh=0x0, nFileSizeLow=0x13ccb)) returned 1
	[0186.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\Zw4Y8xErWav.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\zw4y8xerwav.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacecf390, ftCreationTime.dwHighDateTime=0x1d5db34, ftLastAccessTime.dwLowDateTime=0x80ff1960, ftLastAccessTime.dwHighDateTime=0x1d5e323, ftLastWriteTime.dwLowDateTime=0x80ff1960, ftLastWriteTime.dwHighDateTime=0x1d5e323, nFileSizeHigh=0x0, nFileSizeLow=0x114c9)) returned 1
	[0186.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\NdW_5URKAQjN7DRqKU.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\ndw_5urkaqjn7drqku.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.603] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12725d0c | out: lpMode=0x12725d0c) returned 0
	[0186.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\NdW_5URKAQjN7DRqKU.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\ndw_5urkaqjn7drqku.swf"), fInfoLevelId=0x0, lpFileInformation=0x12725ad0 | out: lpFileInformation=0x12725ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8a01a0, ftCreationTime.dwHighDateTime=0x1d5d7d3, ftLastAccessTime.dwLowDateTime=0x8e368e40, ftLastAccessTime.dwHighDateTime=0x1d5e0ff, ftLastWriteTime.dwLowDateTime=0x8e368e40, ftLastWriteTime.dwHighDateTime=0x1d5e0ff, nFileSizeHigh=0x0, nFileSizeLow=0x13ccb)) returned 1
	[0186.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e460 | out: pbBuffer=0x1240e460) returned 1
	[0186.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d0 | out: pbBuffer=0x124103d0) returned 1
	[0186.603] ReadFile (in: hFile=0x2dc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12725d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12725d1c*=0x13ccb, lpOverlapped=0x0) returned 1
	[0186.618] GetFileType (hFile=0x2dc) returned 0x1
	[0186.618] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12725ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.618] WriteFile (in: hFile=0x2dc, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x13ccb, lpNumberOfBytesWritten=0x12725d00, lpOverlapped=0x12725d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12725d00*=0x13ccb, lpOverlapped=0x12725d0c) returned 1
	[0186.618] GetFileType (hFile=0x2dc) returned 0x1
	[0186.618] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x13ccb, lpNewFilePointer=0x0, dwMoveMethod=0x12725ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.618] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0186.619] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0186.619] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0186.619] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104a8 | out: pbBuffer=0x124104a8) returned 1
	[0186.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\NdW_5URKAQjN7DRqKU.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\ndw_5urkaqjn7drqku.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.619] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12725d0c | out: lpMode=0x12725d0c) returned 0
	[0186.619] WriteFile (in: hFile=0x344, lpBuffer=0x128d4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12725d0c, lpOverlapped=0x0 | out: lpBuffer=0x128d4000*, lpNumberOfBytesWritten=0x12725d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.619] CloseHandle (hObject=0x344) returned 1
	[0186.619] CloseHandle (hObject=0x2dc) returned 1
	[0186.619] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\NdW_5URKAQjN7DRqKU.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\ndw_5urkaqjn7drqku.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\NdW_5URKAQjN7DRqKU.swf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\ndw_5urkaqjn7drqku.swf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\MOzTc32Y.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\moztc32y.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.623] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\MOzTc32Y.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\moztc32y.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2029fa10, ftCreationTime.dwHighDateTime=0x1d5df4f, ftLastAccessTime.dwLowDateTime=0xf38df460, ftLastAccessTime.dwHighDateTime=0x1d5e2f1, ftLastWriteTime.dwLowDateTime=0xf38df460, ftLastWriteTime.dwHighDateTime=0x1d5e2f1, nFileSizeHigh=0x0, nFileSizeLow=0x9eae)) returned 1
	[0186.624] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e7a0 | out: pbBuffer=0x1240e7a0) returned 1
	[0186.624] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d0 | out: pbBuffer=0x124104d0) returned 1
	[0186.624] ReadFile (in: hFile=0x2dc, lpBuffer=0x1288c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1288c000*, lpNumberOfBytesRead=0x12769d1c*=0x9eae, lpOverlapped=0x0) returned 1
	[0186.717] GetFileType (hFile=0x2dc) returned 0x1
	[0186.717] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.717] WriteFile (in: hFile=0x2dc, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x9eae, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x12769d00*=0x9eae, lpOverlapped=0x12769d0c) returned 1
	[0186.717] GetFileType (hFile=0x2dc) returned 0x1
	[0186.717] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x9eae, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.717] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0186.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0186.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0186.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410588 | out: pbBuffer=0x12410588) returned 1
	[0186.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\MOzTc32Y.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\moztc32y.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.718] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.718] WriteFile (in: hFile=0x1e4, lpBuffer=0x128d4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x128d4500*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.719] CloseHandle (hObject=0x1e4) returned 1
	[0186.719] CloseHandle (hObject=0x2dc) returned 1
	[0186.719] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\MOzTc32Y.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\moztc32y.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\MOzTc32Y.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\moztc32y.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_w4JzebHnf1R2Z0O8.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_w4jzebhnf1r2z0o8.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.723] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_w4JzebHnf1R2Z0O8.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_w4jzebhnf1r2z0o8.avi"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f8ff30, ftCreationTime.dwHighDateTime=0x1d5e06f, ftLastAccessTime.dwLowDateTime=0x2b23aa90, ftLastAccessTime.dwHighDateTime=0x1d5dfb5, ftLastWriteTime.dwLowDateTime=0x2b23aa90, ftLastWriteTime.dwHighDateTime=0x1d5dfb5, nFileSizeHigh=0x0, nFileSizeLow=0x2b6f)) returned 1
	[0186.723] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ed40 | out: pbBuffer=0x1240ed40) returned 1
	[0186.723] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105a0 | out: pbBuffer=0x124105a0) returned 1
	[0186.723] ReadFile (in: hFile=0x2dc, lpBuffer=0x12936000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12936000*, lpNumberOfBytesRead=0x12769d1c*=0x2b6f, lpOverlapped=0x0) returned 1
	[0186.726] GetFileType (hFile=0x2dc) returned 0x1
	[0186.727] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.727] WriteFile (in: hFile=0x2dc, lpBuffer=0x125d0000*, nNumberOfBytesToWrite=0x2b6f, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x125d0000*, lpNumberOfBytesWritten=0x12769d00*=0x2b6f, lpOverlapped=0x12769d0c) returned 1
	[0186.728] GetFileType (hFile=0x2dc) returned 0x1
	[0186.728] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x2b6f, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.728] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401101 | out: pbBuffer=0x12401101) returned 1
	[0186.728] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401201 | out: pbBuffer=0x12401201) returned 1
	[0186.728] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401301 | out: pbBuffer=0x12401301) returned 1
	[0186.728] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106a8 | out: pbBuffer=0x124106a8) returned 1
	[0186.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_w4JzebHnf1R2Z0O8.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_w4jzebhnf1r2z0o8.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.729] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.729] WriteFile (in: hFile=0x1e4, lpBuffer=0x128d4a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x128d4a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.729] CloseHandle (hObject=0x1e4) returned 1
	[0186.729] CloseHandle (hObject=0x2dc) returned 1
	[0186.729] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_w4JzebHnf1R2Z0O8.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_w4jzebhnf1r2z0o8.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_w4JzebHnf1R2Z0O8.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_w4jzebhnf1r2z0o8.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\a5l-oc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\a5l-oc.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d381680, ftCreationTime.dwHighDateTime=0x1d5dc09, ftLastAccessTime.dwLowDateTime=0x532354b0, ftLastAccessTime.dwHighDateTime=0x1d5dc26, ftLastWriteTime.dwLowDateTime=0x532354b0, ftLastWriteTime.dwHighDateTime=0x1d5dc26, nFileSizeHigh=0x0, nFileSizeLow=0x7b97)) returned 1
	[0186.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0186.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\a5l-oc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\a5l-oc.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.734] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\a5l-oc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\a5l-oc.flv"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d381680, ftCreationTime.dwHighDateTime=0x1d5dc09, ftLastAccessTime.dwLowDateTime=0x532354b0, ftLastAccessTime.dwHighDateTime=0x1d5dc26, ftLastWriteTime.dwLowDateTime=0x532354b0, ftLastWriteTime.dwHighDateTime=0x1d5dc26, nFileSizeHigh=0x0, nFileSizeLow=0x7b97)) returned 1
	[0186.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f380 | out: pbBuffer=0x1240f380) returned 1
	[0186.734] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106d0 | out: pbBuffer=0x124106d0) returned 1
	[0186.734] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0186.738] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0186.738] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0186.738] SetEvent (hEvent=0xa0) returned 1
	[0186.738] SetEvent (hEvent=0x68) returned 1
	[0186.738] ReadFile (in: hFile=0x2dc, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x12769d1c*=0x7b97, lpOverlapped=0x0) returned 1
	[0186.744] GetFileType (hFile=0x2dc) returned 0x1
	[0186.744] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.744] WriteFile (in: hFile=0x2dc, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0x7b97, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x12769d00*=0x7b97, lpOverlapped=0x12769d0c) returned 1
	[0186.744] GetFileType (hFile=0x2dc) returned 0x1
	[0186.744] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x7b97, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec101 | out: pbBuffer=0x124ec101) returned 1
	[0186.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0186.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0186.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0186.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\a5l-oc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\a5l-oc.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.745] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.745] WriteFile (in: hFile=0x33c, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.746] CloseHandle (hObject=0x33c) returned 1
	[0186.746] CloseHandle (hObject=0x2dc) returned 1
	[0186.746] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\a5l-oc.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\a5l-oc.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\a5l-oc.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\a5l-oc.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.749] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0186.750] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0186.750] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0186.750] ReadFile (in: hFile=0x2dc, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x12769d1c*=0x1f8, lpOverlapped=0x0) returned 1
	[0186.752] GetFileType (hFile=0x2dc) returned 0x1
	[0186.752] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.753] WriteFile (in: hFile=0x2dc, lpBuffer=0x128cc000*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x128cc000*, lpNumberOfBytesWritten=0x12769d00*=0x1f8, lpOverlapped=0x12769d0c) returned 1
	[0186.753] GetFileType (hFile=0x2dc) returned 0x1
	[0186.753] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0186.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0186.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0186.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744440 | out: pbBuffer=0x12744440) returned 1
	[0186.753] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.754] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.754] WriteFile (in: hFile=0x33c, lpBuffer=0x1263a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a500*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.754] CloseHandle (hObject=0x33c) returned 1
	[0186.754] CloseHandle (hObject=0x2dc) returned 1
	[0186.754] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b4ebc0, ftCreationTime.dwHighDateTime=0x1d5e3d2, ftLastAccessTime.dwLowDateTime=0x9d91f9c0, ftLastAccessTime.dwHighDateTime=0x1d5dc58, ftLastWriteTime.dwLowDateTime=0x9d91f9c0, ftLastWriteTime.dwHighDateTime=0x1d5dc58, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.758] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b4ebc0, ftCreationTime.dwHighDateTime=0x1d5e3d2, ftLastAccessTime.dwLowDateTime=0x9d91f9c0, ftLastAccessTime.dwHighDateTime=0x1d5dc58, ftLastWriteTime.dwLowDateTime=0x9d91f9c0, ftLastWriteTime.dwHighDateTime=0x1d5dc58, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70b4ebc0, ftCreationTime.dwHighDateTime=0x1d5e3d2, ftLastAccessTime.dwLowDateTime=0x9d91f9c0, ftLastAccessTime.dwHighDateTime=0x1d5dc58, ftLastWriteTime.dwLowDateTime=0x9d91f9c0, ftLastWriteTime.dwHighDateTime=0x1d5dc58, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c026bb0, ftCreationTime.dwHighDateTime=0x1d5ddae, ftLastAccessTime.dwLowDateTime=0x48a91f40, ftLastAccessTime.dwHighDateTime=0x1d5def3, ftLastWriteTime.dwLowDateTime=0x48a91f40, ftLastWriteTime.dwHighDateTime=0x1d5def3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPWfq7YEopr 36", cAlternateFileName="CPWFQ7~1")) returned 1
	[0186.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76378fa0, ftCreationTime.dwHighDateTime=0x1d5d9ad, ftLastAccessTime.dwLowDateTime=0xb2c07680, ftLastAccessTime.dwHighDateTime=0x1d5d926, ftLastWriteTime.dwLowDateTime=0xb2c07680, ftLastWriteTime.dwHighDateTime=0x1d5d926, nFileSizeHigh=0x0, nFileSizeLow=0x14c35, dwReserved0=0x0, dwReserved1=0x0, cFileName="dp_X2gBHg5E4b Mfrae.mkv", cAlternateFileName="DP_X2G~1.MKV")) returned 1
	[0186.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fab05d0, ftCreationTime.dwHighDateTime=0x1d5e063, ftLastAccessTime.dwLowDateTime=0xa4aa37a0, ftLastAccessTime.dwHighDateTime=0x1d5e21f, ftLastWriteTime.dwLowDateTime=0xa4aa37a0, ftLastWriteTime.dwHighDateTime=0x1d5e21f, nFileSizeHigh=0x0, nFileSizeLow=0x17625, dwReserved0=0x0, dwReserved1=0x0, cFileName="Msp3zZ.avi", cAlternateFileName="")) returned 1
	[0186.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac4bdb20, ftCreationTime.dwHighDateTime=0x1d5d8cf, ftLastAccessTime.dwLowDateTime=0x587a2a80, ftLastAccessTime.dwHighDateTime=0x1d5e732, ftLastWriteTime.dwLowDateTime=0x587a2a80, ftLastWriteTime.dwHighDateTime=0x1d5e732, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Od1A4Nf8h", cAlternateFileName="OD1A4N~1")) returned 1
	[0186.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6004efb0, ftCreationTime.dwHighDateTime=0x1d5e43a, ftLastAccessTime.dwLowDateTime=0xa40e2e80, ftLastAccessTime.dwHighDateTime=0x1d5d9f7, ftLastWriteTime.dwLowDateTime=0xa40e2e80, ftLastWriteTime.dwHighDateTime=0x1d5d9f7, nFileSizeHigh=0x0, nFileSizeLow=0x13fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="r3ICd_h.avi", cAlternateFileName="")) returned 1
	[0186.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7ddfc0, ftCreationTime.dwHighDateTime=0x1d5e3b0, ftLastAccessTime.dwLowDateTime=0x39a79690, ftLastAccessTime.dwHighDateTime=0x1d5e108, ftLastWriteTime.dwLowDateTime=0x39a79690, ftLastWriteTime.dwHighDateTime=0x1d5e108, nFileSizeHigh=0x0, nFileSizeLow=0x6d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SF-t-xKEMAC- j_g.mkv", cAlternateFileName="SF-T-X~1.MKV")) returned 1
	[0186.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9488b190, ftCreationTime.dwHighDateTime=0x1d5e548, ftLastAccessTime.dwLowDateTime=0x520038c0, ftLastAccessTime.dwHighDateTime=0x1d5e6ab, ftLastWriteTime.dwLowDateTime=0x520038c0, ftLastWriteTime.dwHighDateTime=0x1d5e6ab, nFileSizeHigh=0x0, nFileSizeLow=0x1d95, dwReserved0=0x0, dwReserved1=0x0, cFileName="_qxfVz.mkv", cAlternateFileName="")) returned 1
	[0186.761] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.761] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.769] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0186.769] WriteFile (in: hFile=0x2dc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0186.772] CloseHandle (hObject=0x2dc) returned 1
	[0186.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c026bb0, ftCreationTime.dwHighDateTime=0x1d5ddae, ftLastAccessTime.dwLowDateTime=0x48a91f40, ftLastAccessTime.dwHighDateTime=0x1d5def3, ftLastWriteTime.dwLowDateTime=0x48a91f40, ftLastWriteTime.dwHighDateTime=0x1d5def3, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.774] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.774] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c026bb0, ftCreationTime.dwHighDateTime=0x1d5ddae, ftLastAccessTime.dwLowDateTime=0x48a91f40, ftLastAccessTime.dwHighDateTime=0x1d5def3, ftLastWriteTime.dwLowDateTime=0x48a91f40, ftLastWriteTime.dwHighDateTime=0x1d5def3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.778] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c026bb0, ftCreationTime.dwHighDateTime=0x1d5ddae, ftLastAccessTime.dwLowDateTime=0x48a91f40, ftLastAccessTime.dwHighDateTime=0x1d5def3, ftLastWriteTime.dwLowDateTime=0x48a91f40, ftLastWriteTime.dwHighDateTime=0x1d5def3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.778] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1f22f40, ftCreationTime.dwHighDateTime=0x1d5d829, ftLastAccessTime.dwLowDateTime=0x3fdd38b0, ftLastAccessTime.dwHighDateTime=0x1d5dee4, ftLastWriteTime.dwLowDateTime=0x3fdd38b0, ftLastWriteTime.dwHighDateTime=0x1d5dee4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5ExL wrufLslfw", cAlternateFileName="5EXLWR~1")) returned 1
	[0186.778] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2232f150, ftCreationTime.dwHighDateTime=0x1d5e2f0, ftLastAccessTime.dwLowDateTime=0xec746da0, ftLastAccessTime.dwHighDateTime=0x1d5dd90, ftLastWriteTime.dwLowDateTime=0xec746da0, ftLastWriteTime.dwHighDateTime=0x1d5dd90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E5nW", cAlternateFileName="")) returned 1
	[0186.778] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4cafe0, ftCreationTime.dwHighDateTime=0x1d5e779, ftLastAccessTime.dwLowDateTime=0x40fcd180, ftLastAccessTime.dwHighDateTime=0x1d5da5a, ftLastWriteTime.dwLowDateTime=0x40fcd180, ftLastWriteTime.dwHighDateTime=0x1d5da5a, nFileSizeHigh=0x0, nFileSizeLow=0xe23d, dwReserved0=0x0, dwReserved1=0x0, cFileName="hHwbpVF.mp4", cAlternateFileName="")) returned 1
	[0186.778] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec21a170, ftCreationTime.dwHighDateTime=0x1d5dd8a, ftLastAccessTime.dwLowDateTime=0x71208a0, ftLastAccessTime.dwHighDateTime=0x1d5dca3, ftLastWriteTime.dwLowDateTime=0x71208a0, ftLastWriteTime.dwHighDateTime=0x1d5dca3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jELWgBKXCbTMxaxKNIr", cAlternateFileName="JELWGB~1")) returned 1
	[0186.778] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c5d140, ftCreationTime.dwHighDateTime=0x1d5ddbf, ftLastAccessTime.dwLowDateTime=0x20393970, ftLastAccessTime.dwHighDateTime=0x1d5e53b, ftLastWriteTime.dwLowDateTime=0x20393970, ftLastWriteTime.dwHighDateTime=0x1d5e53b, nFileSizeHigh=0x0, nFileSizeLow=0x946b, dwReserved0=0x0, dwReserved1=0x0, cFileName="KZiHugoVY_.mkv", cAlternateFileName="KZIHUG~1.MKV")) returned 1
	[0186.778] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe2a79f0, ftCreationTime.dwHighDateTime=0x1d5dab5, ftLastAccessTime.dwLowDateTime=0x9340dec0, ftLastAccessTime.dwHighDateTime=0x1d5e7fa, ftLastWriteTime.dwLowDateTime=0x9340dec0, ftLastWriteTime.dwHighDateTime=0x1d5e7fa, nFileSizeHigh=0x0, nFileSizeLow=0x16220, dwReserved0=0x0, dwReserved1=0x0, cFileName="NWK49oPh4.mp4", cAlternateFileName="NWK49O~1.MP4")) returned 1
	[0186.778] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x616e9ed0, ftCreationTime.dwHighDateTime=0x1d5e3ab, ftLastAccessTime.dwLowDateTime=0xd89f2a70, ftLastAccessTime.dwHighDateTime=0x1d5e292, ftLastWriteTime.dwLowDateTime=0xd89f2a70, ftLastWriteTime.dwHighDateTime=0x1d5e292, nFileSizeHigh=0x0, nFileSizeLow=0x12549, dwReserved0=0x0, dwReserved1=0x0, cFileName="TBZe.avi", cAlternateFileName="")) returned 1
	[0186.778] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.778] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.782] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0186.782] WriteFile (in: hFile=0x2dc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0186.783] CloseHandle (hObject=0x2dc) returned 1
	[0186.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1f22f40, ftCreationTime.dwHighDateTime=0x1d5d829, ftLastAccessTime.dwLowDateTime=0x3fdd38b0, ftLastAccessTime.dwHighDateTime=0x1d5dee4, ftLastWriteTime.dwLowDateTime=0x3fdd38b0, ftLastWriteTime.dwHighDateTime=0x1d5dee4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.784] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1f22f40, ftCreationTime.dwHighDateTime=0x1d5d829, ftLastAccessTime.dwLowDateTime=0x3fdd38b0, ftLastAccessTime.dwHighDateTime=0x1d5dee4, ftLastWriteTime.dwLowDateTime=0x3fdd38b0, ftLastWriteTime.dwHighDateTime=0x1d5dee4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.795] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa1f22f40, ftCreationTime.dwHighDateTime=0x1d5d829, ftLastAccessTime.dwLowDateTime=0x3fdd38b0, ftLastAccessTime.dwHighDateTime=0x1d5dee4, ftLastWriteTime.dwLowDateTime=0x3fdd38b0, ftLastWriteTime.dwHighDateTime=0x1d5dee4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.795] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x218f81e0, ftCreationTime.dwHighDateTime=0x1d5d81a, ftLastAccessTime.dwLowDateTime=0xc79024f0, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0xc79024f0, ftLastWriteTime.dwHighDateTime=0x1d5df09, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G3fVokSH6bLz9tgSE", cAlternateFileName="G3FVOK~1")) returned 1
	[0186.795] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42dfb030, ftCreationTime.dwHighDateTime=0x1d5e18a, ftLastAccessTime.dwLowDateTime=0x8c47f700, ftLastAccessTime.dwHighDateTime=0x1d5e2a7, ftLastWriteTime.dwLowDateTime=0x8c47f700, ftLastWriteTime.dwHighDateTime=0x1d5e2a7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="x4coRc2vg1.flv", cAlternateFileName="X4CORC~1.FLV")) returned 1
	[0186.795] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71fa6380, ftCreationTime.dwHighDateTime=0x1d5e5d4, ftLastAccessTime.dwLowDateTime=0x7cbb1c10, ftLastAccessTime.dwHighDateTime=0x1d5e71e, ftLastWriteTime.dwLowDateTime=0x7cbb1c10, ftLastWriteTime.dwHighDateTime=0x1d5e71e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="YuxSihAu58_BQH_J", cAlternateFileName="YUXSIH~1")) returned 1
	[0186.795] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.795] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.799] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0186.799] WriteFile (in: hFile=0x2dc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0186.801] CloseHandle (hObject=0x2dc) returned 1
	[0186.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x218f81e0, ftCreationTime.dwHighDateTime=0x1d5d81a, ftLastAccessTime.dwLowDateTime=0xc79024f0, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0xc79024f0, ftLastWriteTime.dwHighDateTime=0x1d5df09, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.802] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x218f81e0, ftCreationTime.dwHighDateTime=0x1d5d81a, ftLastAccessTime.dwLowDateTime=0xc79024f0, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0xc79024f0, ftLastWriteTime.dwHighDateTime=0x1d5df09, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x218f81e0, ftCreationTime.dwHighDateTime=0x1d5d81a, ftLastAccessTime.dwLowDateTime=0xc79024f0, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0xc79024f0, ftLastWriteTime.dwHighDateTime=0x1d5df09, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49620850, ftCreationTime.dwHighDateTime=0x1d5dddd, ftLastAccessTime.dwLowDateTime=0x58c60790, ftLastAccessTime.dwHighDateTime=0x1d5e6e5, ftLastWriteTime.dwLowDateTime=0x58c60790, ftLastWriteTime.dwHighDateTime=0x1d5e6e5, nFileSizeHigh=0x0, nFileSizeLow=0x4f85, dwReserved0=0x0, dwReserved1=0x0, cFileName="7_TAmv-1EPMCwubXcUt.swf", cAlternateFileName="7_TAMV~1.SWF")) returned 1
	[0186.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7353b700, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0xc3bddaf0, ftLastAccessTime.dwHighDateTime=0x1d5e361, ftLastWriteTime.dwLowDateTime=0xc3bddaf0, ftLastWriteTime.dwHighDateTime=0x1d5e361, nFileSizeHigh=0x0, nFileSizeLow=0x6d0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PP9qpgiot1fEIkxwqUd7.mkv", cAlternateFileName="PP9QPG~1.MKV")) returned 1
	[0186.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd38b20, ftCreationTime.dwHighDateTime=0x1d5d9ec, ftLastAccessTime.dwLowDateTime=0x75511810, ftLastAccessTime.dwHighDateTime=0x1d5e662, ftLastWriteTime.dwLowDateTime=0x75511810, ftLastWriteTime.dwHighDateTime=0x1d5e662, nFileSizeHigh=0x0, nFileSizeLow=0x7b5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="TKwfK84PKfIO6Gr8.flv", cAlternateFileName="TKWFK8~1.FLV")) returned 1
	[0186.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.804] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.805] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.807] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0186.807] WriteFile (in: hFile=0x2dc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0186.808] CloseHandle (hObject=0x2dc) returned 1
	[0186.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\7_TAmv-1EPMCwubXcUt.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\7_tamv-1epmcwubxcut.swf"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49620850, ftCreationTime.dwHighDateTime=0x1d5dddd, ftLastAccessTime.dwLowDateTime=0x58c60790, ftLastAccessTime.dwHighDateTime=0x1d5e6e5, ftLastWriteTime.dwLowDateTime=0x58c60790, ftLastWriteTime.dwHighDateTime=0x1d5e6e5, nFileSizeHigh=0x0, nFileSizeLow=0x4f85)) returned 1
	[0186.809] SetEvent (hEvent=0x318) returned 1
	[0186.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\PP9qpgiot1fEIkxwqUd7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\pp9qpgiot1feikxwqud7.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7353b700, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0xc3bddaf0, ftLastAccessTime.dwHighDateTime=0x1d5e361, ftLastWriteTime.dwLowDateTime=0xc3bddaf0, ftLastWriteTime.dwHighDateTime=0x1d5e361, nFileSizeHigh=0x0, nFileSizeLow=0x6d0a)) returned 1
	[0186.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\TKwfK84PKfIO6Gr8.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\tkwfk84pkfio6gr8.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd38b20, ftCreationTime.dwHighDateTime=0x1d5d9ec, ftLastAccessTime.dwLowDateTime=0x75511810, ftLastAccessTime.dwHighDateTime=0x1d5e662, ftLastWriteTime.dwLowDateTime=0x75511810, ftLastWriteTime.dwHighDateTime=0x1d5e662, nFileSizeHigh=0x0, nFileSizeLow=0x7b5f)) returned 1
	[0186.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71fa6380, ftCreationTime.dwHighDateTime=0x1d5e5d4, ftLastAccessTime.dwLowDateTime=0x7cbb1c10, ftLastAccessTime.dwHighDateTime=0x1d5e71e, ftLastWriteTime.dwLowDateTime=0x7cbb1c10, ftLastWriteTime.dwHighDateTime=0x1d5e71e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71fa6380, ftCreationTime.dwHighDateTime=0x1d5e5d4, ftLastAccessTime.dwLowDateTime=0x7cbb1c10, ftLastAccessTime.dwHighDateTime=0x1d5e71e, ftLastWriteTime.dwLowDateTime=0x7cbb1c10, ftLastWriteTime.dwHighDateTime=0x1d5e71e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.818] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71fa6380, ftCreationTime.dwHighDateTime=0x1d5e5d4, ftLastAccessTime.dwLowDateTime=0x7cbb1c10, ftLastAccessTime.dwHighDateTime=0x1d5e71e, ftLastWriteTime.dwLowDateTime=0x7cbb1c10, ftLastWriteTime.dwHighDateTime=0x1d5e71e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.818] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ef626a0, ftCreationTime.dwHighDateTime=0x1d5d8e8, ftLastAccessTime.dwLowDateTime=0xce1baf90, ftLastAccessTime.dwHighDateTime=0x1d5d911, ftLastWriteTime.dwLowDateTime=0xce1baf90, ftLastWriteTime.dwHighDateTime=0x1d5d911, nFileSizeHigh=0x0, nFileSizeLow=0x88a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="-cNblX9khs6Gf1.mp4", cAlternateFileName="-CNBLX~1.MP4")) returned 1
	[0186.818] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8664d5f0, ftCreationTime.dwHighDateTime=0x1d5dd5d, ftLastAccessTime.dwLowDateTime=0xc21929b0, ftLastAccessTime.dwHighDateTime=0x1d5db60, ftLastWriteTime.dwLowDateTime=0xc21929b0, ftLastWriteTime.dwHighDateTime=0x1d5db60, nFileSizeHigh=0x0, nFileSizeLow=0x10228, dwReserved0=0x0, dwReserved1=0x0, cFileName="5fUE1I9wpU7cbjkFMI.flv", cAlternateFileName="5FUE1I~1.FLV")) returned 1
	[0186.818] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40b27850, ftCreationTime.dwHighDateTime=0x1d5df0b, ftLastAccessTime.dwLowDateTime=0xed25b770, ftLastAccessTime.dwHighDateTime=0x1d5e05d, ftLastWriteTime.dwLowDateTime=0xed25b770, ftLastWriteTime.dwHighDateTime=0x1d5e05d, nFileSizeHigh=0x0, nFileSizeLow=0xa738, dwReserved0=0x0, dwReserved1=0x0, cFileName="X2vjdwVFBKUbkwNn7V.mkv", cAlternateFileName="X2VJDW~1.MKV")) returned 1
	[0186.818] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f8f810, ftCreationTime.dwHighDateTime=0x1d5e71f, ftLastAccessTime.dwLowDateTime=0xcceb5cb0, ftLastAccessTime.dwHighDateTime=0x1d5d7ef, ftLastWriteTime.dwLowDateTime=0xcceb5cb0, ftLastWriteTime.dwHighDateTime=0x1d5d7ef, nFileSizeHigh=0x0, nFileSizeLow=0x9194, dwReserved0=0x0, dwReserved1=0x0, cFileName="X8JJ-VkxiBmN a8vFoL.flv", cAlternateFileName="X8JJ-V~1.FLV")) returned 1
	[0186.818] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.818] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.822] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0186.822] WriteFile (in: hFile=0x2dc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0186.823] CloseHandle (hObject=0x2dc) returned 1
	[0186.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\-cNblX9khs6Gf1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\-cnblx9khs6gf1.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ef626a0, ftCreationTime.dwHighDateTime=0x1d5d8e8, ftLastAccessTime.dwLowDateTime=0xce1baf90, ftLastAccessTime.dwHighDateTime=0x1d5d911, ftLastWriteTime.dwLowDateTime=0xce1baf90, ftLastWriteTime.dwHighDateTime=0x1d5d911, nFileSizeHigh=0x0, nFileSizeLow=0x88a9)) returned 1
	[0186.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\5fUE1I9wpU7cbjkFMI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\5fue1i9wpu7cbjkfmi.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8664d5f0, ftCreationTime.dwHighDateTime=0x1d5dd5d, ftLastAccessTime.dwLowDateTime=0xc21929b0, ftLastAccessTime.dwHighDateTime=0x1d5db60, ftLastWriteTime.dwLowDateTime=0xc21929b0, ftLastWriteTime.dwHighDateTime=0x1d5db60, nFileSizeHigh=0x0, nFileSizeLow=0x10228)) returned 1
	[0186.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\-cNblX9khs6Gf1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\-cnblx9khs6gf1.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.826] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\-cNblX9khs6Gf1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\-cnblx9khs6gf1.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ef626a0, ftCreationTime.dwHighDateTime=0x1d5d8e8, ftLastAccessTime.dwLowDateTime=0xce1baf90, ftLastAccessTime.dwHighDateTime=0x1d5d911, ftLastWriteTime.dwLowDateTime=0xce1baf90, ftLastWriteTime.dwHighDateTime=0x1d5d911, nFileSizeHigh=0x0, nFileSizeLow=0x88a9)) returned 1
	[0186.826] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c720 | out: pbBuffer=0x1244c720) returned 1
	[0186.826] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127444d0 | out: pbBuffer=0x127444d0) returned 1
	[0186.826] ReadFile (in: hFile=0x2dc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12727d1c*=0x88a9, lpOverlapped=0x0) returned 1
	[0186.843] GetFileType (hFile=0x2dc) returned 0x1
	[0186.843] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.843] WriteFile (in: hFile=0x2dc, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x88a9, lpNumberOfBytesWritten=0x12727d00, lpOverlapped=0x12727d0c | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x12727d00*=0x88a9, lpOverlapped=0x12727d0c) returned 1
	[0186.844] GetFileType (hFile=0x2dc) returned 0x1
	[0186.844] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x88a9, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.844] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed201 | out: pbBuffer=0x124ed201) returned 1
	[0186.844] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed301 | out: pbBuffer=0x124ed301) returned 1
	[0186.844] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed401 | out: pbBuffer=0x124ed401) returned 1
	[0186.844] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744588 | out: pbBuffer=0x12744588) returned 1
	[0186.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\-cNblX9khs6Gf1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\-cnblx9khs6gf1.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.844] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.844] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12727d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12727d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.845] CloseHandle (hObject=0x33c) returned 1
	[0186.845] CloseHandle (hObject=0x2dc) returned 1
	[0186.845] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\-cNblX9khs6Gf1.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\-cnblx9khs6gf1.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\-cNblX9khs6Gf1.mp4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\-cnblx9khs6gf1.mp4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\TKwfK84PKfIO6Gr8.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\tkwfk84pkfio6gr8.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.848] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12725d0c | out: lpMode=0x12725d0c) returned 0
	[0186.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\TKwfK84PKfIO6Gr8.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\tkwfk84pkfio6gr8.flv"), fInfoLevelId=0x0, lpFileInformation=0x12725ad0 | out: lpFileInformation=0x12725ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd38b20, ftCreationTime.dwHighDateTime=0x1d5d9ec, ftLastAccessTime.dwLowDateTime=0x75511810, ftLastAccessTime.dwHighDateTime=0x1d5e662, ftLastWriteTime.dwLowDateTime=0x75511810, ftLastWriteTime.dwHighDateTime=0x1d5e662, nFileSizeHigh=0x0, nFileSizeLow=0x7b5f)) returned 1
	[0186.848] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c940 | out: pbBuffer=0x1244c940) returned 1
	[0186.848] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127445a0 | out: pbBuffer=0x127445a0) returned 1
	[0186.848] ReadFile (in: hFile=0x2dc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12725d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12725d1c*=0x7b5f, lpOverlapped=0x0) returned 1
	[0186.869] GetFileType (hFile=0x2dc) returned 0x1
	[0186.869] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12725ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.869] WriteFile (in: hFile=0x2dc, lpBuffer=0x125f4000*, nNumberOfBytesToWrite=0x7b5f, lpNumberOfBytesWritten=0x12725d00, lpOverlapped=0x12725d0c | out: lpBuffer=0x125f4000*, lpNumberOfBytesWritten=0x12725d00*=0x7b5f, lpOverlapped=0x12725d0c) returned 1
	[0186.869] GetFileType (hFile=0x2dc) returned 0x1
	[0186.869] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x7b5f, lpNewFilePointer=0x0, dwMoveMethod=0x12725ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.869] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed701 | out: pbBuffer=0x124ed701) returned 1
	[0186.870] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0186.870] SetEvent (hEvent=0x2f4) returned 1
	[0186.870] SetEvent (hEvent=0x80) returned 1
	[0186.870] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed801 | out: pbBuffer=0x124ed801) returned 1
	[0186.870] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed901 | out: pbBuffer=0x124ed901) returned 1
	[0186.870] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744658 | out: pbBuffer=0x12744658) returned 1
	[0186.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\TKwfK84PKfIO6Gr8.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\tkwfk84pkfio6gr8.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.870] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12725d0c | out: lpMode=0x12725d0c) returned 0
	[0186.871] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12725d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12725d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.871] CloseHandle (hObject=0x1e4) returned 1
	[0186.871] CloseHandle (hObject=0x2dc) returned 1
	[0186.871] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\TKwfK84PKfIO6Gr8.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\tkwfk84pkfio6gr8.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\TKwfK84PKfIO6Gr8.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\tkwfk84pkfio6gr8.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.874] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0186.882] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0186.882] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0186.883] SetEvent (hEvent=0x80) returned 1
	[0186.883] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0186.886] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0186.886] GetFileType (hFile=0x344) returned 0x1
	[0186.886] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.886] WriteFile (in: hFile=0x344, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x9194, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x1242bd00*=0x9194, lpOverlapped=0x1242bd0c) returned 1
	[0186.887] GetFileType (hFile=0x344) returned 0x1
	[0186.887] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x9194, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.887] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434201 | out: pbBuffer=0x12434201) returned 1
	[0186.887] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0186.887] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0186.888] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0186.888] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X8JJ-VkxiBmN a8vFoL.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x8jj-vkxibmn a8vfol.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.888] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.888] WriteFile (in: hFile=0x2dc, lpBuffer=0x128e0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.888] CloseHandle (hObject=0x2dc) returned 1
	[0186.888] CloseHandle (hObject=0x344) returned 1
	[0186.888] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X8JJ-VkxiBmN a8vFoL.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x8jj-vkxibmn a8vfol.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X8JJ-VkxiBmN a8vFoL.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x8jj-vkxibmn a8vfol.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.890] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2232f150, ftCreationTime.dwHighDateTime=0x1d5e2f0, ftLastAccessTime.dwLowDateTime=0xec746da0, ftLastAccessTime.dwHighDateTime=0x1d5dd90, ftLastWriteTime.dwLowDateTime=0xec746da0, ftLastWriteTime.dwHighDateTime=0x1d5dd90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0186.890] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce22070, ftCreationTime.dwHighDateTime=0x1d5e135, ftLastAccessTime.dwLowDateTime=0xf3421c0, ftLastAccessTime.dwHighDateTime=0x1d5d86c, ftLastWriteTime.dwLowDateTime=0xf3421c0, ftLastWriteTime.dwHighDateTime=0x1d5d86c, nFileSizeHigh=0x0, nFileSizeLow=0x17eab, dwReserved0=0x0, dwReserved1=0x0, cFileName="0gnmonj_rKcLGfg6.avi", cAlternateFileName="0GNMON~1.AVI")) returned 1
	[0186.890] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8dee00, ftCreationTime.dwHighDateTime=0x1d5d7d7, ftLastAccessTime.dwLowDateTime=0xc232d130, ftLastAccessTime.dwHighDateTime=0x1d5e27c, ftLastWriteTime.dwLowDateTime=0xc232d130, ftLastWriteTime.dwHighDateTime=0x1d5e27c, nFileSizeHigh=0x0, nFileSizeLow=0x403a, dwReserved0=0x0, dwReserved1=0x0, cFileName="grTUvN 8YQ4SGNta.mkv", cAlternateFileName="GRTUVN~1.MKV")) returned 1
	[0186.890] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65272fd0, ftCreationTime.dwHighDateTime=0x1d5dca1, ftLastAccessTime.dwLowDateTime=0xb14b8860, ftLastAccessTime.dwHighDateTime=0x1d5e51c, ftLastWriteTime.dwLowDateTime=0xb14b8860, ftLastWriteTime.dwHighDateTime=0x1d5e51c, nFileSizeHigh=0x0, nFileSizeLow=0x146b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="IBxVz5 C.mkv", cAlternateFileName="IBXVZ5~1.MKV")) returned 1
	[0186.890] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe280ca50, ftCreationTime.dwHighDateTime=0x1d5de0d, ftLastAccessTime.dwLowDateTime=0x12445720, ftLastAccessTime.dwHighDateTime=0x1d5e421, ftLastWriteTime.dwLowDateTime=0x12445720, ftLastWriteTime.dwHighDateTime=0x1d5e421, nFileSizeHigh=0x0, nFileSizeLow=0x8205, dwReserved0=0x0, dwReserved1=0x0, cFileName="YfmoK.mkv", cAlternateFileName="")) returned 1
	[0186.890] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0186.890] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0186.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0186.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0186.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.894] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0186.894] WriteFile (in: hFile=0x34c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0186.895] CloseHandle (hObject=0x34c) returned 1
	[0186.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\0gnmonj_rKcLGfg6.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\0gnmonj_rkclgfg6.avi"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce22070, ftCreationTime.dwHighDateTime=0x1d5e135, ftLastAccessTime.dwLowDateTime=0xf3421c0, ftLastAccessTime.dwHighDateTime=0x1d5d86c, ftLastWriteTime.dwLowDateTime=0xf3421c0, ftLastWriteTime.dwHighDateTime=0x1d5d86c, nFileSizeHigh=0x0, nFileSizeLow=0x17eab)) returned 1
	[0186.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\IBxVz5 C.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\ibxvz5 c.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65272fd0, ftCreationTime.dwHighDateTime=0x1d5dca1, ftLastAccessTime.dwLowDateTime=0xb14b8860, ftLastAccessTime.dwHighDateTime=0x1d5e51c, ftLastWriteTime.dwLowDateTime=0xb14b8860, ftLastWriteTime.dwHighDateTime=0x1d5e51c, nFileSizeHigh=0x0, nFileSizeLow=0x146b2)) returned 1
	[0186.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\YfmoK.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\yfmok.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe280ca50, ftCreationTime.dwHighDateTime=0x1d5de0d, ftLastAccessTime.dwLowDateTime=0x12445720, ftLastAccessTime.dwHighDateTime=0x1d5e421, ftLastWriteTime.dwLowDateTime=0x12445720, ftLastWriteTime.dwHighDateTime=0x1d5e421, nFileSizeHigh=0x0, nFileSizeLow=0x8205)) returned 1
	[0186.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\grTUvN 8YQ4SGNta.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\grtuvn 8yq4sgnta.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8dee00, ftCreationTime.dwHighDateTime=0x1d5d7d7, ftLastAccessTime.dwLowDateTime=0xc232d130, ftLastAccessTime.dwHighDateTime=0x1d5e27c, ftLastWriteTime.dwLowDateTime=0xc232d130, ftLastWriteTime.dwHighDateTime=0x1d5e27c, nFileSizeHigh=0x0, nFileSizeLow=0x403a)) returned 1
	[0186.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\YfmoK.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\yfmok.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.899] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\YfmoK.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\yfmok.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe280ca50, ftCreationTime.dwHighDateTime=0x1d5de0d, ftLastAccessTime.dwLowDateTime=0x12445720, ftLastAccessTime.dwHighDateTime=0x1d5e421, ftLastWriteTime.dwLowDateTime=0x12445720, ftLastWriteTime.dwHighDateTime=0x1d5e421, nFileSizeHigh=0x0, nFileSizeLow=0x8205)) returned 1
	[0186.900] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4a0 | out: pbBuffer=0x1252e4a0) returned 1
	[0186.900] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e6c0 | out: pbBuffer=0x1251e6c0) returned 1
	[0186.900] ReadFile (in: hFile=0x34c, lpBuffer=0x128e4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128e4000*, lpNumberOfBytesRead=0x1242bd1c*=0x8205, lpOverlapped=0x0) returned 1
	[0186.911] GetFileType (hFile=0x34c) returned 0x1
	[0186.911] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.911] WriteFile (in: hFile=0x34c, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x8205, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x1242bd00*=0x8205, lpOverlapped=0x1242bd0c) returned 1
	[0186.912] GetFileType (hFile=0x34c) returned 0x1
	[0186.912] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x8205, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0186.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0186.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0186.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e778 | out: pbBuffer=0x1251e778) returned 1
	[0186.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\YfmoK.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\yfmok.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.912] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.912] WriteFile (in: hFile=0x2dc, lpBuffer=0x128e0a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.913] CloseHandle (hObject=0x2dc) returned 1
	[0186.913] CloseHandle (hObject=0x34c) returned 1
	[0186.913] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\YfmoK.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\yfmok.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\YfmoK.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\yfmok.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\IBxVz5 C.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\ibxvz5 c.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.915] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\IBxVz5 C.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\ibxvz5 c.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x65272fd0, ftCreationTime.dwHighDateTime=0x1d5dca1, ftLastAccessTime.dwLowDateTime=0xb14b8860, ftLastAccessTime.dwHighDateTime=0x1d5e51c, ftLastWriteTime.dwLowDateTime=0xb14b8860, ftLastWriteTime.dwHighDateTime=0x1d5e51c, nFileSizeHigh=0x0, nFileSizeLow=0x146b2)) returned 1
	[0186.915] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6c0 | out: pbBuffer=0x1252e6c0) returned 1
	[0186.915] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e7b0 | out: pbBuffer=0x1251e7b0) returned 1
	[0186.915] ReadFile (in: hFile=0x34c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12727d1c*=0x146b2, lpOverlapped=0x0) returned 1
	[0186.948] GetFileType (hFile=0x34c) returned 0x1
	[0186.948] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.948] WriteFile (in: hFile=0x34c, lpBuffer=0x12964000*, nNumberOfBytesToWrite=0x146b2, lpNumberOfBytesWritten=0x12727d00, lpOverlapped=0x12727d0c | out: lpBuffer=0x12964000*, lpNumberOfBytesWritten=0x12727d00*=0x146b2, lpOverlapped=0x12727d0c) returned 1
	[0186.949] GetFileType (hFile=0x34c) returned 0x1
	[0186.949] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x146b2, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.949] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0186.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0186.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0186.968] SetEvent (hEvent=0x318) returned 1
	[0186.968] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0186.976] SetEvent (hEvent=0x30c) returned 1
	[0186.977] SetEvent (hEvent=0x68) returned 1
	[0186.977] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0186.989] SetEvent (hEvent=0x80) returned 1
	[0186.989] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0187.012] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0187.013] SetEvent (hEvent=0x2f4) returned 1
	[0187.013] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0187.034] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0187.034] SwitchToThread () returned 1
	[0187.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\hlU6.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\hlu6.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0187.098] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0187.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\hlU6.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\hlu6.flv"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cab3bf0, ftCreationTime.dwHighDateTime=0x1d5dd1e, ftLastAccessTime.dwLowDateTime=0xb7b07160, ftLastAccessTime.dwHighDateTime=0x1d5df96, ftLastWriteTime.dwLowDateTime=0xb7b07160, ftLastWriteTime.dwHighDateTime=0x1d5df96, nFileSizeHigh=0x0, nFileSizeLow=0x10161)) returned 1
	[0187.098] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0187.098] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0187.098] ReadFile (in: hFile=0x34c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x1242bd1c*=0x10161, lpOverlapped=0x0) returned 1
	[0187.215] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0187.215] SetEvent (hEvent=0x30c) returned 1
	[0187.215] SetEvent (hEvent=0x318) returned 1
	[0187.216] GetFileType (hFile=0x34c) returned 0x1
	[0187.216] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.216] WriteFile (in: hFile=0x34c, lpBuffer=0x128cc000*, nNumberOfBytesToWrite=0x10161, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x128cc000*, lpNumberOfBytesWritten=0x1242bd00*=0x10161, lpOverlapped=0x1242bd0c) returned 1
	[0187.216] GetFileType (hFile=0x34c) returned 0x1
	[0187.216] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x10161, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.217] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0187.217] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0187.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0187.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0187.218] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\hlU6.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\hlu6.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0187.218] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0187.218] WriteFile (in: hFile=0x1e4, lpBuffer=0x12718000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12718000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.218] CloseHandle (hObject=0x1e4) returned 1
	[0187.218] CloseHandle (hObject=0x34c) returned 1
	[0187.218] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\hlU6.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\hlu6.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\hlU6.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\hlu6.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.221] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0187.231] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0187.231] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0187.231] SetEvent (hEvent=0x318) returned 1
	[0187.231] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x0
	[0187.235] GetFileType (hFile=0x2dc) returned 0x1
	[0187.235] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.235] WriteFile (in: hFile=0x2dc, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x12758, lpNumberOfBytesWritten=0x12727d00, lpOverlapped=0x12727d0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x12727d00*=0x12758, lpOverlapped=0x12727d0c) returned 1
	[0187.235] GetFileType (hFile=0x2dc) returned 0x1
	[0187.235] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x12758, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.235] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0187.235] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0187.236] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0187.236] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0187.236] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\oDQP.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\odqp.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0187.236] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0187.236] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12727d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12727d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.236] CloseHandle (hObject=0x33c) returned 1
	[0187.236] CloseHandle (hObject=0x2dc) returned 1
	[0187.236] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\oDQP.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\odqp.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\oDQP.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\odqp.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Msp3zZ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\msp3zz.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0187.240] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0187.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Msp3zZ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\msp3zz.avi"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fab05d0, ftCreationTime.dwHighDateTime=0x1d5e063, ftLastAccessTime.dwLowDateTime=0xa4aa37a0, ftLastAccessTime.dwHighDateTime=0x1d5e21f, ftLastWriteTime.dwLowDateTime=0xa4aa37a0, ftLastWriteTime.dwHighDateTime=0x1d5e21f, nFileSizeHigh=0x0, nFileSizeLow=0x17625)) returned 1
	[0187.240] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0187.240] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0e8 | out: pbBuffer=0x1251e0e8) returned 1
	[0187.240] ReadFile (in: hFile=0x2dc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x17625, lpOverlapped=0x0) returned 1
	[0187.253] GetFileType (hFile=0x2dc) returned 0x1
	[0187.253] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.253] WriteFile (in: hFile=0x2dc, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x17625, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12429d00*=0x17625, lpOverlapped=0x12429d0c) returned 1
	[0187.254] GetFileType (hFile=0x2dc) returned 0x1
	[0187.254] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x17625, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0187.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0187.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0187.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e720 | out: pbBuffer=0x1251e720) returned 1
	[0187.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Msp3zZ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\msp3zz.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0187.255] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0187.255] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.255] CloseHandle (hObject=0x344) returned 1
	[0187.255] CloseHandle (hObject=0x2dc) returned 1
	[0187.255] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Msp3zZ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\msp3zz.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Msp3zZ.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\msp3zz.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\_qxfVz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\_qxfvz.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0187.259] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0187.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\_qxfVz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\_qxfvz.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9488b190, ftCreationTime.dwHighDateTime=0x1d5e548, ftLastAccessTime.dwLowDateTime=0x520038c0, ftLastAccessTime.dwHighDateTime=0x1d5e6ab, ftLastWriteTime.dwLowDateTime=0x520038c0, ftLastWriteTime.dwHighDateTime=0x1d5e6ab, nFileSizeHigh=0x0, nFileSizeLow=0x1d95)) returned 1
	[0187.259] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e680 | out: pbBuffer=0x1252e680) returned 1
	[0187.259] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e738 | out: pbBuffer=0x1251e738) returned 1
	[0187.259] ReadFile (in: hFile=0x2dc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0x1d95, lpOverlapped=0x0) returned 1
	[0187.273] GetFileType (hFile=0x2dc) returned 0x1
	[0187.273] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.274] WriteFile (in: hFile=0x2dc, lpBuffer=0x12614000*, nNumberOfBytesToWrite=0x1d95, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12614000*, lpNumberOfBytesWritten=0x12429d00*=0x1d95, lpOverlapped=0x12429d0c) returned 1
	[0187.274] GetFileType (hFile=0x2dc) returned 0x1
	[0187.274] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1d95, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.275] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0187.275] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401301 | out: pbBuffer=0x12401301) returned 1
	[0187.275] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401401 | out: pbBuffer=0x12401401) returned 1
	[0187.275] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e840 | out: pbBuffer=0x1251e840) returned 1
	[0187.275] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\_qxfVz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\_qxfvz.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0187.275] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0187.275] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.276] CloseHandle (hObject=0x34c) returned 1
	[0187.276] CloseHandle (hObject=0x2dc) returned 1
	[0187.276] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\_qxfVz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\_qxfvz.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\_qxfVz.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\_qxfvz.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.312] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.314] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0187.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1
	[0187.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.319] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0187.321] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0187.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1
	[0187.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8a0 | out: pbBuffer=0x1252e8a0) returned 1
	[0187.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e878 | out: pbBuffer=0x1251e878) returned 1
	[0187.321] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0187.321] SetEvent (hEvent=0x80) returned 1
	[0187.322] ReadFile (in: hFile=0x2dc, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x12429d1c*=0x14, lpOverlapped=0x0) returned 1
	[0187.323] GetFileType (hFile=0x2dc) returned 0x1
	[0187.324] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.324] WriteFile (in: hFile=0x2dc, lpBuffer=0x1252e8c0*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1252e8c0*, lpNumberOfBytesWritten=0x12429d00*=0x14, lpOverlapped=0x12429d0c) returned 1
	[0187.324] GetFileType (hFile=0x2dc) returned 0x1
	[0187.324] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x14, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401601 | out: pbBuffer=0x12401601) returned 1
	[0187.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401701 | out: pbBuffer=0x12401701) returned 1
	[0187.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401801 | out: pbBuffer=0x12401801) returned 1
	[0187.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e980 | out: pbBuffer=0x1251e980) returned 1
	[0187.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0187.325] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0187.325] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.325] CloseHandle (hObject=0x1e4) returned 1
	[0187.325] CloseHandle (hObject=0x2dc) returned 1
	[0187.325] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.338] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0187.468] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0187.665] SetEvent (hEvent=0x2f4) returned 1
	[0187.665] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data" (normalized: "c:\\users\\default\\appdata\\local\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.666] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x12769a44 | out: lpFindFileData=0x12769a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.666] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\History" (normalized: "c:\\users\\default\\appdata\\local\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.666] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x1276da44 | out: lpFindFileData=0x1276da44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0187.666] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0187.900] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0188.119] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0x2ca, buf=0x1260a000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0x2ca, lpOverlapped=0x124e2088) returned 0
	[0188.119] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0188.314] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0188.315] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0188.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0188.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732740 | out: pbBuffer=0x12732740) returned 1
	[0188.316] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127883b0 | out: pbBuffer=0x127883b0) returned 1
	[0188.316] ReadFile (in: hFile=0x2dc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12429d1c*=0x7000, lpOverlapped=0x0) returned 1
	[0188.379] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0188.478] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0188.479] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0188.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0188.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0188.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0188.481] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x1242bd1c*=0x43, lpOverlapped=0x0) returned 1
	[0188.482] GetFileType (hFile=0x33c) returned 0x1
	[0188.482] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.482] WriteFile (in: hFile=0x33c, lpBuffer=0x128e00a0*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x128e00a0*, lpNumberOfBytesWritten=0x1242bd00*=0x43, lpOverlapped=0x1242bd0c) returned 1
	[0188.483] GetFileType (hFile=0x33c) returned 0x1
	[0188.483] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.483] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0188.483] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0188.483] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0188.483] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0188.483] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0188.483] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0188.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x12770000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12770000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0188.484] CloseHandle (hObject=0x1e4) returned 1
	[0188.484] CloseHandle (hObject=0x33c) returned 1
	[0188.484] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0188.631] SwitchToThread () returned 1
	[0188.690] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0188.691] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12723d0c | out: lpMode=0x12723d0c) returned 0
	[0188.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12723ad0 | out: lpFileInformation=0x12723ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0188.691] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0188.692] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441a0 | out: pbBuffer=0x127441a0) returned 1
	[0188.692] ReadFile (in: hFile=0x34c, lpBuffer=0x12888000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12723d1c, lpOverlapped=0x0 | out: lpBuffer=0x12888000*, lpNumberOfBytesRead=0x12723d1c*=0x43, lpOverlapped=0x0) returned 1
	[0188.694] GetFileType (hFile=0x34c) returned 0x1
	[0188.694] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12723ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.694] WriteFile (in: hFile=0x34c, lpBuffer=0x1271a5f0*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x12723d00, lpOverlapped=0x12723d0c | out: lpBuffer=0x1271a5f0*, lpNumberOfBytesWritten=0x12723d00*=0x43, lpOverlapped=0x12723d0c) returned 1
	[0188.694] GetFileType (hFile=0x34c) returned 0x1
	[0188.694] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x12723ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8501 | out: pbBuffer=0x127e8501) returned 1
	[0188.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0188.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0188.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744258 | out: pbBuffer=0x12744258) returned 1
	[0188.695] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0188.695] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12723d0c | out: lpMode=0x12723d0c) returned 0
	[0188.695] WriteFile (in: hFile=0x2dc, lpBuffer=0x12838500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12723d0c, lpOverlapped=0x0 | out: lpBuffer=0x12838500*, lpNumberOfBytesWritten=0x12723d0c*=0x276, lpOverlapped=0x0) returned 1
	[0188.695] CloseHandle (hObject=0x2dc) returned 1
	[0188.695] CloseHandle (hObject=0x34c) returned 1
	[0188.695] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0188.882] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0189.468] SetEvent (hEvent=0x318) returned 1
	[0189.468] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0189.562] SetEvent (hEvent=0x320) returned 1
	[0189.562] SetEvent (hEvent=0x80) returned 1
	[0189.562] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0189.662] SetEvent (hEvent=0x318) returned 1
	[0189.662] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0189.788] SetEvent (hEvent=0x68) returned 1
	[0189.788] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0189.790] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0189.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9)) returned 1
	[0189.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0189.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0189.790] ReadFile (in: hFile=0x34c, lpBuffer=0x127ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127ba000*, lpNumberOfBytesRead=0x1242bd1c*=0x2fa9, lpOverlapped=0x0) returned 1
	[0189.847] GetFileType (hFile=0x34c) returned 0x1
	[0189.847] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0189.848] WriteFile (in: hFile=0x34c, lpBuffer=0x12600000*, nNumberOfBytesToWrite=0x2fa9, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12600000*, lpNumberOfBytesWritten=0x1242bd00*=0x2fa9, lpOverlapped=0x1242bd0c) returned 1
	[0189.848] GetFileType (hFile=0x34c) returned 0x1
	[0189.848] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x2fa9, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0189.848] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0189.848] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0189.849] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0189.849] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0189.849] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0189.849] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0189.849] WriteFile (in: hFile=0x1e4, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0189.850] CloseHandle (hObject=0x1e4) returned 1
	[0189.929] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0190.248] CloseHandle (hObject=0x34c) returned 1
	[0190.248] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.254] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0190.311] SetEvent (hEvent=0x318) returned 1
	[0190.311] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.313] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0190.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1271fad0 | out: lpFileInformation=0x1271fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1
	[0190.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e8e0 | out: pbBuffer=0x1240e8e0) returned 1
	[0190.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410530 | out: pbBuffer=0x12410530) returned 1
	[0190.314] ReadFile (in: hFile=0x34c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1271fd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1271fd1c*=0x4ff, lpOverlapped=0x0) returned 1
	[0190.319] GetFileType (hFile=0x34c) returned 0x1
	[0190.319] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.319] WriteFile (in: hFile=0x34c, lpBuffer=0x1283e500*, nNumberOfBytesToWrite=0x4ff, lpNumberOfBytesWritten=0x1271fd00, lpOverlapped=0x1271fd0c | out: lpBuffer=0x1283e500*, lpNumberOfBytesWritten=0x1271fd00*=0x4ff, lpOverlapped=0x1271fd0c) returned 1
	[0190.319] GetFileType (hFile=0x34c) returned 0x1
	[0190.319] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x4ff, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0190.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0190.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0190.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105e8 | out: pbBuffer=0x124105e8) returned 1
	[0190.321] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.321] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0190.321] WriteFile (in: hFile=0x2dc, lpBuffer=0x1283ea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1271fd0c, lpOverlapped=0x0 | out: lpBuffer=0x1283ea00*, lpNumberOfBytesWritten=0x1271fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.321] CloseHandle (hObject=0x2dc) returned 1
	[0190.323] CloseHandle (hObject=0x34c) returned 1
	[0190.324] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.357] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0190.364] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.365] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1
	[0190.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240edc0 | out: pbBuffer=0x1240edc0) returned 1
	[0190.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410620 | out: pbBuffer=0x12410620) returned 1
	[0190.365] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0190.365] SetEvent (hEvent=0x30c) returned 1
	[0190.365] ReadFile (in: hFile=0x34c, lpBuffer=0x12886000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12886000*, lpNumberOfBytesRead=0x12767d1c*=0x31d, lpOverlapped=0x0) returned 1
	[0190.370] GetFileType (hFile=0x34c) returned 0x1
	[0190.370] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.370] WriteFile (in: hFile=0x34c, lpBuffer=0x12464380*, nNumberOfBytesToWrite=0x31d, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12464380*, lpNumberOfBytesWritten=0x12767d00*=0x31d, lpOverlapped=0x12767d0c) returned 1
	[0190.370] GetFileType (hFile=0x34c) returned 0x1
	[0190.370] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x31d, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.370] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb01 | out: pbBuffer=0x124ecb01) returned 1
	[0190.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc01 | out: pbBuffer=0x124ecc01) returned 1
	[0190.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd01 | out: pbBuffer=0x124ecd01) returned 1
	[0190.371] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410728 | out: pbBuffer=0x12410728) returned 1
	[0190.371] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.371] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.371] WriteFile (in: hFile=0x33c, lpBuffer=0x1283ef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1283ef00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.371] CloseHandle (hObject=0x33c) returned 1
	[0190.374] CloseHandle (hObject=0x34c) returned 1
	[0190.375] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.447] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0190.449] SetEvent (hEvent=0x70) returned 1
	[0190.449] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.450] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0190.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1
	[0190.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e800 | out: pbBuffer=0x1240e800) returned 1
	[0190.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410400 | out: pbBuffer=0x12410400) returned 1
	[0190.451] ReadFile (in: hFile=0x34c, lpBuffer=0x128e4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128e4000*, lpNumberOfBytesRead=0x1242bd1c*=0x3fc, lpOverlapped=0x0) returned 1
	[0190.455] GetFileType (hFile=0x34c) returned 0x1
	[0190.455] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.455] WriteFile (in: hFile=0x34c, lpBuffer=0x12498400*, nNumberOfBytesToWrite=0x3fc, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12498400*, lpNumberOfBytesWritten=0x1242bd00*=0x3fc, lpOverlapped=0x1242bd0c) returned 1
	[0190.455] GetFileType (hFile=0x34c) returned 0x1
	[0190.455] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x3fc, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0190.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec901 | out: pbBuffer=0x124ec901) returned 1
	[0190.456] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca01 | out: pbBuffer=0x124eca01) returned 1
	[0190.456] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0190.456] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.456] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0190.456] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.456] CloseHandle (hObject=0x33c) returned 1
	[0190.457] CloseHandle (hObject=0x34c) returned 1
	[0190.458] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.484] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0190.494] SetEvent (hEvent=0x70) returned 1
	[0190.494] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.495] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1
	[0190.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0190.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0190.495] ReadFile (in: hFile=0x34c, lpBuffer=0x127b6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127b6000*, lpNumberOfBytesRead=0x1276dd1c*=0x249, lpOverlapped=0x0) returned 1
	[0190.500] GetFileType (hFile=0x34c) returned 0x1
	[0190.500] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.500] WriteFile (in: hFile=0x34c, lpBuffer=0x124f6780*, nNumberOfBytesToWrite=0x249, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x124f6780*, lpNumberOfBytesWritten=0x1276dd00*=0x249, lpOverlapped=0x1276dd0c) returned 1
	[0190.500] GetFileType (hFile=0x34c) returned 0x1
	[0190.500] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x249, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.500] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0190.501] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8801 | out: pbBuffer=0x127e8801) returned 1
	[0190.501] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0190.501] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744210 | out: pbBuffer=0x12744210) returned 1
	[0190.501] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.501] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.501] WriteFile (in: hFile=0x33c, lpBuffer=0x1283e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1283e500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.501] CloseHandle (hObject=0x33c) returned 1
	[0190.503] CloseHandle (hObject=0x34c) returned 1
	[0190.504] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.665] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0190.967] SetEvent (hEvent=0x320) returned 1
	[0190.967] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music" (normalized: "c:\\users\\default\\documents\\my music"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.967] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x125e9a44 | out: lpFindFileData=0x125e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0190.968] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\desktop.ini" (normalized: "c:\\users\\default\\downloads\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.968] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0190.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Downloads\\desktop.ini" (normalized: "c:\\users\\default\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e9ad0 | out: lpFileInformation=0x125e9ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0190.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c4a0 | out: pbBuffer=0x1244c4a0) returned 1
	[0190.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0190.968] ReadFile (in: hFile=0x33c, lpBuffer=0x128a4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x128a4000*, lpNumberOfBytesRead=0x125e9d1c*=0x11a, lpOverlapped=0x0) returned 1
	[0190.970] GetFileType (hFile=0x33c) returned 0x1
	[0190.970] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.970] WriteFile (in: hFile=0x33c, lpBuffer=0x12514ea0*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x125e9d00, lpOverlapped=0x125e9d0c | out: lpBuffer=0x12514ea0*, lpNumberOfBytesWritten=0x125e9d00*=0x11a, lpOverlapped=0x125e9d0c) returned 1
	[0190.970] GetFileType (hFile=0x33c) returned 0x1
	[0190.970] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0190.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0190.971] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0190.971] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0190.971] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\desktop.ini" (normalized: "c:\\users\\default\\downloads\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.971] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0190.971] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x125e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.971] CloseHandle (hObject=0x34c) returned 1
	[0190.971] CloseHandle (hObject=0x33c) returned 1
	[0190.971] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Downloads\\desktop.ini" (normalized: "c:\\users\\default\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Downloads\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\downloads\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.977] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0190.995] SetEvent (hEvent=0x320) returned 1
	[0190.995] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.996] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0190.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0190.996] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6c0 | out: pbBuffer=0x1244c6c0) returned 1
	[0190.996] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0190.997] ReadFile (in: hFile=0x344, lpBuffer=0x12904000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12904000*, lpNumberOfBytesRead=0x12429d1c*=0xe2, lpOverlapped=0x0) returned 1
	[0190.998] GetFileType (hFile=0x344) returned 0x1
	[0190.998] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.998] WriteFile (in: hFile=0x344, lpBuffer=0x127ae000*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127ae000*, lpNumberOfBytesWritten=0x12429d00*=0xe2, lpOverlapped=0x12429d0c) returned 1
	[0190.998] GetFileType (hFile=0x344) returned 0x1
	[0190.998] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.998] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0190.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0190.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0190.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788470 | out: pbBuffer=0x12788470) returned 1
	[0190.999] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0190.999] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0190.999] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.000] CloseHandle (hObject=0x1e4) returned 1
	[0191.000] CloseHandle (hObject=0x344) returned 1
	[0191.000] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.268] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0191.319] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0191.327] SetEvent (hEvent=0x320) returned 1
	[0191.327] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0191.328] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0191.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e9ad0 | out: lpFileInformation=0x125e9ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0191.328] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732760 | out: pbBuffer=0x12732760) returned 1
	[0191.328] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744340 | out: pbBuffer=0x12744340) returned 1
	[0191.328] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0191.364] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0191.364] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0191.364] SetEvent (hEvent=0xa0) returned 1
	[0191.364] SetEvent (hEvent=0x320) returned 1
	[0191.364] ReadFile (in: hFile=0x344, lpBuffer=0x128e4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e4000*, lpNumberOfBytesRead=0x125e9d1c*=0x192, lpOverlapped=0x0) returned 1
	[0191.366] GetFileType (hFile=0x344) returned 0x1
	[0191.367] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.367] WriteFile (in: hFile=0x344, lpBuffer=0x12778820*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x125e9d00, lpOverlapped=0x125e9d0c | out: lpBuffer=0x12778820*, lpNumberOfBytesWritten=0x125e9d00*=0x192, lpOverlapped=0x125e9d0c) returned 1
	[0191.367] GetFileType (hFile=0x344) returned 0x1
	[0191.367] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0191.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0191.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0191.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127443f8 | out: pbBuffer=0x127443f8) returned 1
	[0191.367] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0191.368] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0191.368] WriteFile (in: hFile=0x2dc, lpBuffer=0x12619900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12619900*, lpNumberOfBytesWritten=0x125e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.368] CloseHandle (hObject=0x2dc) returned 1
	[0191.368] CloseHandle (hObject=0x344) returned 1
	[0191.368] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Favorites\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.370] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0191.519] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0191.519] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0191.606] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0191.607] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0191.723] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0191.723] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0191.723] SetEvent (hEvent=0xa0) returned 1
	[0191.723] SetEvent (hEvent=0x70) returned 1
	[0191.723] SetEvent (hEvent=0x318) returned 1
	[0191.723] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0191.815] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0191.816] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0191.816] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0191.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1
	[0191.816] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0191.816] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0191.817] ReadFile (in: hFile=0x2dc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1276dd1c*=0x37e, lpOverlapped=0x0) returned 1
	[0191.899] SetEvent (hEvent=0x68) returned 1
	[0191.899] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0191.966] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0191.966] SetEvent (hEvent=0x68) returned 1
	[0191.966] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0192.004] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0192.004] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0192.042] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0192.043] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0192.043] SetEvent (hEvent=0x80) returned 1
	[0192.043] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0192.215] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0192.215] GetFileType (hFile=0x2dc) returned 0x1
	[0192.215] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.215] WriteFile (in: hFile=0x2dc, lpBuffer=0x12474000*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x12474000*, lpNumberOfBytesWritten=0x125e5d00*=0x37e, lpOverlapped=0x125e5d0c) returned 1
	[0192.215] GetFileType (hFile=0x2dc) returned 0x1
	[0192.216] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x37e, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0192.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0192.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0192.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0192.216] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0192.216] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0192.217] WriteFile (in: hFile=0x34c, lpBuffer=0x1273a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1273a000*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0192.217] CloseHandle (hObject=0x34c) returned 1
	[0192.222] CloseHandle (hObject=0x2dc) returned 1
	[0192.223] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Downloads.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\links\\downloads.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.228] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0192.229] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0192.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8deeffb, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8deeffb, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8ead6dc, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0192.229] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0192.229] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0192.229] ReadFile (in: hFile=0x2dc, lpBuffer=0x1283a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1283a000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0192.350] GetFileType (hFile=0x2dc) returned 0x1
	[0192.350] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.350] WriteFile (in: hFile=0x2dc, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0192.350] GetFileType (hFile=0x2dc) returned 0x1
	[0192.351] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.351] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0192.394] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0192.394] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744200 | out: pbBuffer=0x12744200) returned 1
	[0192.394] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0192.394] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0192.394] WriteFile (in: hFile=0x344, lpBuffer=0x12604400*, nNumberOfBytesToWrite=0x1ca, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12604400*, lpNumberOfBytesWritten=0x12429d0c*=0x1ca, lpOverlapped=0x0) returned 1
	[0192.395] CloseHandle (hObject=0x344) returned 1
	[0192.395] CloseHandle (hObject=0x2dc) returned 1
	[0192.396] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.398] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0192.506] SetEvent (hEvent=0x68) returned 1
	[0192.506] CreateFileW (lpFileName="C:\\Users\\Default\\Templates" (normalized: "c:\\users\\default\\templates"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.506] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x12769a44 | out: lpFindFileData=0x12769a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0192.506] CreateFileW (lpFileName="C:\\Users\\Default User" (normalized: "c:\\users\\default user"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.506] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x12769a44 | out: lpFindFileData=0x12769a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0192.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public" (normalized: "c:\\users\\public"), fInfoLevelId=0x0, lpFileInformation=0x1276bc20 | out: lpFileInformation=0x1276bc20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0192.506] CreateFileW (lpFileName="C:\\Users\\Public" (normalized: "c:\\users\\public"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.507] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x1276baf8 | out: lpFindFileData=0x1276baf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaa597fc2, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recorded TV", cAlternateFileName="RECORD~1")) returned 1
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0192.507] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bb3c | out: lpFindFileData=0x1276bb3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0192.507] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0192.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b7c0 | out: lpFileInformation=0x1276b7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0192.508] CreateFileW (lpFileName="C:\\Users\\Public\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0192.508] CreateFileW (lpFileName="C:\\Users\\Public\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0192.511] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b9d0 | out: lpMode=0x1276b9d0) returned 0
	[0192.511] WriteFile (in: hFile=0x2dc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b9d0, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b9d0*=0x1180, lpOverlapped=0x0) returned 1
	[0192.513] CloseHandle (hObject=0x2dc) returned 1
	[0192.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop" (normalized: "c:\\users\\public\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0192.529] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop" (normalized: "c:\\users\\public\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.529] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0192.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Reader X.lnk", cAlternateFileName="ADOBER~1.LNK")) returned 1
	[0192.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0192.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0192.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1
	[0192.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0192.529] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0192.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\desktop\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0192.529] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\desktop\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0192.529] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\desktop\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0192.534] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0192.534] WriteFile (in: hFile=0x2dc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0192.535] CloseHandle (hObject=0x2dc) returned 1
	[0192.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9)) returned 1
	[0192.592] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1)) returned 1
	[0192.594] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0192.595] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0192.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83c279c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x83c279c0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x83c4db20, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x7e9)) returned 1
	[0192.595] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732580 | out: pbBuffer=0x12732580) returned 1
	[0192.595] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0192.595] ReadFile (in: hFile=0x344, lpBuffer=0x1287a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1287a000*, lpNumberOfBytesRead=0x12769d1c*=0x7e9, lpOverlapped=0x0) returned 1
	[0192.636] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0192.716] GetFileType (hFile=0x344) returned 0x1
	[0192.716] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.716] WriteFile (in: hFile=0x344, lpBuffer=0x125dc000*, nNumberOfBytesToWrite=0x7e9, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x125dc000*, lpNumberOfBytesWritten=0x12769d00*=0x7e9, lpOverlapped=0x12769d0c) returned 1
	[0192.716] GetFileType (hFile=0x344) returned 0x1
	[0192.716] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x7e9, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.717] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0192.717] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8f81 | out: pbBuffer=0x127e8f81) returned 1
	[0192.717] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9081 | out: pbBuffer=0x127e9081) returned 1
	[0192.717] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788620 | out: pbBuffer=0x12788620) returned 1
	[0192.717] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0192.717] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0192.717] WriteFile (in: hFile=0x34c, lpBuffer=0x124f0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x124f0000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0192.717] CloseHandle (hObject=0x34c) returned 1
	[0192.719] CloseHandle (hObject=0x344) returned 1
	[0192.720] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Adobe Reader X.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\desktop\\adobe reader x.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.817] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0192.941] SetEvent (hEvent=0x320) returned 1
	[0192.941] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0192.942] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0192.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0192.942] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0192.942] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0192.942] ReadFile (in: hFile=0x34c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12429d1c*=0xae, lpOverlapped=0x0) returned 1
	[0192.943] GetFileType (hFile=0x34c) returned 0x1
	[0192.943] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.943] WriteFile (in: hFile=0x34c, lpBuffer=0x125282c0*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125282c0*, lpNumberOfBytesWritten=0x12429d00*=0xae, lpOverlapped=0x12429d0c) returned 1
	[0192.943] GetFileType (hFile=0x34c) returned 0x1
	[0192.944] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0192.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0192.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0192.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0192.944] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0192.944] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0192.944] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0192.945] CloseHandle (hObject=0x2dc) returned 1
	[0192.946] CloseHandle (hObject=0x34c) returned 1
	[0192.947] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Desktop\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\desktop\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.954] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0193.215] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0194.621] SetEvent (hEvent=0x80) returned 1
	[0194.621] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0194.671] SetEvent (hEvent=0x70) returned 1
	[0194.671] SetEvent (hEvent=0x68) returned 1
	[0194.671] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0194.711] SetEvent (hEvent=0x80) returned 1
	[0194.711] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0194.732] SetEvent (hEvent=0x80) returned 1
	[0194.732] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0194.732] SetEvent (hEvent=0x80) returned 1
	[0194.732] SetEvent (hEvent=0x320) returned 1
	[0194.734] GetFileType (hFile=0x2dc) returned 0x1
	[0194.734] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.734] WriteFile (in: hFile=0x2dc, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x125e5d00*=0x20000, lpOverlapped=0x125e5d0c) returned 1
	[0194.734] GetFileType (hFile=0x2dc) returned 0x1
	[0194.735] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.735] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0194.735] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0194.735] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0194.735] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0194.735] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0194.735] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0194.735] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0194.796] CloseHandle (hObject=0x33c) returned 1
	[0194.796] CloseHandle (hObject=0x2dc) returned 1
	[0194.796] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0194.802] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0194.802] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0194.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22)) returned 1
	[0194.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3c0 | out: pbBuffer=0x1240e3c0) returned 1
	[0194.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744070 | out: pbBuffer=0x12744070) returned 1
	[0194.802] ReadFile (in: hFile=0x2dc, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x12767d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0194.852] GetFileType (hFile=0x2dc) returned 0x1
	[0194.852] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.852] WriteFile (in: hFile=0x2dc, lpBuffer=0x12944000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12944000*, lpNumberOfBytesWritten=0x12767d00*=0x20000, lpOverlapped=0x12767d0c) returned 1
	[0194.852] GetFileType (hFile=0x2dc) returned 0x1
	[0194.852] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.852] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0194.852] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0194.853] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8f81 | out: pbBuffer=0x127e8f81) returned 1
	[0194.853] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444c0 | out: pbBuffer=0x127444c0) returned 1
	[0194.853] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0194.853] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0194.853] WriteFile (in: hFile=0x2cc, lpBuffer=0x127e2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0195.202] CloseHandle (hObject=0x2cc) returned 1
	[0195.202] CloseHandle (hObject=0x2dc) returned 1
	[0195.202] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0195.247] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0195.247] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0195.247] SetEvent (hEvent=0xa0) returned 1
	[0195.247] SetEvent (hEvent=0x68) returned 1
	[0195.247] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0195.250] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0195.317] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0195.318] SetEvent (hEvent=0x68) returned 1
	[0195.318] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0195.328] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0195.328] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb30, ulCount=0x10, ulNumEntriesRemoved=0x339cfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb30, ulNumEntriesRemoved=0x339cfb14) returned 0
	[0195.328] SetEvent (hEvent=0x318) returned 1
	[0195.328] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0195.350] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0195.350] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0195.351] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0195.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c)) returned 1
	[0195.351] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0195.351] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0195.351] ReadFile (in: hFile=0x34c, lpBuffer=0x12990000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12990000*, lpNumberOfBytesRead=0x12767d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0196.267] GetFileType (hFile=0x34c) returned 0x1
	[0196.267] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.268] WriteFile (in: hFile=0x34c, lpBuffer=0x12904000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12904000*, lpNumberOfBytesWritten=0x12767d00*=0x20000, lpOverlapped=0x12767d0c) returned 1
	[0196.268] GetFileType (hFile=0x34c) returned 0x1
	[0196.268] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0196.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0196.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0196.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440e0 | out: pbBuffer=0x127440e0) returned 1
	[0196.269] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0196.269] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0196.269] WriteFile (in: hFile=0x33c, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0196.365] CloseHandle (hObject=0x33c) returned 1
	[0196.365] CloseHandle (hObject=0x34c) returned 1
	[0196.366] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0196.368] SetEvent (hEvent=0x80) returned 1
	[0196.368] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0196.369] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0196.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a)) returned 1
	[0196.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0196.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744228 | out: pbBuffer=0x12744228) returned 1
	[0196.369] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0x1) returned 0x102
	[0196.406] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0196.406] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x339cfb28, ulCount=0x10, ulNumEntriesRemoved=0x339cfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x339cfb28, ulNumEntriesRemoved=0x339cfb0c) returned 0
	[0196.406] SetEvent (hEvent=0xa0) returned 1
	[0196.406] SetEvent (hEvent=0x80) returned 1
	[0196.406] ReadFile (in: hFile=0x34c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x12767d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0196.463] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0196.638] SetEvent (hEvent=0x318) returned 1
	[0196.638] GetFileType (hFile=0x34c) returned 0x1
	[0196.639] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.639] WriteFile (in: hFile=0x34c, lpBuffer=0x126b4000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x126b4000*, lpNumberOfBytesWritten=0x12767d00*=0x20000, lpOverlapped=0x12767d0c) returned 1
	[0196.639] GetFileType (hFile=0x34c) returned 0x1
	[0196.639] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec101 | out: pbBuffer=0x124ec101) returned 1
	[0196.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0196.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec301 | out: pbBuffer=0x124ec301) returned 1
	[0196.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0196.640] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0196.640] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0196.640] WriteFile (in: hFile=0x354, lpBuffer=0x12614000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12614000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0196.677] CloseHandle (hObject=0x354) returned 1
	[0196.677] CloseHandle (hObject=0x34c) returned 1
	[0196.677] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), lpNewFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0196.716] CreateFileW (lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0196.716] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0196.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0196.717] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e200 | out: pbBuffer=0x1252e200) returned 1
	[0196.717] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0196.717] ReadFile (in: hFile=0x34c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x12767d1c*=0xae, lpOverlapped=0x0) returned 1
	[0196.718] GetFileType (hFile=0x34c) returned 0x1
	[0196.718] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.719] WriteFile (in: hFile=0x34c, lpBuffer=0x124604d0*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x124604d0*, lpNumberOfBytesWritten=0x12767d00*=0xae, lpOverlapped=0x12767d0c) returned 1
	[0196.719] GetFileType (hFile=0x34c) returned 0x1
	[0196.719] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0196.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0196.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0196.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0196.719] CreateFileW (lpFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0196.719] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0196.719] WriteFile (in: hFile=0x354, lpBuffer=0x12614500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12614500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0196.720] CloseHandle (hObject=0x354) returned 1
	[0196.720] CloseHandle (hObject=0x34c) returned 1
	[0196.720] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\desktop.ini" (normalized: "c:\\users\\public\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0196.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bc20 | out: lpFileInformation=0x1276bc20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0196.723] GetFileAttributesExW (in: lpFileName="C:\\Windows" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x1276bc84 | out: lpFileInformation=0x1276bc84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0196.724] CreateFileW (lpFileName="C:\\Windows" (normalized: "c:\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0196.724] FindFirstFileW (in: lpFileName="C:\\Windows\\*", lpFindFileData=0x1276bb5c | out: lpFindFileData=0x1276bb5c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0196.724] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0196.724] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="addins", cAlternateFileName="")) returned 1
	[0196.724] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdb0c77c, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfdb0c77c, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCompat", cAlternateFileName="APPCOM~1")) returned 1
	[0196.724] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb328d6, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x57087b83, ftLastAccessTime.dwHighDateTime=0x1cb892c, ftLastWriteTime.dwLowDateTime=0x57087b83, ftLastWriteTime.dwHighDateTime=0x1cb892c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPatch", cAlternateFileName="")) returned 1
	[0196.724] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfdb58a30, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe968e7e0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xe968e7e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assembly", cAlternateFileName="")) returned 1
	[0196.724] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97675415, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x97675415, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x977f21d7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x11600, dwReserved0=0x0, dwReserved1=0x0, cFileName="bfsvc.exe", cAlternateFileName="")) returned 1
	[0196.724] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfde52538, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0196.724] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x5562e640, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x5562e640, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0xafd68640, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x10800, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstat.dat", cAlternateFileName="")) returned 1
	[0196.724] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80105472, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80105472, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Branding", cAlternateFileName="")) returned 1
	[0196.724] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x98abb4cc, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x61766720, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x61766720, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSC", cAlternateFileName="")) returned 1
	[0196.724] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe36132c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cursors", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf8a36d94, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0x181cd0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x181cd0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="debug", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x800b91b1, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x800b91b1, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="diagnostics", cAlternateFileName="DIAGNO~1")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3763cf0c, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0xa9eeab22, ftLastAccessTime.dwHighDateTime=0x1cbf8e9, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigitalLocker", cAlternateFileName="DIGITA~1")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x806ac8bc, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x806ac8bc, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloaded Program Files", cAlternateFileName="DOWNLO~1")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffb94625, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xffb94625, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0x7a349200, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0xae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DtcInstall.log", cAlternateFileName="DTCINS~1.LOG")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x996cd9eb, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xa9fa1e6a, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x9cf49440, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ehome", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3757e82b, ftCreationTime.dwHighDateTime=0x1ca0445, ftLastAccessTime.dwLowDateTime=0x23fb0799, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1e423fe3, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cd4312, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x90cd4312, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x90d6c893, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x2bd400, dwReserved0=0x0, dwReserved1=0x0, cFileName="explorer.exe", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6d0f7050, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d0f7050, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0a7e9b0, ftCreationTime.dwHighDateTime=0x1ca0410, ftLastAccessTime.dwLowDateTime=0xc0a7e9b0, ftLastAccessTime.dwHighDateTime=0x1ca0410, ftLastWriteTime.dwLowDateTime=0xe2da8a60, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="fveupdate.exe", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe387486, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xe9340f25, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xe9340f25, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Globalization", cAlternateFileName="GLOBAL~1")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe3f9894, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d967bdb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d967bdb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Help", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34a5a972, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x34a5a972, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0xb3200, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpPane.exe", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16ca6ff3, ftCreationTime.dwHighDateTime=0x1ca041a, ftLastAccessTime.dwLowDateTime=0x16ca6ff3, ftLastAccessTime.dwHighDateTime=0x1ca041a, ftLastWriteTime.dwLowDateTime=0xe391cc70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="hh.exe", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe445b48, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3763cf0c, ftLastAccessTime.dwHighDateTime=0x1ca0445, ftLastWriteTime.dwLowDateTime=0x3763cf0c, ftLastWriteTime.dwHighDateTime=0x1ca0445, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe50420a, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd5fc00, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd5fc00, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="inf", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x72a697c0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xeda8bc40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xeda8bc40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80b6f4c5, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80b6f4c5, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2Schemas", cAlternateFileName="L2SCHE~1")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfe60eb80, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9a0a5fd1, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LiveKernelReports", cAlternateFileName="LIVEKE~1")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6938ae40, ftLastAccessTime.dwHighDateTime=0x1d2fafa, ftLastWriteTime.dwLowDateTime=0x6938ae40, ftLastWriteTime.dwHighDateTime=0x1d2fafa, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x15, ftCreationTime.dwLowDateTime=0xfe60eb80, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x8105822e, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x8105822e, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f29dbd7, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0x7f29dbd7, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x9d4aec0c, ftLastWriteTime.dwHighDateTime=0x1ca040e, nFileSizeHigh=0x0, nFileSizeLow=0xa87b, dwReserved0=0x0, dwReserved1=0x0, cFileName="mib.bin", cAlternateFileName="")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe6f339c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd0be0600, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xd0be0600, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56a9ce00, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56a9ce00, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56a9ce00, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Migration", cAlternateFileName="MIGRAT~1")) returned 1
	[0196.725] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea5f2b2, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfea5f2b2, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0x9fcbcbb0, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModemLogs", cAlternateFileName="MODEML~1")) returned 1
	[0196.726] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc82fedc8, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xc82fedc8, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x2d6b0bf3, ftLastWriteTime.dwHighDateTime=0x1c9ea0b, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdfmap.ini", cAlternateFileName="")) returned 1
	[0196.726] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8eb2c4cd, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x8eb2c4cd, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xeb804920, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1
	[0196.726] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800df312, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x810320ce, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x810320ce, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offline Web Pages", cAlternateFileName="OFFLIN~1")) returned 1
	[0196.726] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb3172800, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0x281b0dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x281b0dc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Panther", cAlternateFileName="")) returned 1
	[0196.726] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCHEALTH", cAlternateFileName="")) returned 1
	[0196.726] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80046d91, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance", cAlternateFileName="PERFOR~1")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4e1cc01, ftCreationTime.dwHighDateTime=0x1cb892e, ftLastAccessTime.dwLowDateTime=0xc4e1cc01, ftLastAccessTime.dwHighDateTime=0x1cb892e, ftLastWriteTime.dwLowDateTime=0x78374e00, ftLastWriteTime.dwHighDateTime=0x1d30596, nFileSizeHigh=0x0, nFileSizeLow=0x69ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFRO.log", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea8540c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfeaf781a, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfeaf781a, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLA", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb1d974, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x94d2e7b9, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x94d2e7b9, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PolicyDefinitions", cAlternateFileName="POLICY~1")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6240bc00, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x3163cfa0, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x3163cfa0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prefetch", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf9a5c4e, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf9cbebd, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x5b155ccd, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xd12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Professional.xml", cAlternateFileName="PROFES~1.XML")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71a7c91c, ftCreationTime.dwHighDateTime=0x1ca0411, ftLastAccessTime.dwLowDateTime=0x71a7c91c, ftLastAccessTime.dwHighDateTime=0x1ca0411, ftLastWriteTime.dwLowDateTime=0xedf95f70, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x68400, dwReserved0=0x0, dwReserved1=0x0, cFileName="regedit.exe", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb43ace, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xff1f57a0, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xff1f57a0, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registration", cAlternateFileName="REGIST~1")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb69c28, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2b041c20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2b041c20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rescache", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfeb8fd82, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebb5edc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfebb5edc, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xcb547a92, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SchCache", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfebdc036, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="schemas", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec02190, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x98abb4cc, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x98abb4cc, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf484ebfa, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf4be0d01, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf4be0d01, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ServiceProfiles", cAlternateFileName="SERVIC~2")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec4e444, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1ea1accb, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1ea1accb, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="servicing", cAlternateFileName="SERVIC~1")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf627de2b, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf62a3f8b, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf62a3f8b, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0xb0760260, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="setupact.log", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fb4a840, ftCreationTime.dwHighDateTime=0x1d4d57d, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setuperr.log", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9968150d, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0xaf52ba40, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf52ba40, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellNew", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x145b2540, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cafb6a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x2cafb6a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d9da406, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d9da406, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x936ee880, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0x936ee880, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0x936ee880, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x10600, dwReserved0=0x0, dwReserved1=0x0, cFileName="splwow64.exe", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0aa2eb0, ftCreationTime.dwHighDateTime=0x1ca0443, ftLastAccessTime.dwLowDateTime=0xf0aa2eb0, ftLastAccessTime.dwHighDateTime=0x1ca0443, ftLastWriteTime.dwLowDateTime=0x5f19ab6d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xbc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="Starter.xml", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec7459e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfec7459e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xf404c84a, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="system", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x8bb1d8db, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="system.ini", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xefd85d60, ftLastAccessTime.dwHighDateTime=0x1d4d596, ftLastWriteTime.dwLowDateTime=0xefd85d60, ftLastWriteTime.dwHighDateTime=0x1d4d596, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System32", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe13712, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xc893570, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xc893570, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysWOW64", cAlternateFileName="")) returned 1
	[0196.727] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x8d561533, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x8d561533, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TAPI", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12b00f8, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xe3cd110, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe3cd110, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x2fcd0300, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x2fcd0300, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x9f16e414, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracing", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7986cda0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x7986cda0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0x7986cda0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x54b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TSSysprep.log", cAlternateFileName="TSSYSP~1.LOG")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f64321c, ftCreationTime.dwHighDateTime=0x1c9ea14, ftLastAccessTime.dwLowDateTime=0x2f64321c, ftLastAccessTime.dwHighDateTime=0x1c9ea14, ftLastWriteTime.dwLowDateTime=0x2f64321c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0x17240, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain.dll", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x800b91b1, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80cc6128, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80cc6128, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3bc54f7, ftCreationTime.dwHighDateTime=0x1cb892b, ftLastAccessTime.dwLowDateTime=0xb3bc54f7, ftLastAccessTime.dwHighDateTime=0x1cb892b, ftLastWriteTime.dwLowDateTime=0xb3bc54f7, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0xc800, dwReserved0=0x0, dwReserved1=0x0, cFileName="twain_32.dll", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5193c78, ftCreationTime.dwHighDateTime=0x1ca040b, ftLastAccessTime.dwLowDateTime=0xe5193c78, ftLastAccessTime.dwHighDateTime=0x1ca040b, ftLastWriteTime.dwLowDateTime=0x2f66937c, ftLastWriteTime.dwHighDateTime=0x1c9ea14, nFileSizeHigh=0x0, nFileSizeLow=0xc210, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_16.exe", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x149c5632, ftCreationTime.dwHighDateTime=0x1ca0418, ftLastAccessTime.dwLowDateTime=0x149c5632, ftLastAccessTime.dwHighDateTime=0x1ca0418, ftLastWriteTime.dwLowDateTime=0x77d4a690, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x7a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="twunk_32.exe", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89a56640, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x89a56640, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0xf1490400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x27, dwReserved0=0x0, dwReserved1=0x0, cFileName="vbaddin.ini", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12d6252, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x12d6252, ftLastAccessTime.dwHighDateTime=0x1ca0432, ftLastWriteTime.dwLowDateTime=0x12d6252, ftLastWriteTime.dwHighDateTime=0x1ca0432, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vss", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0x80046d91, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80046d91, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xadc7ce10, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xadc7ce10, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x249a330, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1de, dwReserved0=0x0, dwReserved1=0x0, cFileName="win.ini", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x2870a176, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2870a176, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28b347fe, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsShell.Manifest", cAlternateFileName="WINDOW~1.MAN")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14519fc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x14519fc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2c655760, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x1e51f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate.log", cAlternateFileName="WINDOW~1.LOG")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc68ade7e, ftCreationTime.dwHighDateTime=0x1ca0417, ftLastAccessTime.dwLowDateTime=0xc68ade7e, ftLastAccessTime.dwHighDateTime=0x1ca0417, ftLastWriteTime.dwLowDateTime=0x795b1f80, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="winhlp32.exe", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc3ac, ftCreationTime.dwHighDateTime=0x1ca0432, ftLastAccessTime.dwLowDateTime=0xbbbe9b70, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xbbbe9b70, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="winsxs", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67827cf3, ftCreationTime.dwHighDateTime=0x1c9ea0d, ftLastAccessTime.dwLowDateTime=0x67827cf3, ftLastAccessTime.dwHighDateTime=0x1c9ea0d, ftLastWriteTime.dwLowDateTime=0x6784de51, ftLastWriteTime.dwHighDateTime=0x1c9ea0d, nFileSizeHigh=0x0, nFileSizeLow=0x4d4e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WMSysPr9.prx", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89802aba, ftCreationTime.dwHighDateTime=0x1ca0415, ftLastAccessTime.dwLowDateTime=0x89802aba, ftLastAccessTime.dwHighDateTime=0x1ca0415, ftLastWriteTime.dwLowDateTime=0xfeb14f80, ftLastWriteTime.dwHighDateTime=0x1ca0423, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="write.exe", cAlternateFileName="")) returned 1
	[0196.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bba0 | out: lpFindFileData=0x1276bba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0196.728] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0196.728] GetFileAttributesExW (in: lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), fInfoLevelId=0x0, lpFileInformation=0x1276bc84 | out: lpFileInformation=0x1276bc84*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a)) returned 1
	[0196.729] CreateFileW (lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0196.730] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0196.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0196.730] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252ea00 | out: pbBuffer=0x1252ea00) returned 1
	[0196.730] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410ba0 | out: pbBuffer=0x12410ba0) returned 1
	[0196.730] ReadFile (in: hFile=0x34c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12767d1c*=0xae, lpOverlapped=0x0) returned 1
	[0196.731] GetFileType (hFile=0x34c) returned 0x1
	[0196.731] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.731] WriteFile (in: hFile=0x34c, lpBuffer=0x12460a50*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12460a50*, lpNumberOfBytesWritten=0x12767d00*=0xae, lpOverlapped=0x12767d0c) returned 1
	[0196.731] GetFileType (hFile=0x34c) returned 0x1
	[0196.731] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xae, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0196.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0196.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0196.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410c98 | out: pbBuffer=0x12410c98) returned 1
	[0196.732] CreateFileW (lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0196.732] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0196.732] WriteFile (in: hFile=0x354, lpBuffer=0x12614a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12614a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0196.733] CloseHandle (hObject=0x354) returned 1
	[0196.733] CloseHandle (hObject=0x34c) returned 1
	[0196.733] MoveFileExW (lpExistingFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), lpNewFileName="C:\\Users\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0196.736] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0196.736] FindFirstFileW (in: lpFileName="C:\\bootmgr\\*", lpFindFileData=0x12767a44 | out: lpFindFileData=0x12767a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0196.736] GetFileAttributesExW (in: lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), fInfoLevelId=0x0, lpFileInformation=0x1276bc84 | out: lpFileInformation=0x1276bc84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0196.736] FindFirstFileW (in: lpFileName="C:\\hiberfil.sys", lpFindFileData=0x1276b9f8 | out: lpFindFileData=0x1276b9f8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xae99ef60, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 0x336a6580
	[0196.736] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0196.736] GetFileAttributesExW (in: lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), fInfoLevelId=0x0, lpFileInformation=0x1276bc84 | out: lpFileInformation=0x1276bc84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0196.736] FindFirstFileW (in: lpFileName="C:\\pagefile.sys", lpFindFileData=0x1276b9f8 | out: lpFindFileData=0x1276b9f8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xaece4da0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 0x336a6580
	[0196.736] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0196.736] CreateFileW (lpFileName="C:\\hiberfil.sys" (normalized: "c:\\hiberfil.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0196.737] FindFirstFileW (in: lpFileName="C:\\hiberfil.sys\\*", lpFindFileData=0x12767a44 | out: lpFindFileData=0x12767a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0196.737] CreateFileW (lpFileName="C:\\pagefile.sys" (normalized: "c:\\pagefile.sys"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0196.737] FindFirstFileW (in: lpFileName="C:\\pagefile.sys\\*", lpFindFileData=0x12767a44 | out: lpFindFileData=0x12767a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0196.737] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0196.785] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0199.515] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0199.596] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.222] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0206.226] WaitForSingleObject (hHandle=0x2e8, dwMilliseconds=0xffffffff) returned 0x0
	[0209.601] SetEvent (hEvent=0x318) returned 1
	[0209.602] GetProcAddress (hModule=0x76d30000, lpProcName="GetModuleFileNameW") returned 0x76d44950
	[0209.603] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x12740000, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mor.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mor.exe")) returned 0x2d
	[0209.603] GetEnvironmentVariableW (in: lpName="windir", lpBuffer=0x126161a0, nSize=0x64 | out: lpBuffer="C:\\Windows") returned 0xa
	[0209.604] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\system32\\cmd.exe /C del C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mor.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x125e5df0*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x125e5db8 | out: lpCommandLine="C:\\Windows\\system32\\cmd.exe /C del C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mor.exe", lpProcessInformation=0x125e5db8*(hProcess=0x354, hThread=0x2f8, dwProcessId=0xa64, dwThreadId=0xa08)) returned 1
	[0209.953] SetEvent (hEvent=0xa0) returned 1
	[0209.953] ExitProcess (uExitCode=0x0) 

Thread:
	id = 52
	os_tid = 0x97c

	[0106.721] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x33b0ff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x33b0ff38*=0x2f0) returned 1
	[0106.721] VirtualQuery (in: lpAddress=0x33b0ff48, lpBuffer=0x33b0ff48, dwLength=0x1c | out: lpBuffer=0x33b0ff48*(BaseAddress=0x33b0f000, AllocationBase=0x33a10000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0106.721] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x2f4
	[0106.721] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0106.778] SetEvent (hEvent=0x2e8) returned 1
	[0106.778] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.779] FindFirstFileW (in: lpFileName="C:\\Boot\\BCD\\*", lpFindFileData=0x124f7a44 | out: lpFindFileData=0x124f7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.779] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.779] FindFirstFileW (in: lpFileName="C:\\BOOTSECT.BAK\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.779] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.780] FindFirstFileW (in: lpFileName="C:\\Boot\\BCD.LOG\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.780] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0106.901] SetEvent (hEvent=0x11c) returned 1
	[0106.901] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.902] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.902] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.902] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui\\*", lpFindFileData=0x124f7a44 | out: lpFindFileData=0x124f7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.902] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0106.946] SetEvent (hEvent=0x11c) returned 1
	[0106.946] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.946] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.946] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0106.946] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui\\*", lpFindFileData=0x124f7a44 | out: lpFindFileData=0x124f7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0106.946] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0107.507] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0107.518] SetEvent (hEvent=0x11c) returned 1
	[0107.518] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.518] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.518] CreateFileW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.518] FindFirstFileW (in: lpFileName="C:\\Boot\\memtest.exe\\*", lpFindFileData=0x124f7a44 | out: lpFindFileData=0x124f7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.518] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0107.564] SetEvent (hEvent=0x11c) returned 1
	[0107.564] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.564] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.564] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0107.564] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui\\*", lpFindFileData=0x124f7a44 | out: lpFindFileData=0x124f7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0107.564] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0107.577] SetEvent (hEvent=0x11c) returned 1
	[0107.577] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x33bc0000
	[0107.578] ReadFile (in: hFile=0x304, lpBuffer=0x127c6000, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x12421eb8, lpOverlapped=0x0 | out: lpBuffer=0x127c6000*, lpNumberOfBytesRead=0x12421eb8*=0x2, lpOverlapped=0x0) returned 1
	[0109.140] ReadFile (in: hFile=0x304, lpBuffer=0x12748002, nNumberOfBytesToRead=0x5fe, lpNumberOfBytesRead=0x12421eb8, lpOverlapped=0x0 | out: lpBuffer=0x12748002*, lpNumberOfBytesRead=0x12421eb8*=0x26, lpOverlapped=0x0) returned 1
	[0109.140] ReadFile (in: hFile=0x304, lpBuffer=0x12748028, nNumberOfBytesToRead=0x5d8, lpNumberOfBytesRead=0x12421eb8, lpOverlapped=0x0 | out: lpBuffer=0x12748028, lpNumberOfBytesRead=0x12421eb8*=0x0, lpOverlapped=0x0) returned 0
	[0109.140] CloseHandle (hObject=0x304) returned 1
	[0109.141] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x75e)) returned 1
	[0109.141] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0112.886] SetEvent (hEvent=0x30c) returned 1
	[0112.886] SetEvent (hEvent=0x11c) returned 1
	[0112.886] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0114.536] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0114.862] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0114.943] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0115.041] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0115.041] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f5a94 | out: lpFindFileData=0x124f5a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0115.147] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf00dbad0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf58c8770, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf58c8770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0115.147] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.en", cAlternateFileName="")) returned 1
	[0115.147] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.es", cAlternateFileName="")) returned 1
	[0115.147] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf2bda830, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf30772d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf30772d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.fr", cAlternateFileName="")) returned 1
	[0115.147] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.msi", cAlternateFileName="")) returned 1
	[0115.147] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x32b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proofing.xml", cAlternateFileName="")) returned 1
	[0115.147] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0115.147] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0115.147] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0115.148] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f575c | out: lpFileInformation=0x124f575c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.150] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.150] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0115.150] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f596c | out: lpMode=0x124f596c) returned 0
	[0115.150] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f596c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f596c*=0x1180, lpOverlapped=0x0) returned 1
	[0115.151] CloseHandle (hObject=0x2fc) returned 1
	[0115.152] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0115.152] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0115.152] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\*", lpFindFileData=0x124f5a30 | out: lpFindFileData=0x124f5a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0115.152] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf01c0310, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf07b3a10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf07b3a10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0115.152] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0115.152] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0115.153] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0115.153] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0115.153] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0115.153] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f56f8 | out: lpFileInformation=0x124f56f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.153] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.153] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0115.153] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5908 | out: lpMode=0x124f5908) returned 0
	[0115.153] WriteFile (in: hFile=0x2fc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f5908, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f5908*=0x1180, lpOverlapped=0x0) returned 1
	[0115.154] CloseHandle (hObject=0x2fc) returned 1
	[0115.155] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5af4 | out: lpFileInformation=0x124f5af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x219b4a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x219b4a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf07b1ad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xaf35ed)) returned 1
	[0115.262] SetEvent (hEvent=0xa0) returned 1
	[0115.262] SetEvent (hEvent=0x11c) returned 1
	[0115.262] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5af4 | out: lpFileInformation=0x124f5af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4db6cb00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x4db6cb00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf020c5d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd5c00)) returned 1
	[0115.262] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5af4 | out: lpFileInformation=0x124f5af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543)) returned 1
	[0115.263] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0115.263] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0115.263] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\*", lpFindFileData=0x124f5a30 | out: lpFindFileData=0x124f5a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0115.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf4d53d90, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf4f690d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0115.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.cab", cAlternateFileName="")) returned 1
	[0115.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.msi", cAlternateFileName="")) returned 1
	[0115.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e37e00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.xml", cAlternateFileName="")) returned 1
	[0115.263] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5a74 | out: lpFindFileData=0x124f5a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0115.263] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0115.263] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f56f8 | out: lpFileInformation=0x124f56f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0115.263] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0115.264] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0115.264] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x124f5908 | out: lpMode=0x124f5908) returned 0
	[0115.264] WriteFile (in: hFile=0x304, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f5908, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f5908*=0x1180, lpOverlapped=0x0) returned 1
	[0115.265] CloseHandle (hObject=0x304) returned 1
	[0115.265] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5af4 | out: lpFileInformation=0x124f5af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea)) returned 1
	[0115.316] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0115.317] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0115.317] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa38b7300, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0xa38b7300, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xf01be3d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x543)) returned 1
	[0115.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e400 | out: pbBuffer=0x1240e400) returned 1
	[0115.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410480 | out: pbBuffer=0x12410480) returned 1
	[0115.320] ReadFile (in: hFile=0x33c, lpBuffer=0x1289a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1289a000*, lpNumberOfBytesRead=0x126e5d1c*=0x543, lpOverlapped=0x0) returned 1
	[0115.877] GetFileType (hFile=0x33c) returned 0x1
	[0115.877] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0115.877] WriteFile (in: hFile=0x33c, lpBuffer=0x126d6000*, nNumberOfBytesToWrite=0x543, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x126d6000*, lpNumberOfBytesWritten=0x126e5d00*=0x543, lpOverlapped=0x126e5d0c) returned 1
	[0115.877] GetFileType (hFile=0x33c) returned 0x1
	[0115.878] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x543, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0115.878] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0115.878] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0115.878] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0115.879] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410548 | out: pbBuffer=0x12410548) returned 1
	[0115.879] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0115.879] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0115.879] WriteFile (in: hFile=0x2fc, lpBuffer=0x12606000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12606000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0115.879] CloseHandle (hObject=0x2fc) returned 1
	[0115.880] CloseHandle (hObject=0x33c) returned 1
	[0115.880] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.en\\Proof.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.en\\proof.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0115.981] SetEvent (hEvent=0x30c) returned 1
	[0115.981] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0115.981] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0115.981] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4f690d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd02aea)) returned 1
	[0115.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e6c0 | out: pbBuffer=0x1240e6c0) returned 1
	[0115.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410560 | out: pbBuffer=0x12410560) returned 1
	[0115.982] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0116.254] SetEvent (hEvent=0x70) returned 1
	[0116.254] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0116.409] SetEvent (hEvent=0x68) returned 1
	[0116.410] SetEvent (hEvent=0x30c) returned 1
	[0116.410] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0116.515] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0116.515] SetEvent (hEvent=0x30c) returned 1
	[0116.515] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0116.582] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0116.582] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0116.708] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0116.708] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0116.708] SetEvent (hEvent=0x70) returned 1
	[0116.708] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0116.840] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0116.840] GetFileType (hFile=0x2cc) returned 0x1
	[0116.840] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0116.840] WriteFile (in: hFile=0x2cc, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0x5b1, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x126e9d00*=0x5b1, lpOverlapped=0x126e9d0c) returned 1
	[0116.841] GetFileType (hFile=0x2cc) returned 0x1
	[0116.841] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x5b1, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0116.841] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0116.841] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0116.841] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0116.841] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0116.842] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0116.842] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0116.842] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0116.843] CloseHandle (hObject=0x340) returned 1
	[0116.846] CloseHandle (hObject=0x2cc) returned 1
	[0116.846] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0117.019] SetEvent (hEvent=0x30c) returned 1
	[0117.019] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0117.019] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0117.019] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x35aa7000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x35aa7000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf3076b00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1416b54)) returned 1
	[0117.019] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0117.019] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0117.020] ReadFile (in: hFile=0x2cc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0117.153] GetFileType (hFile=0x2cc) returned 0x1
	[0117.153] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0117.153] WriteFile (in: hFile=0x2cc, lpBuffer=0x126ec000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x126ec000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0117.154] GetFileType (hFile=0x2cc) returned 0x1
	[0117.154] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0117.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0117.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0117.155] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0117.155] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441a0 | out: pbBuffer=0x127441a0) returned 1
	[0117.155] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0117.155] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0117.155] WriteFile (in: hFile=0x32c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0117.232] CloseHandle (hObject=0x32c) returned 1
	[0119.650] CloseHandle (hObject=0x2cc) returned 1
	[0119.740] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.fr\\Proof.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.fr\\proof.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.355] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0120.355] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0120.356] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f5a94 | out: lpFindFileData=0x124f5a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0120.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf6e34d70, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa13c510, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0120.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfLR.cab", cAlternateFileName="")) returned 1
	[0120.402] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.msi", cAlternateFileName="INFOPA~1.MSI")) returned 1
	[0120.403] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e345a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x4cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InfoPathMUI.xml", cAlternateFileName="INFOPA~1.XML")) returned 1
	[0120.403] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0120.403] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0120.403] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0120.404] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f575c | out: lpFileInformation=0x124f575c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0120.405] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0120.405] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0120.406] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x124f596c | out: lpMode=0x124f596c) returned 0
	[0120.406] WriteFile (in: hFile=0x304, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f596c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f596c*=0x1180, lpOverlapped=0x0) returned 1
	[0120.407] CloseHandle (hObject=0x304) returned 1
	[0120.408] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204)) returned 1
	[0120.408] SetEvent (hEvent=0x2e4) returned 1
	[0120.408] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfoPathMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\infopathmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e58f90, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2fac00)) returned 1
	[0120.408] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0120.409] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0120.409] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf79111d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1200204)) returned 1
	[0120.409] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0120.409] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744128 | out: pbBuffer=0x12744128) returned 1
	[0120.409] ReadFile (in: hFile=0x304, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0120.475] GetFileType (hFile=0x304) returned 0x1
	[0120.475] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.475] WriteFile (in: hFile=0x304, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0120.476] GetFileType (hFile=0x304) returned 0x1
	[0120.476] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.476] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400901 | out: pbBuffer=0x12400901) returned 1
	[0120.476] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0120.477] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0120.477] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441e0 | out: pbBuffer=0x127441e0) returned 1
	[0120.477] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0120.477] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0120.477] WriteFile (in: hFile=0x32c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.555] CloseHandle (hObject=0x32c) returned 1
	[0120.815] CloseHandle (hObject=0x304) returned 1
	[0120.815] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\InfLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\inflr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.846] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0120.846] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0120.846] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5f0a8e20, ftCreationTime.dwHighDateTime=0x1cbe576, ftLastAccessTime.dwLowDateTime=0x5f0a8e20, ftLastAccessTime.dwHighDateTime=0x1cbe576, ftLastWriteTime.dwLowDateTime=0x4359ac00, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x251f)) returned 1
	[0120.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4a0 | out: pbBuffer=0x1252e4a0) returned 1
	[0120.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e6e8 | out: pbBuffer=0x1251e6e8) returned 1
	[0120.847] ReadFile (in: hFile=0x32c, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x126e9d1c*=0x251f, lpOverlapped=0x0) returned 1
	[0120.860] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.865] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.880] SetEvent (hEvent=0x68) returned 1
	[0120.880] GetFileType (hFile=0x32c) returned 0x1
	[0120.880] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.880] WriteFile (in: hFile=0x32c, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x251f, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x126e9d00*=0x251f, lpOverlapped=0x126e9d0c) returned 1
	[0120.880] GetFileType (hFile=0x32c) returned 0x1
	[0120.880] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x251f, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0120.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0120.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0120.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0120.881] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0120.881] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0120.881] WriteFile (in: hFile=0x328, lpBuffer=0x127cc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x127cc500*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.882] CloseHandle (hObject=0x328) returned 1
	[0120.882] CloseHandle (hObject=0x32c) returned 1
	[0120.882] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0054-0409-1000-0000000FF1CE}-C\\VisioMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0054-0409-1000-0000000ff1ce}-c\\visiomui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.883] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.916] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0120.917] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0120.917] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8)) returned 1
	[0120.917] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0120.917] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0120.917] ReadFile (in: hFile=0x2cc, lpBuffer=0x12918000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12918000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0120.936] GetFileType (hFile=0x2cc) returned 0x1
	[0120.936] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.936] WriteFile (in: hFile=0x2cc, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0120.937] GetFileType (hFile=0x2cc) returned 0x1
	[0120.937] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0120.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0120.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0120.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788190 | out: pbBuffer=0x12788190) returned 1
	[0120.937] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0120.937] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0120.938] WriteFile (in: hFile=0x340, lpBuffer=0x127cca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x127cca00*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.946] CloseHandle (hObject=0x340) returned 1
	[0120.946] CloseHandle (hObject=0x2cc) returned 1
	[0120.946] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.947] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0120.947] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0120.947] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd)) returned 1
	[0120.947] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c480 | out: pbBuffer=0x1244c480) returned 1
	[0120.947] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881a8 | out: pbBuffer=0x127881a8) returned 1
	[0120.947] ReadFile (in: hFile=0x2cc, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0120.953] GetFileType (hFile=0x2cc) returned 0x1
	[0120.953] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.953] WriteFile (in: hFile=0x2cc, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0120.954] GetFileType (hFile=0x2cc) returned 0x1
	[0120.954] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0120.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0120.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0120.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0120.955] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0120.955] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0120.955] WriteFile (in: hFile=0x340, lpBuffer=0x127ccf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x127ccf00*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.959] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.969] CloseHandle (hObject=0x340) returned 1
	[0120.969] CloseHandle (hObject=0x2cc) returned 1
	[0120.969] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0120.971] SetEvent (hEvent=0x11c) returned 1
	[0120.971] SetEvent (hEvent=0x30c) returned 1
	[0120.971] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1
	[0120.979] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0120.979] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0120.979] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0120.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee38cbf0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xee803530, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0120.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLR.cab", cAlternateFileName="")) returned 1
	[0120.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.msi", cAlternateFileName="GROOVE~1.MSI")) returned 1
	[0120.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveMUI.xml", cAlternateFileName="GROOVE~1.XML")) returned 1
	[0120.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0120.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0120.988] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0120.989] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.021] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0121.021] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.021] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0121.021] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0121.023] CloseHandle (hObject=0x340) returned 1
	[0121.023] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee4bb7b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x3e7e1f)) returned 1
	[0121.028] SetEvent (hEvent=0x70) returned 1
	[0121.028] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee3b15e0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x264400)) returned 1
	[0121.028] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391)) returned 1
	[0121.029] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee803530, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1
	[0121.029] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0121.029] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0121.029] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xe7b68970, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8729610, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8729610, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.xml", cAlternateFileName="")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwdcw20.dll", cAlternateFileName="")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85f73a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7eda0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwtrig20.exe", cAlternateFileName="")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VC90.CRT.manifest", cAlternateFileName="MICROS~1.MAN")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr90.dll", cAlternateFileName="")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeLR.cab", cAlternateFileName="")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.msi", cAlternateFileName="OFFICE~2.MSI")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c27050, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x15b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUI.xml", cAlternateFileName="OFFICE~2.XML")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeMUISet.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetupui.dll", cAlternateFileName="")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x77cbb000, ftCreationTime.dwHighDateTime=0x1cac57a, ftLastAccessTime.dwLowDateTime=0x77cbb000, ftLastAccessTime.dwHighDateTime=0x1cac57a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="pss10r.chm", cAlternateFileName="")) returned 1
	[0121.041] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.chm", cAlternateFileName="")) returned 1
	[0121.042] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0121.042] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x131a1c00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x131a1c00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShellUI.MST", cAlternateFileName="")) returned 1
	[0121.042] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0121.042] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0121.043] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.044] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0121.044] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.045] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0121.045] WriteFile (in: hFile=0x328, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0121.046] CloseHandle (hObject=0x328) returned 1
	[0121.065] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0121.084] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0121.084] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0121.084] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8691090, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe8691090, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.085] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588, dwReserved0=0x0, dwReserved1=0x0, cFileName="dwintl20.dll", cAlternateFileName="")) returned 1
	[0121.085] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0121.085] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0121.085] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.085] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0121.085] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.099] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0121.099] WriteFile (in: hFile=0x32c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0121.100] CloseHandle (hObject=0x32c) returned 1
	[0121.100] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588)) returned 1
	[0121.101] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88)) returned 1
	[0121.110] SetEvent (hEvent=0x70) returned 1
	[0121.110] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\Microsoft.VC90.CRT.manifest" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\microsoft.vc90.crt.manifest"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8d646800, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8d646800, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x741)) returned 1
	[0121.135] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0121.141] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282)) returned 1
	[0121.145] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cd17e00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3cd17e00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7c4ba40, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x387e00)) returned 1
	[0121.146] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fad4, ulCount=0x10, ulNumEntriesRemoved=0x33b0fab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fad4, ulNumEntriesRemoved=0x33b0fab8) returned 0
	[0121.146] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fad4, ulCount=0x10, ulNumEntriesRemoved=0x33b0fab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fad4, ulNumEntriesRemoved=0x33b0fab8) returned 1
	[0131.616] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x33b0fab4, fWait=0, lpdwFlags=0x33b0fac4 | out: lpcbTransfer=0x33b0fab4, lpdwFlags=0x33b0fac4) returned 1
	[0131.616] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0131.623] SetEvent (hEvent=0x320) returned 1
	[0131.623] SetEvent (hEvent=0x318) returned 1
	[0131.623] SetEvent (hEvent=0x70) returned 1
	[0131.623] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0131.624] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0131.624] SetEvent (hEvent=0x320) returned 1
	[0131.624] SetEvent (hEvent=0x70) returned 1
	[0131.625] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x46b, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0131.625] SetEvent (hEvent=0x78) returned 1
	[0131.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.625] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.625] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.625] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.625] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.625] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.626] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.626] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.626] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.627] CloseHandle (hObject=0x33c) returned 1
	[0131.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.628] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.628] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.628] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.628] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.628] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.629] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.629] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.630] CloseHandle (hObject=0x33c) returned 1
	[0131.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.641] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.641] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523e0d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8523e0d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.641] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.641] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.641] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.641] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.642] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.642] WriteFile (in: hFile=0x340, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.643] CloseHandle (hObject=0x340) returned 1
	[0131.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.644] SetEvent (hEvent=0x70) returned 1
	[0131.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.645] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.645] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.645] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.645] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.645] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.645] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.645] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.646] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.646] WriteFile (in: hFile=0x340, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.647] CloseHandle (hObject=0x340) returned 1
	[0131.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.664] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.664] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.664] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.664] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.664] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.666] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.666] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.667] CloseHandle (hObject=0x33c) returned 1
	[0131.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.667] SetEvent (hEvent=0x70) returned 1
	[0131.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.668] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.668] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.668] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.668] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.669] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.669] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.669] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.671] CloseHandle (hObject=0x33c) returned 1
	[0131.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.683] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.683] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.683] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.683] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.683] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.683] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.684] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.684] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.686] CloseHandle (hObject=0x33c) returned 1
	[0131.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.687] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.688] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.688] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.688] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.689] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.689] WriteFile (in: hFile=0x33c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.690] CloseHandle (hObject=0x33c) returned 1
	[0131.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.691] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.710] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.710] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.711] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85264230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.711] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.711] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.711] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.712] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.712] WriteFile (in: hFile=0x33c, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.713] CloseHandle (hObject=0x33c) returned 1
	[0131.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.714] SetEvent (hEvent=0x70) returned 1
	[0131.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.714] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.714] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.714] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.715] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.715] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.716] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.716] WriteFile (in: hFile=0x33c, lpBuffer=0x12767300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12767300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.717] CloseHandle (hObject=0x33c) returned 1
	[0131.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.728] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.728] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.728] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.728] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.729] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.729] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.729] WriteFile (in: hFile=0x340, lpBuffer=0x12768600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12768600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.731] CloseHandle (hObject=0x340) returned 1
	[0131.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.731] SetEvent (hEvent=0x320) returned 1
	[0131.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.732] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0131.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0131.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0131.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0131.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0131.732] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0131.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0131.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0131.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.733] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0131.733] WriteFile (in: hFile=0x340, lpBuffer=0x12769900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12769900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0131.735] CloseHandle (hObject=0x340) returned 1
	[0131.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0131.773] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0131.939] SetEvent (hEvent=0x70) returned 1
	[0131.939] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0132.119] SetEvent (hEvent=0x70) returned 1
	[0132.119] SetEvent (hEvent=0x68) returned 1
	[0132.119] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.120] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0132.120] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.120] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0132.120] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0132.120] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.122] GetFileType (hFile=0x33c) returned 0x1
	[0132.122] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.122] WriteFile (in: hFile=0x33c, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0132.122] GetFileType (hFile=0x33c) returned 0x1
	[0132.122] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.122] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0132.122] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0132.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0132.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0132.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.123] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0132.123] WriteFile (in: hFile=0x340, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.123] CloseHandle (hObject=0x340) returned 1
	[0132.123] CloseHandle (hObject=0x33c) returned 1
	[0132.124] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\nl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.125] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.125] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.125] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.125] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.125] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.125] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.126] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.126] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.127] CloseHandle (hObject=0x33c) returned 1
	[0132.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c12fb00, ftLastWriteTime.dwHighDateTime=0x1d0f3ee, nFileSizeHigh=0x0, nFileSizeLow=0x9f)) returned 1
	[0132.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.128] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.128] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8528a390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8528a390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.128] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.128] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.128] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.129] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.129] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.131] CloseHandle (hObject=0x33c) returned 1
	[0132.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852893f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.182] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.182] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8528a390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.182] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.182] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.182] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.183] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.183] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.183] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.183] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.185] CloseHandle (hObject=0x33c) returned 1
	[0132.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.185] SetEvent (hEvent=0x68) returned 1
	[0132.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.186] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.186] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.186] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.186] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.187] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.187] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.188] CloseHandle (hObject=0x33c) returned 1
	[0132.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.234] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.235] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.235] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.235] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.235] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.236] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.236] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.237] CloseHandle (hObject=0x33c) returned 1
	[0132.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.238] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.238] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.238] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.238] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.238] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.238] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.282] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.282] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.283] CloseHandle (hObject=0x340) returned 1
	[0132.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.328] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.328] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.328] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.328] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.328] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.329] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.329] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.331] CloseHandle (hObject=0x33c) returned 1
	[0132.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.332] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.332] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852b04f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.332] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.332] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.332] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.333] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.333] WriteFile (in: hFile=0x33c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.335] CloseHandle (hObject=0x33c) returned 1
	[0132.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.336] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.336] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.336] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.336] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.336] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.336] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.337] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.340] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.341] WriteFile (in: hFile=0x33c, lpBuffer=0x12634000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12634000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.342] CloseHandle (hObject=0x33c) returned 1
	[0132.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.343] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.343] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.343] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.343] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.343] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.343] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.343] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.344] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.344] WriteFile (in: hFile=0x33c, lpBuffer=0x12635300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12635300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.346] CloseHandle (hObject=0x33c) returned 1
	[0132.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.395] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0132.586] SetEvent (hEvent=0x320) returned 1
	[0132.586] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0132.621] SetEvent (hEvent=0x320) returned 1
	[0132.621] SetEvent (hEvent=0x68) returned 1
	[0132.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.621] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12659d0c | out: lpMode=0x12659d0c) returned 0
	[0132.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12659ad0 | out: lpFileInformation=0x12659ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.622] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0132.622] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0132.622] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12659d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12659d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.623] GetFileType (hFile=0x33c) returned 0x1
	[0132.623] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12659ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.623] WriteFile (in: hFile=0x33c, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12659d00, lpOverlapped=0x12659d0c | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x12659d00*=0xb3, lpOverlapped=0x12659d0c) returned 1
	[0132.624] GetFileType (hFile=0x33c) returned 0x1
	[0132.624] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x12659ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.624] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0132.624] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0132.624] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0132.625] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0132.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.625] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12659d0c | out: lpMode=0x12659d0c) returned 0
	[0132.625] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12659d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12659d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.625] CloseHandle (hObject=0x340) returned 1
	[0132.626] CloseHandle (hObject=0x33c) returned 1
	[0132.626] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.634] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.635] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.635] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.635] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.635] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.636] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.636] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.638] CloseHandle (hObject=0x33c) returned 1
	[0132.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.639] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.639] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.639] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.639] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.639] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.639] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.639] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.641] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.641] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.642] CloseHandle (hObject=0x33c) returned 1
	[0132.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.691] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.691] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.692] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.692] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.692] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.692] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.693] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.693] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.694] CloseHandle (hObject=0x33c) returned 1
	[0132.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.695] SetEvent (hEvent=0x68) returned 1
	[0132.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.696] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.696] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d6650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x852d6650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.696] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.696] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.696] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.697] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.697] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.697] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.697] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.699] CloseHandle (hObject=0x33c) returned 1
	[0132.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.781] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.781] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.781] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.781] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.781] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.782] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.782] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.784] CloseHandle (hObject=0x33c) returned 1
	[0132.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.785] SetEvent (hEvent=0x320) returned 1
	[0132.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.785] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.785] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0132.785] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.786] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.787] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0132.787] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0132.788] CloseHandle (hObject=0x33c) returned 1
	[0132.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.790] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.790] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85348a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85348a70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.790] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x628aed00, ftLastWriteTime.dwHighDateTime=0x1d0f5b2, nFileSizeHigh=0x0, nFileSizeLow=0x2769, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0132.790] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.790] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.791] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0132.791] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0132.793] CloseHandle (hObject=0x33c) returned 1
	[0132.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x628aed00, ftLastWriteTime.dwHighDateTime=0x1d0f5b2, nFileSizeHigh=0x0, nFileSizeLow=0x2769)) returned 1
	[0132.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d8)) returned 1
	[0132.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.855] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.856] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x844bb8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844c0700, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844c0700, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.856] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1_0", cAlternateFileName="")) returned 1
	[0132.856] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.856] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.857] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0132.857] WriteFile (in: hFile=0x340, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0132.859] CloseHandle (hObject=0x340) returned 1
	[0132.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.900] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.940] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8401b790, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.940] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84234950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd47, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1
	[0132.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84239770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1
	[0132.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8423be80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8423e590, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1
	[0132.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84240ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84240ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1
	[0132.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x840205b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84245ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844aa770, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0132.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0132.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842481d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844eed30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844eed30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0132.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.941] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0132.944] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0132.944] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0132.946] CloseHandle (hObject=0x2cc) returned 1
	[0132.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0132.946] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0132.946] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0132.982] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8402f010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422fb30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422fb30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0132.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x842210d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x842237e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x842237e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84228600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8422ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0132.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8422fb30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84232240, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0132.985] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0132.985] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0132.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0132.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0132.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.021] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0133.021] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277d300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x1277d300*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0133.023] CloseHandle (hObject=0x2cc) returned 1
	[0133.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.023] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.023] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84036540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8403b360, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.023] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.023] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.023] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.024] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.024] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277e600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1277e600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.026] CloseHandle (hObject=0x2cc) returned 1
	[0133.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0133.059] SetEvent (hEvent=0x320) returned 1
	[0133.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.060] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.060] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x840512f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84056110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84056110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.060] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.060] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.060] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.061] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.061] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277f900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1277f900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.063] CloseHandle (hObject=0x2cc) returned 1
	[0133.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f)) returned 1
	[0133.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.064] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.064] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84062460, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84067280, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.064] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.064] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.064] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.065] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.065] WriteFile (in: hFile=0x2cc, lpBuffer=0x12780c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12780c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.067] CloseHandle (hObject=0x2cc) returned 1
	[0133.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1
	[0133.108] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0133.224] SetEvent (hEvent=0x320) returned 1
	[0133.224] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0133.257] SetEvent (hEvent=0x320) returned 1
	[0133.257] SetEvent (hEvent=0x70) returned 1
	[0133.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.258] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.258] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.258] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8406e7b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8407f920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8407f920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.259] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.259] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.259] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.260] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.260] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.261] CloseHandle (hObject=0x2cc) returned 1
	[0133.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1
	[0133.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.262] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8408bc70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84090a90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.262] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.262] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.263] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.263] WriteFile (in: hFile=0x2cc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.264] CloseHandle (hObject=0x2cc) returned 1
	[0133.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84090a90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84090a90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1
	[0133.314] SetEvent (hEvent=0x70) returned 1
	[0133.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.315] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.315] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84097fc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8409cde0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.315] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.315] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.315] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.316] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.316] WriteFile (in: hFile=0x2cc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.318] CloseHandle (hObject=0x2cc) returned 1
	[0133.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8409cde0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8409cde0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1
	[0133.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.319] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841147f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84116f00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.319] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.320] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.320] WriteFile (in: hFile=0x2cc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.322] CloseHandle (hObject=0x2cc) returned 1
	[0133.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1
	[0133.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.366] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.367] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8411bd20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84120b40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.367] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.367] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.367] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.367] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.367] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.368] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.368] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.369] CloseHandle (hObject=0x2cc) returned 1
	[0133.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0133.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.370] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.370] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8412a780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8412ce90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.370] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.370] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.371] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.371] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.371] WriteFile (in: hFile=0x2cc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.373] CloseHandle (hObject=0x2cc) returned 1
	[0133.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8412ce90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8412ce90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0133.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.419] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.419] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84131cb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841343c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.419] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.419] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.419] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.421] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.421] WriteFile (in: hFile=0x2cc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.422] CloseHandle (hObject=0x2cc) returned 1
	[0133.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841343c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841343c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1
	[0133.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.423] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.423] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.423] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841391e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8413b8f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.423] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.423] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.423] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.423] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.423] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.423] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.424] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.424] WriteFile (in: hFile=0x2cc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.425] CloseHandle (hObject=0x2cc) returned 1
	[0133.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1
	[0133.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.517] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.517] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84140710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84142e20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.517] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.517] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.517] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.517] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.518] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.518] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.518] WriteFile (in: hFile=0x2cc, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.520] CloseHandle (hObject=0x2cc) returned 1
	[0133.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84142e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84142e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0133.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.521] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.521] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84147c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414a350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8414a350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.521] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.521] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.521] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.521] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.522] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.522] WriteFile (in: hFile=0x2cc, lpBuffer=0x12767300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12767300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.524] CloseHandle (hObject=0x2cc) returned 1
	[0133.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1
	[0133.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.594] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.594] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84153f90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841566a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.594] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.594] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.594] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.595] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.595] WriteFile (in: hFile=0x2cc, lpBuffer=0x12768600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12768600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.597] CloseHandle (hObject=0x2cc) returned 1
	[0133.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0133.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8415b4c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8415dbd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.598] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.599] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.599] WriteFile (in: hFile=0x2cc, lpBuffer=0x12769900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12769900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.601] CloseHandle (hObject=0x2cc) returned 1
	[0133.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0133.637] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0133.749] SetEvent (hEvent=0x320) returned 1
	[0133.750] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0133.783] SetEvent (hEvent=0x320) returned 1
	[0133.783] SetEvent (hEvent=0x68) returned 1
	[0133.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.784] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0133.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x125e9ad0 | out: lpFileInformation=0x125e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841566a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841566a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1
	[0133.784] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0133.784] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0133.784] ReadFile (in: hFile=0x2cc, lpBuffer=0x1267a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x1267a000*, lpNumberOfBytesRead=0x125e9d1c*=0xdf, lpOverlapped=0x0) returned 1
	[0133.785] GetFileType (hFile=0x2cc) returned 0x1
	[0133.786] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.786] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261a000*, nNumberOfBytesToWrite=0xdf, lpNumberOfBytesWritten=0x125e9d00, lpOverlapped=0x125e9d0c | out: lpBuffer=0x1261a000*, lpNumberOfBytesWritten=0x125e9d00*=0xdf, lpOverlapped=0x125e9d0c) returned 1
	[0133.786] GetFileType (hFile=0x2cc) returned 0x1
	[0133.786] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xdf, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0133.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0133.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0133.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0133.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.787] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0133.787] WriteFile (in: hFile=0x33c, lpBuffer=0x12678000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12678000*, lpNumberOfBytesWritten=0x125e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.787] CloseHandle (hObject=0x33c) returned 1
	[0133.787] CloseHandle (hObject=0x2cc) returned 1
	[0133.787] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fil\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.789] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.789] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841629f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84165100, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.789] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.789] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.789] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.789] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.790] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.790] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.791] CloseHandle (hObject=0x2cc) returned 1
	[0133.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee)) returned 1
	[0133.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.792] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.792] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84169f20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8416c630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.792] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.792] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.792] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.793] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.793] WriteFile (in: hFile=0x2cc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.794] CloseHandle (hObject=0x2cc) returned 1
	[0133.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8416c630, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8416c630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0133.837] SetEvent (hEvent=0x68) returned 1
	[0133.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.838] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.838] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84171450, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84173b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.838] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.838] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.838] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.839] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.839] WriteFile (in: hFile=0x2cc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.840] CloseHandle (hObject=0x2cc) returned 1
	[0133.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84173b60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84173b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1
	[0133.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.841] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.841] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.841] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84176270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8417b090, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.841] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.841] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.841] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.841] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.842] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.842] WriteFile (in: hFile=0x2cc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.843] CloseHandle (hObject=0x2cc) returned 1
	[0133.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0133.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.900] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.939] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8417feb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841825c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.940] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.940] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.940] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.941] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.941] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.943] CloseHandle (hObject=0x2cc) returned 1
	[0133.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841825c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841825c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1
	[0133.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.944] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841873e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84189af0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.944] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.944] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.944] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.945] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.945] WriteFile (in: hFile=0x2cc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.947] CloseHandle (hObject=0x2cc) returned 1
	[0133.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5)) returned 1
	[0133.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.989] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.989] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8418e910, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84191020, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.989] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.989] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.989] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.990] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.990] WriteFile (in: hFile=0x2cc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.992] CloseHandle (hObject=0x2cc) returned 1
	[0133.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0133.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0133.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0133.993] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0133.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84195e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84198550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84198550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0133.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0133.993] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0133.994] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0133.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0133.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0133.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.994] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0133.994] WriteFile (in: hFile=0x2cc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0133.996] CloseHandle (hObject=0x2cc) returned 1
	[0133.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84198550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8419d370, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xeb)) returned 1
	[0134.046] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.046] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.046] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8419fa80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a2190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a2190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.046] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.046] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.047] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.047] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.048] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.049] WriteFile (in: hFile=0x2cc, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.051] CloseHandle (hObject=0x2cc) returned 1
	[0134.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a2190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a48a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1
	[0134.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.052] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.052] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841a6fb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841a96c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.053] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.053] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.053] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.054] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.054] WriteFile (in: hFile=0x2cc, lpBuffer=0x12779300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12779300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.055] CloseHandle (hObject=0x2cc) returned 1
	[0134.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841a96c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841a96c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1
	[0134.097] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0134.216] SetEvent (hEvent=0x68) returned 1
	[0134.216] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0134.246] SetEvent (hEvent=0x68) returned 1
	[0134.246] SetEvent (hEvent=0x70) returned 1
	[0134.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.247] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.247] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ae4e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b0bf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.247] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.247] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.247] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.247] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.248] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.248] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.249] CloseHandle (hObject=0x2cc) returned 1
	[0134.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b0bf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b0bf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0134.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.250] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.250] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841b5a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841b8120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.250] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.250] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.250] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.251] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.251] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.251] WriteFile (in: hFile=0x2cc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.252] CloseHandle (hObject=0x2cc) returned 1
	[0134.252] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841b8120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841b8120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0xbf)) returned 1
	[0134.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.254] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.254] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841bcf40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841bf650, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.254] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841bf650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.254] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.254] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.255] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.255] WriteFile (in: hFile=0x2cc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.256] CloseHandle (hObject=0x2cc) returned 1
	[0134.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841bf650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841bf650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1
	[0134.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.256] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.256] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.256] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841c6b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841c9290, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.257] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841c9290, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.257] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.257] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.257] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.257] WriteFile (in: hFile=0x2cc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.258] CloseHandle (hObject=0x2cc) returned 1
	[0134.258] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841c9290, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841c9290, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0134.280] SetEvent (hEvent=0x70) returned 1
	[0134.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.281] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.281] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841ce0b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d07c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.281] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d07c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.281] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.281] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.287] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.287] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.290] CloseHandle (hObject=0x2cc) returned 1
	[0134.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d07c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d07c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1
	[0134.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.291] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.291] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841d55e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841d7cf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.291] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d7cf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.291] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.291] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.292] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.292] WriteFile (in: hFile=0x2cc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.293] CloseHandle (hObject=0x2cc) returned 1
	[0134.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841d7cf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841d7cf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0134.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.306] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841dcb10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841df220, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841df220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.306] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.306] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.307] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.307] WriteFile (in: hFile=0x2cc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.308] CloseHandle (hObject=0x2cc) returned 1
	[0134.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841df220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841df220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0134.308] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.308] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.309] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841eb570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f0390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.309] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f0390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.309] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.309] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.309] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.309] WriteFile (in: hFile=0x2cc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.311] CloseHandle (hObject=0x2cc) returned 1
	[0134.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f0390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f0390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1
	[0134.318] SetEvent (hEvent=0x70) returned 1
	[0134.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.318] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.318] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841f51b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841f78c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.318] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f78c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.318] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.318] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.319] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.319] WriteFile (in: hFile=0x33c, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.329] CloseHandle (hObject=0x33c) returned 1
	[0134.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841f78c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841f78c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1
	[0134.330] SetEvent (hEvent=0x70) returned 1
	[0134.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.330] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.331] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x841fc6e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x841fedf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.331] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841fedf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.331] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.331] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.332] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.332] WriteFile (in: hFile=0x33c, lpBuffer=0x127eb300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x127eb300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.333] CloseHandle (hObject=0x33c) returned 1
	[0134.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x841fedf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x841fedf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1
	[0134.341] SetEvent (hEvent=0x68) returned 1
	[0134.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.341] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.341] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84203c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84206320, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.342] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84206320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.342] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.342] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.342] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.342] WriteFile (in: hFile=0x33c, lpBuffer=0x127ec600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x127ec600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.344] CloseHandle (hObject=0x33c) returned 1
	[0134.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84206320, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84206320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0134.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.347] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.347] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8420b140, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8420d850, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.347] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8420d850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.347] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.347] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.348] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.348] WriteFile (in: hFile=0x33c, lpBuffer=0x127ed900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x127ed900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.349] CloseHandle (hObject=0x33c) returned 1
	[0134.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8420d850, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8420d850, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a)) returned 1
	[0134.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.356] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.356] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84212670, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84212670, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.356] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84214d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.356] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.356] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.357] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.357] WriteFile (in: hFile=0x33c, lpBuffer=0x127eec00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x127eec00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.359] CloseHandle (hObject=0x33c) returned 1
	[0134.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84212670, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84214d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1
	[0134.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0134.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0134.360] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0134.360] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84219ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8421c2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0134.360] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8421c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0134.360] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0134.360] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0134.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0134.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0134.360] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.361] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0134.361] WriteFile (in: hFile=0x33c, lpBuffer=0x12714000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12714000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0134.362] CloseHandle (hObject=0x33c) returned 1
	[0134.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8421c2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8421c2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0134.370] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0134.378] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0134.413] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0134.418] SetEvent (hEvent=0x68) returned 1
	[0134.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.418] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0134.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8422ad10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8422ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1
	[0134.422] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0134.422] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0134.422] ReadFile (in: hFile=0x33c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x1242bd1c*=0xd4, lpOverlapped=0x0) returned 1
	[0134.423] GetFileType (hFile=0x33c) returned 0x1
	[0134.423] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.423] WriteFile (in: hFile=0x33c, lpBuffer=0x12742000*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12742000*, lpNumberOfBytesWritten=0x1242bd00*=0xd4, lpOverlapped=0x1242bd0c) returned 1
	[0134.423] GetFileType (hFile=0x33c) returned 0x1
	[0134.424] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd4, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0134.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0134.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0134.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0134.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.425] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0134.425] WriteFile (in: hFile=0x2cc, lpBuffer=0x125de000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125de000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.425] CloseHandle (hObject=0x2cc) returned 1
	[0134.425] CloseHandle (hObject=0x33c) returned 1
	[0134.425] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_CN\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_cn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.426] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1271fad0 | out: lpFileInformation=0x1271fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84232240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84232240, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b91d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1
	[0134.427] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0134.427] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0134.427] ReadFile (in: hFile=0x33c, lpBuffer=0x128e6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1271fd1c, lpOverlapped=0x0 | out: lpBuffer=0x128e6000*, lpNumberOfBytesRead=0x1271fd1c*=0xd4, lpOverlapped=0x0) returned 1
	[0134.428] GetFileType (hFile=0x33c) returned 0x1
	[0134.428] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.428] WriteFile (in: hFile=0x33c, lpBuffer=0x127421c0*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x1271fd00, lpOverlapped=0x1271fd0c | out: lpBuffer=0x127421c0*, lpNumberOfBytesWritten=0x1271fd00*=0xd4, lpOverlapped=0x1271fd0c) returned 1
	[0134.429] GetFileType (hFile=0x33c) returned 0x1
	[0134.429] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd4, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0134.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0134.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0134.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0134.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.429] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.430] WriteFile (in: hFile=0x2cc, lpBuffer=0x125de500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1271fd0c, lpOverlapped=0x0 | out: lpBuffer=0x125de500*, lpNumberOfBytesWritten=0x1271fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.430] CloseHandle (hObject=0x2cc) returned 1
	[0134.430] CloseHandle (hObject=0x33c) returned 1
	[0134.430] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_TW\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\zh_tw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.431] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0134.532] SetEvent (hEvent=0x320) returned 1
	[0134.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.533] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12723d0c | out: lpMode=0x12723d0c) returned 0
	[0134.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x12723ad0 | out: lpFileInformation=0x12723ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8424a8e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8424a8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbcc13a00, ftLastWriteTime.dwHighDateTime=0x1d03f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1
	[0134.533] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0134.533] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0134.533] ReadFile (in: hFile=0x2cc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12723d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12723d1c*=0x2b56, lpOverlapped=0x0) returned 1
	[0134.573] SetEvent (hEvent=0x80) returned 1
	[0134.574] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0134.583] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0134.583] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0134.584] SetEvent (hEvent=0x70) returned 1
	[0134.584] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0134.585] GetFileType (hFile=0x2cc) returned 0x1
	[0134.585] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.585] WriteFile (in: hFile=0x2cc, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x2b56, lpNumberOfBytesWritten=0x12721d00, lpOverlapped=0x12721d0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x12721d00*=0x2b56, lpOverlapped=0x12721d0c) returned 1
	[0134.586] GetFileType (hFile=0x2cc) returned 0x1
	[0134.586] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x2b56, lpNewFilePointer=0x0, dwMoveMethod=0x12721ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.586] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0134.586] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0134.586] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0134.586] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0134.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.587] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12721d0c | out: lpMode=0x12721d0c) returned 0
	[0134.587] WriteFile (in: hFile=0x340, lpBuffer=0x1277a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12721d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277a000*, lpNumberOfBytesWritten=0x12721d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.587] CloseHandle (hObject=0x340) returned 1
	[0134.587] CloseHandle (hObject=0x2cc) returned 1
	[0134.587] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_metadata\\verified_contents.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.666] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0134.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84234950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x844b1ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd47)) returned 1
	[0134.667] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0134.667] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0134.667] ReadFile (in: hFile=0x2cc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12429d1c*=0xd47, lpOverlapped=0x0) returned 1
	[0134.682] GetFileType (hFile=0x2cc) returned 0x1
	[0134.682] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.683] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0xd47, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x12429d00*=0xd47, lpOverlapped=0x12429d0c) returned 1
	[0134.683] GetFileType (hFile=0x2cc) returned 0x1
	[0134.683] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xd47, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.683] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0134.683] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0134.683] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0134.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0134.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.684] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0134.684] WriteFile (in: hFile=0x344, lpBuffer=0x1277a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277a500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.684] CloseHandle (hObject=0x344) returned 1
	[0134.694] CloseHandle (hObject=0x2cc) returned 1
	[0134.701] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\icon_128.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.911] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0134.920] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0134.931] SetEvent (hEvent=0x80) returned 1
	[0134.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.932] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0134.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x98)) returned 1
	[0134.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0134.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0134.932] ReadFile (in: hFile=0x340, lpBuffer=0x128fe000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128fe000*, lpNumberOfBytesRead=0x1242bd1c*=0x98, lpOverlapped=0x0) returned 1
	[0134.934] GetFileType (hFile=0x340) returned 0x1
	[0134.934] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.934] WriteFile (in: hFile=0x340, lpBuffer=0x124b8140*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124b8140*, lpNumberOfBytesWritten=0x1242bd00*=0x98, lpOverlapped=0x1242bd0c) returned 1
	[0134.934] GetFileType (hFile=0x340) returned 0x1
	[0134.934] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x98, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.934] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400401 | out: pbBuffer=0x12400401) returned 1
	[0134.934] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0134.934] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0134.935] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0134.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0134.935] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0134.935] WriteFile (in: hFile=0x32c, lpBuffer=0x12982500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12982500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.935] CloseHandle (hObject=0x32c) returned 1
	[0134.935] CloseHandle (hObject=0x340) returned 1
	[0134.935] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\eu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.937] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1271fad0 | out: lpFileInformation=0x1271fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1
	[0134.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c760 | out: pbBuffer=0x1244c760) returned 1
	[0134.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0134.937] ReadFile (in: hFile=0x340, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1271fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1271fd1c*=0xff, lpOverlapped=0x0) returned 1
	[0134.939] GetFileType (hFile=0x340) returned 0x1
	[0134.939] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.939] WriteFile (in: hFile=0x340, lpBuffer=0x12617000*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x1271fd00, lpOverlapped=0x1271fd0c | out: lpBuffer=0x12617000*, lpNumberOfBytesWritten=0x1271fd00*=0xff, lpOverlapped=0x1271fd0c) returned 1
	[0134.939] GetFileType (hFile=0x340) returned 0x1
	[0134.939] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xff, lpNewFilePointer=0x0, dwMoveMethod=0x1271fce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0134.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0134.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0134.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0134.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0134.940] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1271fd0c | out: lpMode=0x1271fd0c) returned 0
	[0134.940] WriteFile (in: hFile=0x32c, lpBuffer=0x12982a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1271fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12982a00*, lpNumberOfBytesWritten=0x1271fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.940] CloseHandle (hObject=0x32c) returned 1
	[0134.940] CloseHandle (hObject=0x340) returned 1
	[0134.940] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fa\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.941] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0134.967] SetEvent (hEvent=0x68) returned 1
	[0134.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.967] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0134.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e71190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1
	[0134.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c980 | out: pbBuffer=0x1244c980) returned 1
	[0134.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0134.968] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1242bd1c*=0xbb, lpOverlapped=0x0) returned 1
	[0134.969] GetFileType (hFile=0x33c) returned 0x1
	[0134.969] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.969] WriteFile (in: hFile=0x33c, lpBuffer=0x12534180*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12534180*, lpNumberOfBytesWritten=0x1242bd00*=0xbb, lpOverlapped=0x1242bd0c) returned 1
	[0134.969] GetFileType (hFile=0x33c) returned 0x1
	[0134.969] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xbb, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0134.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0134.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0134.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0134.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.970] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0134.970] WriteFile (in: hFile=0x2cc, lpBuffer=0x12982f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12982f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.971] CloseHandle (hObject=0x2cc) returned 1
	[0134.971] CloseHandle (hObject=0x33c) returned 1
	[0134.971] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\fr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.972] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.031] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.045] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.063] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.065] SetEvent (hEvent=0x80) returned 1
	[0135.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.065] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ebbce0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ebcc80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1
	[0135.066] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0135.066] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0135.066] ReadFile (in: hFile=0x340, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1242bd1c*=0xb6, lpOverlapped=0x0) returned 1
	[0135.067] GetFileType (hFile=0x340) returned 0x1
	[0135.067] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.067] WriteFile (in: hFile=0x340, lpBuffer=0x12600000*, nNumberOfBytesToWrite=0xb6, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12600000*, lpNumberOfBytesWritten=0x1242bd00*=0xb6, lpOverlapped=0x1242bd0c) returned 1
	[0135.068] GetFileType (hFile=0x340) returned 0x1
	[0135.068] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xb6, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400401 | out: pbBuffer=0x12400401) returned 1
	[0135.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0135.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0135.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0135.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.069] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.069] WriteFile (in: hFile=0x33c, lpBuffer=0x12774500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12774500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.072] CloseHandle (hObject=0x33c) returned 1
	[0135.072] CloseHandle (hObject=0x340) returned 1
	[0135.074] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\it\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.080] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.084] SetEvent (hEvent=0x68) returned 1
	[0135.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.084] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1
	[0135.085] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c760 | out: pbBuffer=0x1244c760) returned 1
	[0135.085] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0135.085] ReadFile (in: hFile=0x340, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f1d1c*=0xfb, lpOverlapped=0x0) returned 1
	[0135.086] GetFileType (hFile=0x340) returned 0x1
	[0135.086] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.086] WriteFile (in: hFile=0x340, lpBuffer=0x12465000*, nNumberOfBytesToWrite=0xfb, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12465000*, lpNumberOfBytesWritten=0x124f1d00*=0xfb, lpOverlapped=0x124f1d0c) returned 1
	[0135.087] GetFileType (hFile=0x340) returned 0x1
	[0135.087] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xfb, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.087] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0135.087] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0135.087] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0135.088] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0135.088] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.088] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.088] WriteFile (in: hFile=0x33c, lpBuffer=0x12774a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12774a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.089] CloseHandle (hObject=0x33c) returned 1
	[0135.089] CloseHandle (hObject=0x340) returned 1
	[0135.091] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ja\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.103] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.109] SetEvent (hEvent=0x68) returned 1
	[0135.109] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.110] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85ee1e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85ee3d80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x25f)) returned 1
	[0135.110] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0135.110] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0135.110] ReadFile (in: hFile=0x33c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1242bd1c*=0x25f, lpOverlapped=0x0) returned 1
	[0135.113] GetFileType (hFile=0x33c) returned 0x1
	[0135.114] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.114] WriteFile (in: hFile=0x33c, lpBuffer=0x1262a500*, nNumberOfBytesToWrite=0x25f, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1262a500*, lpNumberOfBytesWritten=0x1242bd00*=0x25f, lpOverlapped=0x1242bd0c) returned 1
	[0135.116] GetFileType (hFile=0x33c) returned 0x1
	[0135.116] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x25f, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0135.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0135.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0135.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744670 | out: pbBuffer=0x12744670) returned 1
	[0135.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.117] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.117] WriteFile (in: hFile=0x32c, lpBuffer=0x125e4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.119] CloseHandle (hObject=0x32c) returned 1
	[0135.119] CloseHandle (hObject=0x33c) returned 1
	[0135.124] SetEvent (hEvent=0x2e8) returned 1
	[0135.124] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0135.127] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0135.127] SetEvent (hEvent=0x80) returned 1
	[0135.127] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0135.130] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\km\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.131] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.153] SetEvent (hEvent=0x70) returned 1
	[0135.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.154] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0135.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0135.154] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744180 | out: pbBuffer=0x12744180) returned 1
	[0135.154] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0xd5, lpOverlapped=0x0) returned 1
	[0135.155] GetFileType (hFile=0x33c) returned 0x1
	[0135.156] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.156] WriteFile (in: hFile=0x33c, lpBuffer=0x12714460*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12714460*, lpNumberOfBytesWritten=0x12429d00*=0xd5, lpOverlapped=0x12429d0c) returned 1
	[0135.156] GetFileType (hFile=0x33c) returned 0x1
	[0135.156] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd5, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0135.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0135.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0135.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744678 | out: pbBuffer=0x12744678) returned 1
	[0135.156] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.157] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.157] WriteFile (in: hFile=0x340, lpBuffer=0x1272c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1272c500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.157] CloseHandle (hObject=0x340) returned 1
	[0135.157] CloseHandle (hObject=0x33c) returned 1
	[0135.157] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.158] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1
	[0135.158] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0135.158] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446a0 | out: pbBuffer=0x127446a0) returned 1
	[0135.158] ReadFile (in: hFile=0x33c, lpBuffer=0x128fc000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x128fc000*, lpNumberOfBytesRead=0x124f3d1c*=0xc6, lpOverlapped=0x0) returned 1
	[0135.159] GetFileType (hFile=0x33c) returned 0x1
	[0135.160] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.160] WriteFile (in: hFile=0x33c, lpBuffer=0x1264a000*, nNumberOfBytesToWrite=0xc6, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1264a000*, lpNumberOfBytesWritten=0x124f3d00*=0xc6, lpOverlapped=0x124f3d0c) returned 1
	[0135.160] GetFileType (hFile=0x33c) returned 0x1
	[0135.160] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xc6, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.160] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0135.160] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0135.160] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0135.160] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744988 | out: pbBuffer=0x12744988) returned 1
	[0135.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.161] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0135.161] WriteFile (in: hFile=0x340, lpBuffer=0x1272ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1272ca00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.161] CloseHandle (hObject=0x340) returned 1
	[0135.161] CloseHandle (hObject=0x33c) returned 1
	[0135.161] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\lv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.162] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.202] SetEvent (hEvent=0x320) returned 1
	[0135.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.203] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f07fa0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f08770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1
	[0135.203] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0135.203] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127449a0 | out: pbBuffer=0x127449a0) returned 1
	[0135.204] ReadFile (in: hFile=0x33c, lpBuffer=0x1295c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1295c000*, lpNumberOfBytesRead=0x1242bd1c*=0x1c3, lpOverlapped=0x0) returned 1
	[0135.205] GetFileType (hFile=0x33c) returned 0x1
	[0135.205] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.205] WriteFile (in: hFile=0x33c, lpBuffer=0x12786000*, nNumberOfBytesToWrite=0x1c3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12786000*, lpNumberOfBytesWritten=0x1242bd00*=0x1c3, lpOverlapped=0x1242bd0c) returned 1
	[0135.211] GetFileType (hFile=0x33c) returned 0x1
	[0135.211] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1c3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.212] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0135.212] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0135.212] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0135.212] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744a58 | out: pbBuffer=0x12744a58) returned 1
	[0135.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.213] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.213] WriteFile (in: hFile=0x2cc, lpBuffer=0x1272cf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1272cf00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.219] CloseHandle (hObject=0x2cc) returned 1
	[0135.219] CloseHandle (hObject=0x33c) returned 1
	[0135.222] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.235] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.275] SetEvent (hEvent=0x70) returned 1
	[0135.275] SetEvent (hEvent=0x2e8) returned 1
	[0135.275] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.703] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.705] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.706] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.713] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.714] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ab7660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82abeb90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82abeb90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.714] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.2_0", cAlternateFileName="100~1.2_0")) returned 1
	[0135.714] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.714] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.714] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.715] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0135.715] WriteFile (in: hFile=0x33c, lpBuffer=0x12706000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12706000*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0135.716] CloseHandle (hObject=0x33c) returned 1
	[0135.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\*", lpFindFileData=0x124f7774 | out: lpFindFileData=0x124f7774*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.723] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82651e90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e7880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e7880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.723] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82888510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8288ac20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x32a2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_background.js", cAlternateFileName="CRAW_B~1.JS")) returned 1
	[0135.723] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8288d330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82892150, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xba221600, ftLastWriteTime.dwHighDateTime=0x1d297b0, nFileSizeHigh=0x0, nFileSizeLow=0x3b059, dwReserved0=0x0, dwReserved1=0x0, cFileName="craw_window.js", cAlternateFileName="CRAW_W~1.JS")) returned 1
	[0135.723] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82896f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82899680, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82899680, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0135.723] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8289e4a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828a0bb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="html", cAlternateFileName="")) returned 1
	[0135.723] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828a32c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0135.723] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826545a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e2a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aa3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0135.723] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1
	[0135.723] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828e7880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e9f90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828e9f90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1
	[0135.723] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f77b8 | out: lpFindFileData=0x124f77b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.723] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.724] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f743c | out: lpFileInformation=0x124f743c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.726] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f764c | out: lpMode=0x124f764c) returned 0
	[0135.726] WriteFile (in: hFile=0x33c, lpBuffer=0x12707300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f764c, lpOverlapped=0x0 | out: lpBuffer=0x12707300*, lpNumberOfBytesWritten=0x124f764c*=0x1180, lpOverlapped=0x0) returned 1
	[0135.727] CloseHandle (hObject=0x33c) returned 1
	[0135.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.728] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82665710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828836f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828836f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1
	[0135.731] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826a0090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a27a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826a27a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ac3e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826b1200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826b1200, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826b8730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826bae40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826c2370, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826c7190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826c7190, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ce6c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826d0dd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826d0dd0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826d8300, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826df830, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826df830, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82715390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82717aa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82717aa0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8271efd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827216e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827216e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82728c10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8272da30, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827412b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827439c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827439c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8274aef0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8274d600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8274d600, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82752420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82759950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8275c060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82763590, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82765ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82765ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8276d1d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8276f8e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8276f8e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82776e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82779520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82779520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8277e340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82783160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82783160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82787f80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8278a690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8278a690, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82791bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827942d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827942d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8279b800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8279df10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8279df10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827a2d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827a5440, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827a5440, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1
	[0135.732] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827aa260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827af080, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827af080, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827b3ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827b65b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827b65b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827c7720, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827cc540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827cc540, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827e4be0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827e72f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827e72f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x827f5d50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x827fab70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x827fab70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828095d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8280e3f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8280e3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8282b8b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828306d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828306d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8284db90, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828529b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x828529b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82863b20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82866230, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82866230, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8286b050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8286d760, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8286d760, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82872580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82874c90, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82874c90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82879ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8287e8d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8287e8d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x828836f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82885e00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82885e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1
	[0135.733] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.733] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.735] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.736] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0135.736] WriteFile (in: hFile=0x33c, lpBuffer=0x12708600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12708600*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0135.737] CloseHandle (hObject=0x33c) returned 1
	[0135.737] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.737] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8266a530, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8266f350, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.738] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.738] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.738] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.739] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.739] WriteFile (in: hFile=0x33c, lpBuffer=0x12709900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12709900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.740] CloseHandle (hObject=0x33c) returned 1
	[0135.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8266f350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8266f350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x376)) returned 1
	[0135.741] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.745] SetEvent (hEvent=0x68) returned 1
	[0135.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.746] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.746] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82676880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8267ddb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.746] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.746] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.746] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.747] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.747] WriteFile (in: hFile=0x34c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.748] CloseHandle (hObject=0x34c) returned 1
	[0135.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1)) returned 1
	[0135.748] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.753] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0135.967] SetEvent (hEvent=0x320) returned 1
	[0135.967] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.068] SetEvent (hEvent=0x70) returned 1
	[0142.069] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.136] SetEvent (hEvent=0x70) returned 1
	[0142.136] SetEvent (hEvent=0x320) returned 1
	[0142.138] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0x2c9, buf=0x1260a000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0x2c9, lpOverlapped=0x124e2088) returned 0
	[0142.139] SwitchToThread () returned 1
	[0142.173] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.253] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.518] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.646] SetEvent (hEvent=0x320) returned 1
	[0142.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0142.647] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8365ecc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836613d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xce17)) returned 1
	[0142.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732520 | out: pbBuffer=0x12732520) returned 1
	[0142.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0142.649] ReadFile (in: hFile=0x2cc, lpBuffer=0x125a2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125a2000*, lpNumberOfBytesRead=0x124f5d1c*=0xce17, lpOverlapped=0x0) returned 1
	[0142.661] GetFileType (hFile=0x2cc) returned 0x1
	[0142.662] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.662] WriteFile (in: hFile=0x2cc, lpBuffer=0x125e4000*, nNumberOfBytesToWrite=0xce17, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125e4000*, lpNumberOfBytesWritten=0x124f5d00*=0xce17, lpOverlapped=0x124f5d0c) returned 1
	[0142.662] GetFileType (hFile=0x2cc) returned 0x1
	[0142.662] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xce17, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0142.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0142.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0142.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445f0 | out: pbBuffer=0x127445f0) returned 1
	[0142.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0142.663] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0142.663] WriteFile (in: hFile=0x33c, lpBuffer=0x1245aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245aa00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.663] CloseHandle (hObject=0x33c) returned 1
	[0142.665] CloseHandle (hObject=0x2cc) returned 1
	[0142.666] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_sender.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.675] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.684] SetEvent (hEvent=0x68) returned 1
	[0142.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0142.684] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0142.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\cast_app.css"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836661f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836661f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x1a1d)) returned 1
	[0142.685] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0142.685] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0142.685] ReadFile (in: hFile=0x340, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1276bd1c*=0x1a1d, lpOverlapped=0x0) returned 1
	[0142.691] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.699] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.719] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.721] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.787] SetEvent (hEvent=0x320) returned 1
	[0142.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.html"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a0b70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a0b70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x38a8)) returned 1
	[0142.787] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0142.830] SetEvent (hEvent=0x320) returned 1
	[0142.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2b20)) returned 1
	[0142.831] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.284] SetEvent (hEvent=0x80) returned 1
	[0143.284] SetEvent (hEvent=0x2e4) returned 1
	[0143.284] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.582] SetEvent (hEvent=0x30c) returned 1
	[0143.582] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0143.586] SetEvent (hEvent=0x30c) returned 1
	[0143.586] SetEvent (hEvent=0x68) returned 1
	[0143.586] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\history.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.588] WriteFile (in: hFile=0x2cc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0143.590] CloseHandle (hObject=0x2cc) returned 1
	[0143.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B03.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b03.tmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.595] SetEvent (hEvent=0x68) returned 1
	[0143.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIconsOld\\2B04.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticonsold\\2b04.tmp"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0143.598] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0143.598] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0143.599] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1
	[0143.599] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0143.599] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0143.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0143.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0143.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0143.601] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0143.601] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0143.602] CloseHandle (hObject=0x2cc) returned 1
	[0143.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.603] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0143.603] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0143.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0143.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86513570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0143.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
	[0143.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
	[0143.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97256fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
	[0143.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
	[0143.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0143.612] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0143.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0143.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0143.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0143.616] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0143.616] WriteFile (in: hFile=0x2cc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0143.618] CloseHandle (hObject=0x2cc) returned 1
	[0143.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86513570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86513570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86513570, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0143.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97256fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1
	[0143.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0143.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0143.626] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0143.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97256fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1
	[0143.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e080 | out: pbBuffer=0x1252e080) returned 1
	[0143.638] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f0 | out: pbBuffer=0x1251e0f0) returned 1
	[0143.638] ReadFile (in: hFile=0x2cc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f3d1c*=0xc4, lpOverlapped=0x0) returned 1
	[0143.639] GetFileType (hFile=0x2cc) returned 0x1
	[0143.639] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.639] WriteFile (in: hFile=0x2cc, lpBuffer=0x126185b0*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x126185b0*, lpNumberOfBytesWritten=0x124f3d00*=0xc4, lpOverlapped=0x124f3d0c) returned 1
	[0143.639] GetFileType (hFile=0x2cc) returned 0x1
	[0143.639] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xc4, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0143.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0143.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0143.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e508 | out: pbBuffer=0x1251e508) returned 1
	[0143.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0143.640] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0143.640] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.640] CloseHandle (hObject=0x340) returned 1
	[0143.658] CloseHandle (hObject=0x2cc) returned 1
	[0143.675] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0144.236] SetEvent (hEvent=0xa0) returned 1
	[0144.236] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0144.341] SetEvent (hEvent=0x68) returned 1
	[0144.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0144.342] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0144.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0144.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0144.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0144.342] ReadFile (in: hFile=0x340, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f1d1c*=0x3000, lpOverlapped=0x0) returned 1
	[0144.379] GetFileType (hFile=0x340) returned 0x1
	[0144.379] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0144.379] WriteFile (in: hFile=0x340, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x124f1d00*=0x3000, lpOverlapped=0x124f1d0c) returned 1
	[0144.380] GetFileType (hFile=0x340) returned 0x1
	[0144.380] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x3000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0144.380] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0144.381] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0144.381] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0144.381] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0144.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0144.381] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0144.381] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0144.382] CloseHandle (hObject=0x2cc) returned 1
	[0144.472] CloseHandle (hObject=0x340) returned 1
	[0144.782] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0145.900] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0145.994] SetEvent (hEvent=0x2e4) returned 1
	[0145.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0145.995] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0145.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0145.995] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0145.996] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788100 | out: pbBuffer=0x12788100) returned 1
	[0145.996] ReadFile (in: hFile=0x340, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x12429d1c*=0x10, lpOverlapped=0x0) returned 1
	[0145.998] GetFileType (hFile=0x340) returned 0x1
	[0145.998] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0145.998] WriteFile (in: hFile=0x340, lpBuffer=0x12788110*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12788110*, lpNumberOfBytesWritten=0x12429d00*=0x10, lpOverlapped=0x12429d0c) returned 1
	[0145.998] GetFileType (hFile=0x340) returned 0x1
	[0145.998] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0145.998] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0145.998] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0145.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0145.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0145.999] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0145.999] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0145.999] WriteFile (in: hFile=0x344, lpBuffer=0x125ee500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ee500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0145.999] CloseHandle (hObject=0x344) returned 1
	[0145.999] CloseHandle (hObject=0x340) returned 1
	[0146.000] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0146.176] SetEvent (hEvent=0x320) returned 1
	[0146.176] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0146.191] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0146.191] SetEvent (hEvent=0x320) returned 1
	[0146.191] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0146.199] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0146.199] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0146.201] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0146.201] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0146.201] SetEvent (hEvent=0x30c) returned 1
	[0146.201] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0146.203] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0146.204] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0147.363] SetEvent (hEvent=0x320) returned 1
	[0147.363] SetEvent (hEvent=0x2e4) returned 1
	[0147.364] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0147.386] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0148.129] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0150.344] SetEvent (hEvent=0x80) returned 1
	[0150.344] SetEvent (hEvent=0x320) returned 1
	[0150.344] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0150.422] SetEvent (hEvent=0x80) returned 1
	[0150.422] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0150.457] SetEvent (hEvent=0x80) returned 1
	[0150.457] SetEvent (hEvent=0x320) returned 1
	[0150.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0150.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0150.459] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0150.459] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0150.459] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0150.459] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0150.459] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0150.459] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0150.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0150.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0150.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0150.468] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0150.468] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0150.469] CloseHandle (hObject=0x33c) returned 1
	[0150.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0150.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0150.943] SetEvent (hEvent=0x320) returned 1
	[0150.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0150.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0150.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0150.944] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0150.944] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0150.944] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0150.944] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0150.944] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0150.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0150.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0150.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0150.946] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0150.946] WriteFile (in: hFile=0x344, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0150.947] CloseHandle (hObject=0x344) returned 1
	[0150.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0150.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0150.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0150.950] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0150.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0150.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0150.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0150.950] ReadFile (in: hFile=0x344, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x43, lpOverlapped=0x0) returned 1
	[0150.951] GetFileType (hFile=0x344) returned 0x1
	[0150.951] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0150.951] WriteFile (in: hFile=0x344, lpBuffer=0x12414500*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12414500*, lpNumberOfBytesWritten=0x124f5d00*=0x43, lpOverlapped=0x124f5d0c) returned 1
	[0150.951] GetFileType (hFile=0x344) returned 0x1
	[0150.951] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0150.951] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0150.951] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0150.951] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0150.951] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744338 | out: pbBuffer=0x12744338) returned 1
	[0150.952] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0150.952] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0150.952] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0150.952] CloseHandle (hObject=0x340) returned 1
	[0150.952] CloseHandle (hObject=0x344) returned 1
	[0150.952] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0151.114] SetEvent (hEvent=0xa0) returned 1
	[0151.114] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0152.935] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0x2c9, buf=0x1260a000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0x2c9, lpOverlapped=0x124e2088) returned 0
	[0152.936] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0154.666] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0155.195] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0155.626] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0155.628] SetEvent (hEvent=0x2e8) returned 1
	[0155.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0155.629] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0155.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0)) returned 1
	[0155.629] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0155.629] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0155.629] ReadFile (in: hFile=0x33c, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x1242bd1c*=0x2fb0, lpOverlapped=0x0) returned 1
	[0155.639] GetFileType (hFile=0x33c) returned 0x1
	[0155.639] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.639] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x2fb0, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1242bd00*=0x2fb0, lpOverlapped=0x1242bd0c) returned 1
	[0155.639] GetFileType (hFile=0x33c) returned 0x1
	[0155.639] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x2fb0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0155.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0155.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0155.640] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0155.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0155.640] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0155.640] WriteFile (in: hFile=0x2cc, lpBuffer=0x125fe500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.640] CloseHandle (hObject=0x2cc) returned 1
	[0155.640] CloseHandle (hObject=0x33c) returned 1
	[0155.641] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0155.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0155.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0155.655] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb28, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb28, ulNumEntriesRemoved=0x33b0fb0c) returned 0
	[0155.655] SetEvent (hEvent=0x80) returned 1
	[0155.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrentDatabase_372.wmdb", cAlternateFileName="CURREN~1.WMD")) returned 1
	[0155.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalMLS_3.wmdb", cAlternateFileName="LOCALM~1.WMD")) returned 1
	[0155.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1
	[0155.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7f22040, ftCreationTime.dwHighDateTime=0x1d3373f, ftLastAccessTime.dwLowDateTime=0xf7f22040, ftLastAccessTime.dwHighDateTime=0x1d3373f, ftLastWriteTime.dwLowDateTime=0xf7f22040, ftLastWriteTime.dwHighDateTime=0x1d3373f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1
	[0155.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0155.656] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0155.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0155.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0155.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0155.659] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0155.659] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0155.660] CloseHandle (hObject=0x33c) returned 1
	[0155.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf59b80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x105000)) returned 1
	[0155.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c)) returned 1
	[0155.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0155.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0155.662] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0155.662] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.663] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0155.663] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0155.663] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0155.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0155.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0155.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0155.665] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0155.665] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0155.666] CloseHandle (hObject=0x33c) returned 1
	[0155.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0155.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0155.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0155.668] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.668] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0000E713", cAlternateFileName="")) returned 1
	[0155.668] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="00010C6E", cAlternateFileName="")) returned 1
	[0155.668] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0155.668] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0155.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0155.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0155.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0155.670] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0155.670] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0155.671] CloseHandle (hObject=0x33c) returned 1
	[0155.671] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0155.683] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0155.684] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0155.697] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0155.697] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0155.697] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0155.697] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
	[0155.697] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
	[0155.697] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
	[0155.697] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
	[0155.697] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
	[0155.697] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
	[0155.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
	[0155.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
	[0155.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
	[0155.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
	[0155.698] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0155.698] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0155.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0155.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0155.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0155.702] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0155.702] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0155.703] CloseHandle (hObject=0x340) returned 1
	[0155.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0155.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1
	[0155.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1
	[0155.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0155.728] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0155.728] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1
	[0155.728] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e400 | out: pbBuffer=0x1240e400) returned 1
	[0155.728] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410340 | out: pbBuffer=0x12410340) returned 1
	[0155.729] ReadFile (in: hFile=0x344, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12429d1c*=0x4ff, lpOverlapped=0x0) returned 1
	[0155.870] GetFileType (hFile=0x344) returned 0x1
	[0155.870] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.870] WriteFile (in: hFile=0x344, lpBuffer=0x12626000*, nNumberOfBytesToWrite=0x4ff, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12626000*, lpNumberOfBytesWritten=0x12429d00*=0x4ff, lpOverlapped=0x12429d0c) returned 1
	[0155.871] GetFileType (hFile=0x344) returned 0x1
	[0155.871] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x4ff, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8201 | out: pbBuffer=0x127e8201) returned 1
	[0155.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8301 | out: pbBuffer=0x127e8301) returned 1
	[0155.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8401 | out: pbBuffer=0x127e8401) returned 1
	[0155.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103f8 | out: pbBuffer=0x124103f8) returned 1
	[0155.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0155.872] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0155.872] WriteFile (in: hFile=0x33c, lpBuffer=0x12626500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.872] CloseHandle (hObject=0x33c) returned 1
	[0155.872] CloseHandle (hObject=0x344) returned 1
	[0155.872] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\02_Music_added_in_the_last_month.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\02_music_added_in_the_last_month.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.920] SetEvent (hEvent=0x320) returned 1
	[0155.920] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0155.921] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0155.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1
	[0155.921] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e7a0 | out: pbBuffer=0x1240e7a0) returned 1
	[0155.921] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410410 | out: pbBuffer=0x12410410) returned 1
	[0155.921] ReadFile (in: hFile=0x344, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x12429d1c*=0x31d, lpOverlapped=0x0) returned 1
	[0155.925] GetFileType (hFile=0x344) returned 0x1
	[0155.926] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.926] WriteFile (in: hFile=0x344, lpBuffer=0x124b8380*, nNumberOfBytesToWrite=0x31d, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124b8380*, lpNumberOfBytesWritten=0x12429d00*=0x31d, lpOverlapped=0x12429d0c) returned 1
	[0155.926] GetFileType (hFile=0x344) returned 0x1
	[0155.926] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x31d, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.926] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8501 | out: pbBuffer=0x127e8501) returned 1
	[0155.927] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0155.927] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0155.927] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104e8 | out: pbBuffer=0x124104e8) returned 1
	[0155.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0155.927] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0155.927] WriteFile (in: hFile=0x34c, lpBuffer=0x12626a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.928] CloseHandle (hObject=0x34c) returned 1
	[0155.928] CloseHandle (hObject=0x344) returned 1
	[0155.933] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.983] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0155.992] SetEvent (hEvent=0x2e4) returned 1
	[0155.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0155.993] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0155.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1
	[0155.993] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e560 | out: pbBuffer=0x1252e560) returned 1
	[0155.993] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0155.993] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0155.996] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb28, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb28, ulNumEntriesRemoved=0x33b0fb0c) returned 0
	[0155.996] SetEvent (hEvent=0xa0) returned 1
	[0155.996] SetEvent (hEvent=0x2e4) returned 1
	[0155.997] ReadFile (in: hFile=0x33c, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x124f3d1c*=0x3fc, lpOverlapped=0x0) returned 1
	[0156.013] GetFileType (hFile=0x33c) returned 0x1
	[0156.013] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.013] WriteFile (in: hFile=0x33c, lpBuffer=0x12498400*, nNumberOfBytesToWrite=0x3fc, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12498400*, lpNumberOfBytesWritten=0x124f3d00*=0x3fc, lpOverlapped=0x124f3d0c) returned 1
	[0156.013] GetFileType (hFile=0x33c) returned 0x1
	[0156.013] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3fc, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0156.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0156.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0156.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0156.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.014] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.014] WriteFile (in: hFile=0x340, lpBuffer=0x1263c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.015] CloseHandle (hObject=0x340) returned 1
	[0156.017] CloseHandle (hObject=0x33c) returned 1
	[0156.019] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.058] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.063] SetEvent (hEvent=0x30c) returned 1
	[0156.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.064] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.064] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1
	[0156.064] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c4c0 | out: pbBuffer=0x1244c4c0) returned 1
	[0156.064] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0156.065] ReadFile (in: hFile=0x33c, lpBuffer=0x125ae000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ae000*, lpNumberOfBytesRead=0x124f5d1c*=0x249, lpOverlapped=0x0) returned 1
	[0156.067] GetFileType (hFile=0x33c) returned 0x1
	[0156.067] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.068] WriteFile (in: hFile=0x33c, lpBuffer=0x12638f00*, nNumberOfBytesToWrite=0x249, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12638f00*, lpNumberOfBytesWritten=0x124f5d00*=0x249, lpOverlapped=0x124f5d0c) returned 1
	[0156.068] GetFileType (hFile=0x33c) returned 0x1
	[0156.068] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x249, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0156.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0156.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d01 | out: pbBuffer=0x12434d01) returned 1
	[0156.069] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0156.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.069] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.069] WriteFile (in: hFile=0x340, lpBuffer=0x1263ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263ca00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.069] CloseHandle (hObject=0x340) returned 1
	[0156.073] CloseHandle (hObject=0x33c) returned 1
	[0156.075] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.211] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.215] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.223] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.235] SetEvent (hEvent=0x320) returned 1
	[0156.235] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.236] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1
	[0156.236] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e300 | out: pbBuffer=0x1252e300) returned 1
	[0156.236] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e140 | out: pbBuffer=0x1251e140) returned 1
	[0156.236] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0156.237] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb28, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb28, ulNumEntriesRemoved=0x33b0fb0c) returned 0
	[0156.238] SetEvent (hEvent=0xa0) returned 1
	[0156.238] SetEvent (hEvent=0x320) returned 1
	[0156.238] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x31d, lpOverlapped=0x0) returned 1
	[0156.242] GetFileType (hFile=0x33c) returned 0x1
	[0156.242] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.242] WriteFile (in: hFile=0x33c, lpBuffer=0x1244a700*, nNumberOfBytesToWrite=0x31d, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1244a700*, lpNumberOfBytesWritten=0x124f5d00*=0x31d, lpOverlapped=0x124f5d0c) returned 1
	[0156.242] GetFileType (hFile=0x33c) returned 0x1
	[0156.242] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x31d, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.242] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0156.242] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec901 | out: pbBuffer=0x124ec901) returned 1
	[0156.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca01 | out: pbBuffer=0x124eca01) returned 1
	[0156.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e698 | out: pbBuffer=0x1251e698) returned 1
	[0156.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.243] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.243] WriteFile (in: hFile=0x344, lpBuffer=0x12626a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.243] CloseHandle (hObject=0x344) returned 1
	[0156.244] CloseHandle (hObject=0x33c) returned 1
	[0156.246] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.279] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.281] SetEvent (hEvent=0x2e8) returned 1
	[0156.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.282] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1
	[0156.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0156.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410040 | out: pbBuffer=0x12410040) returned 1
	[0156.282] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f3d1c*=0x3fc, lpOverlapped=0x0) returned 1
	[0156.287] GetFileType (hFile=0x33c) returned 0x1
	[0156.287] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.287] WriteFile (in: hFile=0x33c, lpBuffer=0x12498400*, nNumberOfBytesToWrite=0x3fc, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12498400*, lpNumberOfBytesWritten=0x124f3d00*=0x3fc, lpOverlapped=0x124f3d0c) returned 1
	[0156.287] GetFileType (hFile=0x33c) returned 0x1
	[0156.287] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3fc, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0156.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0156.288] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0156.288] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c8 | out: pbBuffer=0x124103c8) returned 1
	[0156.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.288] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.288] WriteFile (in: hFile=0x344, lpBuffer=0x127ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.288] CloseHandle (hObject=0x344) returned 1
	[0156.297] CloseHandle (hObject=0x33c) returned 1
	[0156.298] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.339] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.348] SetEvent (hEvent=0x2e8) returned 1
	[0156.348] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0156.349] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1
	[0156.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0156.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0156.349] ReadFile (in: hFile=0x340, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12605d1c*=0x249, lpOverlapped=0x0) returned 1
	[0156.352] GetFileType (hFile=0x340) returned 0x1
	[0156.352] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.352] WriteFile (in: hFile=0x340, lpBuffer=0x125f2f00*, nNumberOfBytesToWrite=0x249, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x125f2f00*, lpNumberOfBytesWritten=0x12605d00*=0x249, lpOverlapped=0x12605d0c) returned 1
	[0156.352] GetFileType (hFile=0x340) returned 0x1
	[0156.352] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x249, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.352] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0156.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0156.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0156.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0156.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.353] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.353] WriteFile (in: hFile=0x344, lpBuffer=0x12626500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x12626500*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.353] CloseHandle (hObject=0x344) returned 1
	[0156.354] CloseHandle (hObject=0x340) returned 1
	[0156.355] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.509] SwitchToThread () returned 1
	[0156.511] SetEvent (hEvent=0x2e4) returned 1
	[0156.511] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.512] SetEvent (hEvent=0x2e4) returned 1
	[0156.512] SetEvent (hEvent=0x30c) returned 1
	[0156.512] SetEvent (hEvent=0x80) returned 1
	[0156.512] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.532] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.545] SetEvent (hEvent=0x80) returned 1
	[0156.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.547] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x80)) returned 1
	[0156.547] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0156.547] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0156.548] ReadFile (in: hFile=0x344, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x1242bd1c*=0x80, lpOverlapped=0x0) returned 1
	[0156.551] GetFileType (hFile=0x344) returned 0x1
	[0156.551] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.552] WriteFile (in: hFile=0x344, lpBuffer=0x124ec080*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124ec080*, lpNumberOfBytesWritten=0x1242bd00*=0x80, lpOverlapped=0x1242bd0c) returned 1
	[0156.552] GetFileType (hFile=0x344) returned 0x1
	[0156.552] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x80, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec101 | out: pbBuffer=0x124ec101) returned 1
	[0156.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0156.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec301 | out: pbBuffer=0x124ec301) returned 1
	[0156.553] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0156.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0156.553] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.553] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.553] CloseHandle (hObject=0x2cc) returned 1
	[0156.553] CloseHandle (hObject=0x344) returned 1
	[0156.553] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.sig.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.sig.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.558] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bd15230, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x29ae1d20, ftLastAccessTime.dwHighDateTime=0x1d2e626, ftLastWriteTime.dwLowDateTime=0x29ae1d20, ftLastWriteTime.dwHighDateTime=0x1d2e626, nFileSizeHigh=0x0, nFileSizeLow=0x7ef)) returned 1
	[0156.559] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0156.559] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0156.559] ReadFile (in: hFile=0x344, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x124f5d1c*=0x7ef, lpOverlapped=0x0) returned 1
	[0156.569] GetFileType (hFile=0x344) returned 0x1
	[0156.569] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.569] WriteFile (in: hFile=0x344, lpBuffer=0x124b8000*, nNumberOfBytesToWrite=0x7ef, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124b8000*, lpNumberOfBytesWritten=0x124f5d00*=0x7ef, lpOverlapped=0x124f5d0c) returned 1
	[0156.569] GetFileType (hFile=0x344) returned 0x1
	[0156.569] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x7ef, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.569] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec401 | out: pbBuffer=0x124ec401) returned 1
	[0156.569] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0156.569] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0156.569] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0156.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0156.570] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.570] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.570] CloseHandle (hObject=0x2cc) returned 1
	[0156.570] CloseHandle (hObject=0x344) returned 1
	[0156.570] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Office\\ONetConfig\\350db95df4cbd94b2a1c300510e12e11.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\office\\onetconfig\\350db95df4cbd94b2a1c300510e12e11.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.572] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.577] SetEvent (hEvent=0x80) returned 1
	[0156.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.578] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5c4d2d00, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8ae80e80, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8ae80e80, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0xb9)) returned 1
	[0156.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324a0 | out: pbBuffer=0x127324a0) returned 1
	[0156.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744378 | out: pbBuffer=0x12744378) returned 1
	[0156.578] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12605d1c*=0xb9, lpOverlapped=0x0) returned 1
	[0156.580] GetFileType (hFile=0x33c) returned 0x1
	[0156.581] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.581] WriteFile (in: hFile=0x33c, lpBuffer=0x12582480*, nNumberOfBytesToWrite=0xb9, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x12582480*, lpNumberOfBytesWritten=0x12605d00*=0xb9, lpOverlapped=0x12605d0c) returned 1
	[0156.581] GetFileType (hFile=0x33c) returned 0x1
	[0156.581] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb9, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.581] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0156.581] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0156.582] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0156.582] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744500 | out: pbBuffer=0x12744500) returned 1
	[0156.582] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.582] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.582] WriteFile (in: hFile=0x344, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.583] CloseHandle (hObject=0x344) returned 1
	[0156.583] CloseHandle (hObject=0x33c) returned 1
	[0156.583] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\Outlook.sharing.xml.obi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\outlook.sharing.xml.obi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.607] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.610] SetEvent (hEvent=0x80) returned 1
	[0156.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.611] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dc8cc40, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3dc8cc40, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3dc8cc40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x462)) returned 1
	[0156.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e6a0 | out: pbBuffer=0x1240e6a0) returned 1
	[0156.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0156.611] ReadFile (in: hFile=0x33c, lpBuffer=0x125ae000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x125ae000*, lpNumberOfBytesRead=0x1242bd1c*=0x462, lpOverlapped=0x0) returned 1
	[0156.622] GetFileType (hFile=0x33c) returned 0x1
	[0156.622] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.622] WriteFile (in: hFile=0x33c, lpBuffer=0x127ea480*, nNumberOfBytesToWrite=0x462, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127ea480*, lpNumberOfBytesWritten=0x1242bd00*=0x462, lpOverlapped=0x1242bd0c) returned 1
	[0156.622] GetFileType (hFile=0x33c) returned 0x1
	[0156.622] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x462, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.622] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0156.623] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0156.623] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0156.623] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0156.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.623] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.623] WriteFile (in: hFile=0x344, lpBuffer=0x127ee500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.623] CloseHandle (hObject=0x344) returned 1
	[0156.623] CloseHandle (hObject=0x33c) returned 1
	[0156.623] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Outlook\\mapisvc.inf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\outlook\\mapisvc.inf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.626] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.694] SetEvent (hEvent=0x80) returned 1
	[0156.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0156.695] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x976e3d80, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x976e3d80, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x5f055ac0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1f400)) returned 1
	[0156.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ecc0 | out: pbBuffer=0x1240ecc0) returned 1
	[0156.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0156.695] ReadFile (in: hFile=0x2cc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12605d1c*=0x1f400, lpOverlapped=0x0) returned 1
	[0156.716] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb28, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb28, ulNumEntriesRemoved=0x33b0fb0c) returned 0
	[0156.717] SetEvent (hEvent=0x80) returned 1
	[0156.718] GetFileType (hFile=0x2cc) returned 0x1
	[0156.718] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.718] WriteFile (in: hFile=0x2cc, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x1f400, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x12605d00*=0x1f400, lpOverlapped=0x12605d0c) returned 1
	[0156.719] GetFileType (hFile=0x2cc) returned 0x1
	[0156.719] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x1f400, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0156.720] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0156.720] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0156.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0156.733] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.733] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.733] WriteFile (in: hFile=0x344, lpBuffer=0x127ef400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ef400*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.733] CloseHandle (hObject=0x344) returned 1
	[0156.733] CloseHandle (hObject=0x2cc) returned 1
	[0156.733] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\thumbs.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\thumbs.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.800] SetEvent (hEvent=0xa0) returned 1
	[0156.800] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.901] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0156.944] SetEvent (hEvent=0x2e4) returned 1
	[0156.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.945] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0156.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7680bb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7680bb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7680bb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x204fd)) returned 1
	[0156.945] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0156.945] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0156.946] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12605d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0157.077] GetFileType (hFile=0x344) returned 0x1
	[0157.077] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.077] WriteFile (in: hFile=0x344, lpBuffer=0x126ce000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x126ce000*, lpNumberOfBytesWritten=0x12605d00*=0x20000, lpOverlapped=0x12605d0c) returned 1
	[0157.078] GetFileType (hFile=0x344) returned 0x1
	[0157.078] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0157.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0157.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0157.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0157.079] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.080] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0157.080] WriteFile (in: hFile=0x2cc, lpBuffer=0x125f2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f2000*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.114] CloseHandle (hObject=0x2cc) returned 1
	[0157.114] CloseHandle (hObject=0x344) returned 1
	[0157.114] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\0B\\FCBF5d01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\0b\\fcbf5d01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.120] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.135] SetEvent (hEvent=0x2e4) returned 1
	[0157.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.136] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0157.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb727c690, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb727c690, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb72eeab0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x20543)) returned 1
	[0157.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0157.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0157.137] ReadFile (in: hFile=0x344, lpBuffer=0x126f0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f0000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0157.171] GetFileType (hFile=0x344) returned 0x1
	[0157.171] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.171] WriteFile (in: hFile=0x344, lpBuffer=0x1258e000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1258e000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0157.172] GetFileType (hFile=0x344) returned 0x1
	[0157.172] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0157.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0157.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0157.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0157.173] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.173] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0157.173] WriteFile (in: hFile=0x2cc, lpBuffer=0x125f2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f2500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.173] CloseHandle (hObject=0x2cc) returned 1
	[0157.173] CloseHandle (hObject=0x344) returned 1
	[0157.173] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\3\\4B\\1D8FDd01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\3\\4b\\1d8fdd01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.176] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.223] SetEvent (hEvent=0x2e4) returned 1
	[0157.223] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.224] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0157.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f47cd0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x534f)) returned 1
	[0157.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c4e0 | out: pbBuffer=0x1244c4e0) returned 1
	[0157.225] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0157.225] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0157.227] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.227] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb28, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb28, ulNumEntriesRemoved=0x33b0fb0c) returned 0
	[0157.228] SetEvent (hEvent=0xa0) returned 1
	[0157.228] SetEvent (hEvent=0x2e4) returned 1
	[0157.228] ReadFile (in: hFile=0x344, lpBuffer=0x125ae000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ae000*, lpNumberOfBytesRead=0x124f1d1c*=0x534f, lpOverlapped=0x0) returned 1
	[0157.232] GetFileType (hFile=0x344) returned 0x1
	[0157.232] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.232] WriteFile (in: hFile=0x344, lpBuffer=0x124a1500*, nNumberOfBytesToWrite=0x534f, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124a1500*, lpNumberOfBytesWritten=0x124f1d00*=0x534f, lpOverlapped=0x124f1d0c) returned 1
	[0157.232] GetFileType (hFile=0x344) returned 0x1
	[0157.232] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x534f, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.233] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0157.233] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0157.233] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0157.233] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0157.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.234] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0157.234] WriteFile (in: hFile=0x2cc, lpBuffer=0x125f2a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f2a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.234] CloseHandle (hObject=0x2cc) returned 1
	[0157.234] CloseHandle (hObject=0x344) returned 1
	[0157.234] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\10\\16A09d01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\10\\16a09d01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.237] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0157.239] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0157.239] SetEvent (hEvent=0x80) returned 1
	[0157.239] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0157.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.271] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0157.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d58af0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d58af0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7dcaf10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x133d5)) returned 1
	[0157.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0157.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0157.271] ReadFile (in: hFile=0x2cc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f5d1c*=0x133d5, lpOverlapped=0x0) returned 1
	[0157.707] GetFileType (hFile=0x2cc) returned 0x1
	[0157.708] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.708] WriteFile (in: hFile=0x2cc, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x133d5, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f5d00*=0x133d5, lpOverlapped=0x124f5d0c) returned 1
	[0157.708] GetFileType (hFile=0x2cc) returned 0x1
	[0157.708] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x133d5, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.708] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0157.708] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0157.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0157.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e110 | out: pbBuffer=0x1251e110) returned 1
	[0157.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0157.709] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0157.709] WriteFile (in: hFile=0x34c, lpBuffer=0x125fa000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fa000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.709] CloseHandle (hObject=0x34c) returned 1
	[0157.709] CloseHandle (hObject=0x2cc) returned 1
	[0157.709] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\2C\\24B53d01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\2c\\24b53d01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.712] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.777] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.812] SetEvent (hEvent=0x68) returned 1
	[0157.812] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.816] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0157.817] SetEvent (hEvent=0x30c) returned 1
	[0157.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0157.818] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1262bd0c | out: lpMode=0x1262bd0c) returned 0
	[0157.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_"), fInfoLevelId=0x0, lpFileInformation=0x1262bad0 | out: lpFileInformation=0x1262bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x8529f470, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1
	[0157.818] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0157.818] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0157.818] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1262bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1262bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0158.549] GetFileType (hFile=0x344) returned 0x1
	[0158.549] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1262bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.549] WriteFile (in: hFile=0x344, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1262bd00, lpOverlapped=0x1262bd0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x1262bd00*=0x20000, lpOverlapped=0x1262bd0c) returned 1
	[0158.558] GetFileType (hFile=0x344) returned 0x1
	[0158.558] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1262bce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.558] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434601 | out: pbBuffer=0x12434601) returned 1
	[0158.558] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434701 | out: pbBuffer=0x12434701) returned 1
	[0158.558] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0158.558] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744580 | out: pbBuffer=0x12744580) returned 1
	[0158.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0158.559] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x1262bd0c | out: lpMode=0x1262bd0c) returned 0
	[0158.559] WriteFile (in: hFile=0x354, lpBuffer=0x127ee500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1262bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee500*, lpNumberOfBytesWritten=0x1262bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.422] CloseHandle (hObject=0x354) returned 1
	[0159.422] CloseHandle (hObject=0x344) returned 1
	[0159.422] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_003_.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_003_.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.425] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.429] SetEvent (hEvent=0x30c) returned 1
	[0159.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0159.429] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0159.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x854b47b0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x854b47b0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85572e90, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe59f6)) returned 1
	[0159.430] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e0e0 | out: pbBuffer=0x1252e0e0) returned 1
	[0159.430] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0159.430] ReadFile (in: hFile=0x344, lpBuffer=0x125b0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x125b0000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0159.446] GetFileType (hFile=0x344) returned 0x1
	[0159.446] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.446] WriteFile (in: hFile=0x344, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0159.447] GetFileType (hFile=0x344) returned 0x1
	[0159.447] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.447] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0159.448] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0159.448] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400801 | out: pbBuffer=0x12400801) returned 1
	[0159.448] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0159.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0159.448] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0159.448] WriteFile (in: hFile=0x33c, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.456] CloseHandle (hObject=0x33c) returned 1
	[0159.456] CloseHandle (hObject=0x344) returned 1
	[0159.456] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\startupCache\\startupCache.4.little.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\startupcache\\startupcache.4.little.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0159.465] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83cc0a50, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83cc0a50, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0)) returned 1
	[0159.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e340 | out: pbBuffer=0x1252e340) returned 1
	[0159.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0159.465] ReadFile (in: hFile=0x344, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f5d1c*=0x40b0, lpOverlapped=0x0) returned 1
	[0159.479] GetFileType (hFile=0x344) returned 0x1
	[0159.479] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.479] WriteFile (in: hFile=0x344, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x40b0, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f5d00*=0x40b0, lpOverlapped=0x124f5d0c) returned 1
	[0159.479] GetFileType (hFile=0x344) returned 0x1
	[0159.479] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x40b0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0159.505] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0159.506] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0159.506] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0159.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0159.506] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.506] WriteFile (in: hFile=0x354, lpBuffer=0x1255aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1255aa00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.506] CloseHandle (hObject=0x354) returned 1
	[0159.506] CloseHandle (hObject=0x344) returned 1
	[0159.506] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\4cc87c1409819bf06f42b782d4902b2f.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.509] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.540] SetEvent (hEvent=0x30c) returned 1
	[0159.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0159.541] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0159.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a2b6d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85442390, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85442390, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x464)) returned 1
	[0159.541] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e5a0 | out: pbBuffer=0x1252e5a0) returned 1
	[0159.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0159.542] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0159.543] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.543] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb28, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb28, ulNumEntriesRemoved=0x33b0fb0c) returned 0
	[0159.544] SetEvent (hEvent=0xa0) returned 1
	[0159.544] SetEvent (hEvent=0x30c) returned 1
	[0159.544] ReadFile (in: hFile=0x33c, lpBuffer=0x128bc000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128bc000*, lpNumberOfBytesRead=0x12429d1c*=0x464, lpOverlapped=0x0) returned 1
	[0159.547] GetFileType (hFile=0x33c) returned 0x1
	[0159.547] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.547] WriteFile (in: hFile=0x33c, lpBuffer=0x125ee480*, nNumberOfBytesToWrite=0x464, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125ee480*, lpNumberOfBytesWritten=0x12429d00*=0x464, lpOverlapped=0x12429d0c) returned 1
	[0159.548] GetFileType (hFile=0x33c) returned 0x1
	[0159.548] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x464, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0159.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0159.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0159.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0159.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0159.548] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0159.549] WriteFile (in: hFile=0x344, lpBuffer=0x12768500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.549] CloseHandle (hObject=0x344) returned 1
	[0159.549] CloseHandle (hObject=0x33c) returned 1
	[0159.549] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\active-update.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\active-update.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.551] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.554] SetEvent (hEvent=0x320) returned 1
	[0159.554] SetEvent (hEvent=0x2e4) returned 1
	[0159.554] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.560] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.569] SetEvent (hEvent=0x320) returned 1
	[0159.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0159.570] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7d7ec50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7d7ec50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x818016b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x927c0)) returned 1
	[0159.570] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0159.570] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0159.570] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0159.596] GetFileType (hFile=0x33c) returned 0x1
	[0159.596] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.596] WriteFile (in: hFile=0x33c, lpBuffer=0x1293c000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1293c000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0159.597] GetFileType (hFile=0x33c) returned 0x1
	[0159.597] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0159.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0159.598] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0159.598] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0159.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0159.598] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.598] WriteFile (in: hFile=0x350, lpBuffer=0x1272c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1272c000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.626] CloseHandle (hObject=0x350) returned 1
	[0159.626] CloseHandle (hObject=0x33c) returned 1
	[0159.626] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.mar.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.mar.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.630] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0159.725] SetEvent (hEvent=0x30c) returned 1
	[0159.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2B_0BxcCfd-6mN84d.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2b_0bxccfd-6mn84d.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0159.726] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0159.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2B_0BxcCfd-6mN84d.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2b_0bxccfd-6mn84d.flv"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1eb13d80, ftCreationTime.dwHighDateTime=0x1d5dd72, ftLastAccessTime.dwLowDateTime=0x4a911e90, ftLastAccessTime.dwHighDateTime=0x1d5e595, ftLastWriteTime.dwLowDateTime=0x4a911e90, ftLastWriteTime.dwHighDateTime=0x1d5e595, nFileSizeHigh=0x0, nFileSizeLow=0x6c0b)) returned 1
	[0159.726] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0159.726] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0159.726] ReadFile (in: hFile=0x350, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1242bd1c*=0x6c0b, lpOverlapped=0x0) returned 1
	[0159.845] GetFileType (hFile=0x350) returned 0x1
	[0159.845] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.845] WriteFile (in: hFile=0x350, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x6c0b, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x1242bd00*=0x6c0b, lpOverlapped=0x1242bd0c) returned 1
	[0159.845] GetFileType (hFile=0x350) returned 0x1
	[0159.845] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x6c0b, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0159.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0159.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0159.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0159.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2B_0BxcCfd-6mN84d.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2b_0bxccfd-6mn84d.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0159.846] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0159.846] WriteFile (in: hFile=0x354, lpBuffer=0x1272c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1272c500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.846] CloseHandle (hObject=0x354) returned 1
	[0159.847] CloseHandle (hObject=0x350) returned 1
	[0159.847] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2B_0BxcCfd-6mN84d.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2b_0bxccfd-6mn84d.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\2B_0BxcCfd-6mN84d.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\2b_0bxccfd-6mn84d.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0159.852] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0159.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\AdobeARM.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\adobearm.log"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a0318e0, ftCreationTime.dwHighDateTime=0x1d5e82a, ftLastAccessTime.dwLowDateTime=0x6a0318e0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xb20126a0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x5fe)) returned 1
	[0159.852] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0159.852] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882a8 | out: pbBuffer=0x127882a8) returned 1
	[0159.852] ReadFile (in: hFile=0x350, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x1242bd1c*=0x5fe, lpOverlapped=0x0) returned 1
	[0159.912] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0161.167] SetEvent (hEvent=0x70) returned 1
	[0161.167] SetEvent (hEvent=0x2e4) returned 1
	[0161.167] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.326] SetEvent (hEvent=0x80) returned 1
	[0163.327] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.328] SetEvent (hEvent=0x80) returned 1
	[0163.328] SetEvent (hEvent=0x320) returned 1
	[0163.328] SwitchToThread () returned 1
	[0163.329] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.352] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.399] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.407] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.420] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.439] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.454] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.468] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.477] SetEvent (hEvent=0x2e8) returned 1
	[0163.477] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.483] SetEvent (hEvent=0x68) returned 1
	[0163.483] SetEvent (hEvent=0x320) returned 1
	[0163.483] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0163.484] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0163.485] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0163.485] SetEvent (hEvent=0x68) returned 1
	[0163.485] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0163.486] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0163.647] SetEvent (hEvent=0x30c) returned 1
	[0163.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.648] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0163.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab)) returned 1
	[0163.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127328c0 | out: pbBuffer=0x127328c0) returned 1
	[0163.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e878 | out: pbBuffer=0x1251e878) returned 1
	[0163.648] ReadFile (in: hFile=0x34c, lpBuffer=0x1294a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1294a000*, lpNumberOfBytesRead=0x1245bd1c*=0x5ab, lpOverlapped=0x0) returned 1
	[0164.721] GetFileType (hFile=0x34c) returned 0x1
	[0164.721] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.721] WriteFile (in: hFile=0x34c, lpBuffer=0x124b8000*, nNumberOfBytesToWrite=0x5ab, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x124b8000*, lpNumberOfBytesWritten=0x1245bd00*=0x5ab, lpOverlapped=0x1245bd0c) returned 1
	[0164.721] GetFileType (hFile=0x34c) returned 0x1
	[0164.721] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x5ab, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0164.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0164.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0164.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0164.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0164.722] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0164.722] WriteFile (in: hFile=0x350, lpBuffer=0x1262a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262a000*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0164.722] CloseHandle (hObject=0x350) returned 1
	[0164.722] CloseHandle (hObject=0x34c) returned 1
	[0164.723] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0164.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0164.794] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0164.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed)) returned 1
	[0164.794] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732400 | out: pbBuffer=0x12732400) returned 1
	[0164.794] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e508 | out: pbBuffer=0x1251e508) returned 1
	[0164.794] ReadFile (in: hFile=0x350, lpBuffer=0x1292a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1292a000*, lpNumberOfBytesRead=0x1245bd1c*=0x5ed, lpOverlapped=0x0) returned 1
	[0164.983] GetFileType (hFile=0x350) returned 0x1
	[0164.983] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.983] WriteFile (in: hFile=0x350, lpBuffer=0x124b8600*, nNumberOfBytesToWrite=0x5ed, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x124b8600*, lpNumberOfBytesWritten=0x1245bd00*=0x5ed, lpOverlapped=0x1245bd0c) returned 1
	[0164.984] GetFileType (hFile=0x350) returned 0x1
	[0164.984] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x5ed, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0164.984] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0164.985] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0164.985] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0164.985] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e700 | out: pbBuffer=0x1251e700) returned 1
	[0164.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0164.986] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0164.986] WriteFile (in: hFile=0x344, lpBuffer=0x1262aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1262aa00*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0164.987] CloseHandle (hObject=0x344) returned 1
	[0165.117] SwitchToThread () returned 1
	[0165.153] CloseHandle (hObject=0x350) returned 1
	[0165.348] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\bc570ec0de58335afaf92fdc8e3aa330_f4d449ca9e0eaccfe15946f8fcd349fc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0166.858] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0166.867] SetEvent (hEvent=0x68) returned 1
	[0166.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0166.868] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0166.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0166.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0166.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744010 | out: pbBuffer=0x12744010) returned 1
	[0166.869] ReadFile (in: hFile=0x33c, lpBuffer=0x12562000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12562000*, lpNumberOfBytesRead=0x1245dd1c*=0x6e3, lpOverlapped=0x0) returned 1
	[0166.871] GetFileType (hFile=0x33c) returned 0x1
	[0166.871] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.871] WriteFile (in: hFile=0x33c, lpBuffer=0x1261e000*, nNumberOfBytesToWrite=0x6e3, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x1261e000*, lpNumberOfBytesWritten=0x1245dd00*=0x6e3, lpOverlapped=0x1245dd0c) returned 1
	[0166.871] GetFileType (hFile=0x33c) returned 0x1
	[0166.871] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x6e3, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0166.872] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0166.872] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0166.872] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744328 | out: pbBuffer=0x12744328) returned 1
	[0166.872] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0166.872] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0166.872] WriteFile (in: hFile=0x350, lpBuffer=0x125d6500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125d6500*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0166.872] CloseHandle (hObject=0x350) returned 1
	[0166.873] CloseHandle (hObject=0x33c) returned 1
	[0166.874] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_d9b9f37ece595b0b7b6aa12451d392cf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0166.921] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0166.932] SetEvent (hEvent=0x68) returned 1
	[0166.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0166.933] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0166.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663)) returned 1
	[0166.933] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0166.933] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410408 | out: pbBuffer=0x12410408) returned 1
	[0166.934] ReadFile (in: hFile=0x33c, lpBuffer=0x1288a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1288a000*, lpNumberOfBytesRead=0x124f5d1c*=0x663, lpOverlapped=0x0) returned 1
	[0166.937] GetFileType (hFile=0x33c) returned 0x1
	[0166.937] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.937] WriteFile (in: hFile=0x33c, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0x663, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x124f5d00*=0x663, lpOverlapped=0x124f5d0c) returned 1
	[0166.938] GetFileType (hFile=0x33c) returned 0x1
	[0166.938] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x663, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.938] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0166.938] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0166.938] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0166.938] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104e0 | out: pbBuffer=0x124104e0) returned 1
	[0166.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0166.939] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0166.939] WriteFile (in: hFile=0x350, lpBuffer=0x125dc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0166.939] CloseHandle (hObject=0x350) returned 1
	[0166.940] CloseHandle (hObject=0x33c) returned 1
	[0166.942] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d52c56d8f24bec96604372afbaf264e1_e76a2b627dd019eb51d9335f24b14c2c.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0166.972] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0166.979] SetEvent (hEvent=0x68) returned 1
	[0166.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f90f18257cbb4d84216ac1e1f3bb2c76"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0166.981] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0166.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f90f18257cbb4d84216ac1e1f3bb2c76"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226)) returned 1
	[0166.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f120 | out: pbBuffer=0x1240f120) returned 1
	[0166.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0166.981] ReadFile (in: hFile=0x350, lpBuffer=0x1294a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1294a000*, lpNumberOfBytesRead=0x1242bd1c*=0x226, lpOverlapped=0x0) returned 1
	[0166.991] GetFileType (hFile=0x350) returned 0x1
	[0166.991] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.991] WriteFile (in: hFile=0x350, lpBuffer=0x127e0000*, nNumberOfBytesToWrite=0x226, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127e0000*, lpNumberOfBytesWritten=0x1242bd00*=0x226, lpOverlapped=0x1242bd0c) returned 1
	[0166.992] GetFileType (hFile=0x350) returned 0x1
	[0166.992] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x226, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0166.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0166.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0166.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106e0 | out: pbBuffer=0x124106e0) returned 1
	[0166.992] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f90f18257cbb4d84216ac1e1f3bb2c76"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0166.992] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0166.992] WriteFile (in: hFile=0x2cc, lpBuffer=0x125dcf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125dcf00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0166.993] CloseHandle (hObject=0x2cc) returned 1
	[0166.995] CloseHandle (hObject=0x350) returned 1
	[0166.997] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f90f18257cbb4d84216ac1e1f3bb2c76"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\f90f18257cbb4d84216ac1e1f3bb2c76.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0167.033] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166)) returned 1
	[0167.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0167.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0167.033] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12429d1c*=0x166, lpOverlapped=0x0) returned 1
	[0167.044] GetFileType (hFile=0x33c) returned 0x1
	[0167.044] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.045] WriteFile (in: hFile=0x33c, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x166, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x12429d00*=0x166, lpOverlapped=0x12429d0c) returned 1
	[0167.045] GetFileType (hFile=0x33c) returned 0x1
	[0167.045] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x166, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.045] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0167.046] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0167.046] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0167.046] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0167.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.046] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.047] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.047] CloseHandle (hObject=0x344) returned 1
	[0167.047] CloseHandle (hObject=0x33c) returned 1
	[0167.047] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\0f1583fff42fff476a09801acb69213f_e3f4a8c96454d7d3441d2c1bce81f875.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.108] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0167.110] SetEvent (hEvent=0x2e8) returned 1
	[0167.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\23b523c9e7746f715d33c6527c18eb9d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0167.111] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0167.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\23b523c9e7746f715d33c6527c18eb9d"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124)) returned 1
	[0167.111] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0167.111] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0167.111] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x1242bd1c*=0x124, lpOverlapped=0x0) returned 1
	[0167.117] GetFileType (hFile=0x33c) returned 0x1
	[0167.117] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.117] WriteFile (in: hFile=0x33c, lpBuffer=0x12638500*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12638500*, lpNumberOfBytesWritten=0x1242bd00*=0x124, lpOverlapped=0x1242bd0c) returned 1
	[0167.117] GetFileType (hFile=0x33c) returned 0x1
	[0167.117] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x124, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0167.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0167.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0167.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0167.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\23b523c9e7746f715d33c6527c18eb9d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.118] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0167.118] WriteFile (in: hFile=0x350, lpBuffer=0x125dc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.119] CloseHandle (hObject=0x350) returned 1
	[0167.120] CloseHandle (hObject=0x33c) returned 1
	[0167.125] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\23b523c9e7746f715d33c6527c18eb9d"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\23b523c9e7746f715d33c6527c18eb9d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.322] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0167.345] SetEvent (hEvent=0x2e8) returned 1
	[0167.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.346] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0167.346] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1
	[0167.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0167.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0167.347] ReadFile (in: hFile=0x34c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1245bd1c*=0x190, lpOverlapped=0x0) returned 1
	[0167.349] GetFileType (hFile=0x34c) returned 0x1
	[0167.349] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.349] WriteFile (in: hFile=0x34c, lpBuffer=0x12770000*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x12770000*, lpNumberOfBytesWritten=0x1245bd00*=0x190, lpOverlapped=0x1245bd0c) returned 1
	[0167.349] GetFileType (hFile=0x34c) returned 0x1
	[0167.349] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.349] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0167.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0167.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0167.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0167.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0167.350] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0167.350] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.351] CloseHandle (hObject=0x33c) returned 1
	[0167.352] CloseHandle (hObject=0x34c) returned 1
	[0167.363] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\40e450f7ce13419a2ccc2a5445035a0a_06f02b1f13ab4b11b8fc669bde565af1.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.574] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0167.582] SetEvent (hEvent=0x2e8) returned 1
	[0167.582] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.583] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.583] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0167.584] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8c0 | out: pbBuffer=0x1252e8c0) returned 1
	[0167.584] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744548 | out: pbBuffer=0x12744548) returned 1
	[0167.584] ReadFile (in: hFile=0x344, lpBuffer=0x128a6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128a6000*, lpNumberOfBytesRead=0x124f5d1c*=0x194, lpOverlapped=0x0) returned 1
	[0167.587] GetFileType (hFile=0x344) returned 0x1
	[0167.588] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.588] WriteFile (in: hFile=0x344, lpBuffer=0x1260eb60*, nNumberOfBytesToWrite=0x194, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260eb60*, lpNumberOfBytesWritten=0x124f5d00*=0x194, lpOverlapped=0x124f5d0c) returned 1
	[0167.588] GetFileType (hFile=0x344) returned 0x1
	[0167.588] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x194, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0167.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435081 | out: pbBuffer=0x12435081) returned 1
	[0167.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435181 | out: pbBuffer=0x12435181) returned 1
	[0167.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744600 | out: pbBuffer=0x12744600) returned 1
	[0167.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.589] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.589] WriteFile (in: hFile=0x350, lpBuffer=0x125dd900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125dd900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.593] CloseHandle (hObject=0x350) returned 1
	[0167.597] CloseHandle (hObject=0x344) returned 1
	[0167.598] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_2908f682dfc81a793bd240cf29711c77.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.648] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0167.660] SetEvent (hEvent=0x68) returned 1
	[0167.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\696f3de637e6de85b458996d49d759ad"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.662] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\696f3de637e6de85b458996d49d759ad"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4)) returned 1
	[0167.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0167.662] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788020 | out: pbBuffer=0x12788020) returned 1
	[0167.663] ReadFile (in: hFile=0x344, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12429d1c*=0xf4, lpOverlapped=0x0) returned 1
	[0167.665] GetFileType (hFile=0x344) returned 0x1
	[0167.665] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.665] WriteFile (in: hFile=0x344, lpBuffer=0x1248a000*, nNumberOfBytesToWrite=0xf4, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1248a000*, lpNumberOfBytesWritten=0x12429d00*=0xf4, lpOverlapped=0x12429d0c) returned 1
	[0167.665] GetFileType (hFile=0x344) returned 0x1
	[0167.665] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xf4, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.665] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0167.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0167.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0167.666] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0167.666] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\696f3de637e6de85b458996d49d759ad"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.666] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.666] WriteFile (in: hFile=0x350, lpBuffer=0x1277c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277c500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.667] CloseHandle (hObject=0x350) returned 1
	[0167.668] CloseHandle (hObject=0x344) returned 1
	[0167.669] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\696f3de637e6de85b458996d49d759ad"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\696f3de637e6de85b458996d49d759ad.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.723] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0167.730] SetEvent (hEvent=0x68) returned 1
	[0167.730] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.732] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0167.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2)) returned 1
	[0167.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c280 | out: pbBuffer=0x1244c280) returned 1
	[0167.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f0 | out: pbBuffer=0x127880f0) returned 1
	[0167.733] ReadFile (in: hFile=0x344, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f1d1c*=0x1b2, lpOverlapped=0x0) returned 1
	[0167.735] GetFileType (hFile=0x344) returned 0x1
	[0167.735] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.736] WriteFile (in: hFile=0x344, lpBuffer=0x124b2380*, nNumberOfBytesToWrite=0x1b2, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124b2380*, lpNumberOfBytesWritten=0x124f1d00*=0x1b2, lpOverlapped=0x124f1d0c) returned 1
	[0167.736] GetFileType (hFile=0x344) returned 0x1
	[0167.736] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1b2, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.737] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0167.737] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0167.737] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0167.737] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a8 | out: pbBuffer=0x127881a8) returned 1
	[0167.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.737] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0167.738] WriteFile (in: hFile=0x350, lpBuffer=0x1277ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277ca00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.738] CloseHandle (hObject=0x350) returned 1
	[0167.740] CloseHandle (hObject=0x344) returned 1
	[0167.743] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7423f88c7f265f0defc08ea88c3bde45_d975bba8033175c8d112023d8a7a8ad6.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.775] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0167.784] SetEvent (hEvent=0x68) returned 1
	[0167.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.785] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0167.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0167.789] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c560 | out: pbBuffer=0x1244c560) returned 1
	[0167.789] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0167.789] ReadFile (in: hFile=0x344, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1245bd1c*=0x194, lpOverlapped=0x0) returned 1
	[0167.792] GetFileType (hFile=0x344) returned 0x1
	[0167.792] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.792] WriteFile (in: hFile=0x344, lpBuffer=0x127796c0*, nNumberOfBytesToWrite=0x194, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x127796c0*, lpNumberOfBytesWritten=0x1245bd00*=0x194, lpOverlapped=0x1245bd0c) returned 1
	[0167.792] GetFileType (hFile=0x344) returned 0x1
	[0167.792] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x194, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.792] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0167.792] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0167.793] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0167.793] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788278 | out: pbBuffer=0x12788278) returned 1
	[0167.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.793] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0167.793] WriteFile (in: hFile=0x350, lpBuffer=0x1277cf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1277cf00*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.794] CloseHandle (hObject=0x350) returned 1
	[0167.795] CloseHandle (hObject=0x344) returned 1
	[0167.797] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_0a9bfdd75b598c2110cbf610c078e6e6.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.827] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0167.831] SetEvent (hEvent=0x68) returned 1
	[0167.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.833] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0167.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0167.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0167.833] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0167.834] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb28, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb28, ulNumEntriesRemoved=0x33b0fb0c) returned 0
	[0167.835] SetEvent (hEvent=0xa0) returned 1
	[0167.835] SetEvent (hEvent=0x68) returned 1
	[0167.835] ReadFile (in: hFile=0x344, lpBuffer=0x128e6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e6000*, lpNumberOfBytesRead=0x124f5d1c*=0x186, lpOverlapped=0x0) returned 1
	[0167.837] GetFileType (hFile=0x344) returned 0x1
	[0167.837] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.837] WriteFile (in: hFile=0x344, lpBuffer=0x12714000*, nNumberOfBytesToWrite=0x186, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12714000*, lpNumberOfBytesWritten=0x124f5d00*=0x186, lpOverlapped=0x124f5d0c) returned 1
	[0167.837] GetFileType (hFile=0x344) returned 0x1
	[0167.837] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x186, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.838] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0167.838] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0167.838] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0167.838] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103e0 | out: pbBuffer=0x124103e0) returned 1
	[0167.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.838] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.838] WriteFile (in: hFile=0x350, lpBuffer=0x127d4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d4000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.839] CloseHandle (hObject=0x350) returned 1
	[0167.841] CloseHandle (hObject=0x344) returned 1
	[0167.842] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.872] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0167.876] SetEvent (hEvent=0x80) returned 1
	[0167.876] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.877] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0167.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0167.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0167.878] ReadFile (in: hFile=0x34c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x12429d1c*=0x182, lpOverlapped=0x0) returned 1
	[0167.879] GetFileType (hFile=0x34c) returned 0x1
	[0167.879] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.880] WriteFile (in: hFile=0x34c, lpBuffer=0x124b8000*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124b8000*, lpNumberOfBytesWritten=0x12429d00*=0x182, lpOverlapped=0x12429d0c) returned 1
	[0167.880] GetFileType (hFile=0x34c) returned 0x1
	[0167.880] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x182, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.880] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0167.880] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0167.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0167.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0167.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.881] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.881] WriteFile (in: hFile=0x350, lpBuffer=0x12784000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12784000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.881] CloseHandle (hObject=0x350) returned 1
	[0167.884] CloseHandle (hObject=0x34c) returned 1
	[0167.885] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_5ea65844b9ef5670a9c002cbd85b10a4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.914] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0167.922] SetEvent (hEvent=0x80) returned 1
	[0167.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.924] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0167.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0167.924] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0167.924] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0167.924] ReadFile (in: hFile=0x34c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f1d1c*=0x186, lpOverlapped=0x0) returned 1
	[0167.926] GetFileType (hFile=0x34c) returned 0x1
	[0167.926] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.926] WriteFile (in: hFile=0x34c, lpBuffer=0x125de340*, nNumberOfBytesToWrite=0x186, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x125de340*, lpNumberOfBytesWritten=0x124f1d00*=0x186, lpOverlapped=0x124f1d0c) returned 1
	[0167.926] GetFileType (hFile=0x34c) returned 0x1
	[0167.926] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x186, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.927] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0167.927] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0167.927] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0167.927] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106e0 | out: pbBuffer=0x124106e0) returned 1
	[0167.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.927] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0167.927] WriteFile (in: hFile=0x350, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.927] CloseHandle (hObject=0x350) returned 1
	[0167.931] CloseHandle (hObject=0x34c) returned 1
	[0167.932] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_e907d7a04657714b5b06d18bc920971e.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.979] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0168.004] SetEvent (hEvent=0x80) returned 1
	[0168.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.006] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1
	[0168.006] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f6c0 | out: pbBuffer=0x1240f6c0) returned 1
	[0168.006] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410808 | out: pbBuffer=0x12410808) returned 1
	[0168.006] ReadFile (in: hFile=0x34c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0x180, lpOverlapped=0x0) returned 1
	[0168.011] GetFileType (hFile=0x34c) returned 0x1
	[0168.011] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.011] WriteFile (in: hFile=0x34c, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x124f3d00*=0x180, lpOverlapped=0x124f3d0c) returned 1
	[0168.012] GetFileType (hFile=0x34c) returned 0x1
	[0168.012] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x180, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401481 | out: pbBuffer=0x12401481) returned 1
	[0168.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401581 | out: pbBuffer=0x12401581) returned 1
	[0168.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401681 | out: pbBuffer=0x12401681) returned 1
	[0168.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410930 | out: pbBuffer=0x12410930) returned 1
	[0168.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.014] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.014] WriteFile (in: hFile=0x350, lpBuffer=0x1287c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1287c000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.014] CloseHandle (hObject=0x350) returned 1
	[0168.016] CloseHandle (hObject=0x34c) returned 1
	[0168.018] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\828298824ea5549947c17ddabf6871f5_0206efbc540300c3bf0163cdbc3d7d56.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.073] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0168.292] SetEvent (hEvent=0x2e8) returned 1
	[0168.292] SetEvent (hEvent=0x80) returned 1
	[0168.292] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0171.224] SetEvent (hEvent=0x70) returned 1
	[0171.224] SetEvent (hEvent=0x80) returned 1
	[0171.224] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0171.226] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0171.263] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.124] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.197] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.344] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.433] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.444] SetEvent (hEvent=0x2e8) returned 1
	[0172.444] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.448] SetEvent (hEvent=0x2e8) returned 1
	[0172.448] SetEvent (hEvent=0x30c) returned 1
	[0172.448] GetFileType (hFile=0x344) returned 0x1
	[0172.448] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.448] WriteFile (in: hFile=0x344, lpBuffer=0x12993000*, nNumberOfBytesToWrite=0xe14, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12993000*, lpNumberOfBytesWritten=0x12429d00*=0xe14, lpOverlapped=0x12429d0c) returned 1
	[0172.448] GetFileType (hFile=0x344) returned 0x1
	[0172.448] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xe14, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.448] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0172.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0172.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0172.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0172.449] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.449] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.449] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.454] CloseHandle (hObject=0x34c) returned 1
	[0172.463] CloseHandle (hObject=0x344) returned 1
	[0172.466] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.559] SetEvent (hEvent=0x30c) returned 1
	[0172.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.560] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb477d930, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb477d930, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb47c9bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0172.561] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127323a0 | out: pbBuffer=0x127323a0) returned 1
	[0172.561] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0172.561] ReadFile (in: hFile=0x33c, lpBuffer=0x12918000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12918000*, lpNumberOfBytesRead=0x12429d1c*=0x4000, lpOverlapped=0x0) returned 1
	[0172.565] GetFileType (hFile=0x33c) returned 0x1
	[0172.565] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.565] WriteFile (in: hFile=0x33c, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x12429d00*=0x4000, lpOverlapped=0x12429d0c) returned 1
	[0172.565] GetFileType (hFile=0x33c) returned 0x1
	[0172.565] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.565] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0172.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0172.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0172.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0172.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.566] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.566] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.567] CloseHandle (hObject=0x2dc) returned 1
	[0172.568] CloseHandle (hObject=0x33c) returned 1
	[0172.569] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.598] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.602] SetEvent (hEvent=0x80) returned 1
	[0172.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.603] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000)) returned 1
	[0172.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732640 | out: pbBuffer=0x12732640) returned 1
	[0172.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0172.603] ReadFile (in: hFile=0x344, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x12769d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0172.613] GetFileType (hFile=0x344) returned 0x1
	[0172.613] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.613] WriteFile (in: hFile=0x344, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12769d00*=0x20000, lpOverlapped=0x12769d0c) returned 1
	[0172.615] GetFileType (hFile=0x344) returned 0x1
	[0172.615] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.615] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0172.615] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0172.615] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8901 | out: pbBuffer=0x127e8901) returned 1
	[0172.615] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410580 | out: pbBuffer=0x12410580) returned 1
	[0172.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.616] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.616] WriteFile (in: hFile=0x34c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.617] CloseHandle (hObject=0x34c) returned 1
	[0172.618] CloseHandle (hObject=0x344) returned 1
	[0172.619] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.652] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.661] SetEvent (hEvent=0x30c) returned 1
	[0172.661] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.664] SetEvent (hEvent=0x318) returned 1
	[0172.664] SetEvent (hEvent=0x2e8) returned 1
	[0172.664] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.676] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.677] SetEvent (hEvent=0x318) returned 1
	[0172.677] SetEvent (hEvent=0x80) returned 1
	[0172.677] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.688] SetEvent (hEvent=0x30c) returned 1
	[0172.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Uq mHRas8RtOvUqDx.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uq mhras8rtovuqdx.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xddbab690, ftCreationTime.dwHighDateTime=0x1d5db77, ftLastAccessTime.dwLowDateTime=0xd46a9330, ftLastAccessTime.dwHighDateTime=0x1d5e74d, ftLastWriteTime.dwLowDateTime=0xd46a9330, ftLastWriteTime.dwHighDateTime=0x1d5e74d, nFileSizeHigh=0x0, nFileSizeLow=0x10b44)) returned 1
	[0172.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\b ltgosvw.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\b ltgosvw.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95513410, ftCreationTime.dwHighDateTime=0x1d5e30b, ftLastAccessTime.dwLowDateTime=0x235395e0, ftLastAccessTime.dwHighDateTime=0x1d5e498, ftLastWriteTime.dwLowDateTime=0x235395e0, ftLastWriteTime.dwHighDateTime=0x1d5e498, nFileSizeHigh=0x0, nFileSizeLow=0x117aa)) returned 1
	[0172.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Uq mHRas8RtOvUqDx.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uq mhras8rtovuqdx.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.697] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Uq mHRas8RtOvUqDx.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uq mhras8rtovuqdx.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xddbab690, ftCreationTime.dwHighDateTime=0x1d5db77, ftLastAccessTime.dwLowDateTime=0xd46a9330, ftLastAccessTime.dwHighDateTime=0x1d5e74d, ftLastWriteTime.dwLowDateTime=0xd46a9330, ftLastWriteTime.dwHighDateTime=0x1d5e74d, nFileSizeHigh=0x0, nFileSizeLow=0x10b44)) returned 1
	[0172.697] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0172.697] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0172.697] ReadFile (in: hFile=0x344, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12769d1c*=0x10b44, lpOverlapped=0x0) returned 1
	[0172.723] GetFileType (hFile=0x344) returned 0x1
	[0172.723] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.724] WriteFile (in: hFile=0x344, lpBuffer=0x12592000*, nNumberOfBytesToWrite=0x10b44, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12592000*, lpNumberOfBytesWritten=0x12769d00*=0x10b44, lpOverlapped=0x12769d0c) returned 1
	[0172.724] GetFileType (hFile=0x344) returned 0x1
	[0172.724] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x10b44, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8101 | out: pbBuffer=0x127e8101) returned 1
	[0172.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8201 | out: pbBuffer=0x127e8201) returned 1
	[0172.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8301 | out: pbBuffer=0x127e8301) returned 1
	[0172.770] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744340 | out: pbBuffer=0x12744340) returned 1
	[0172.770] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Uq mHRas8RtOvUqDx.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uq mhras8rtovuqdx.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.770] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.770] WriteFile (in: hFile=0x33c, lpBuffer=0x124b6000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b6000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.771] CloseHandle (hObject=0x33c) returned 1
	[0172.771] CloseHandle (hObject=0x344) returned 1
	[0172.777] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Uq mHRas8RtOvUqDx.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uq mhras8rtovuqdx.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Uq mHRas8RtOvUqDx.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uq mhras8rtovuqdx.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.785] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.802] SetEvent (hEvent=0x318) returned 1
	[0172.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cDuUfzDckOk7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cduufzdckok7.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.804] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0172.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cDuUfzDckOk7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cduufzdckok7.png"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54422790, ftCreationTime.dwHighDateTime=0x1d5df5a, ftLastAccessTime.dwLowDateTime=0xee358400, ftLastAccessTime.dwHighDateTime=0x1d5df50, ftLastWriteTime.dwLowDateTime=0xee358400, ftLastWriteTime.dwHighDateTime=0x1d5df50, nFileSizeHigh=0x0, nFileSizeLow=0x12d31)) returned 1
	[0172.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0172.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744368 | out: pbBuffer=0x12744368) returned 1
	[0172.804] ReadFile (in: hFile=0x33c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1242bd1c*=0x12d31, lpOverlapped=0x0) returned 1
	[0172.932] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.955] GetFileType (hFile=0x33c) returned 0x1
	[0172.956] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.956] WriteFile (in: hFile=0x33c, lpBuffer=0x128ce000*, nNumberOfBytesToWrite=0x12d31, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x128ce000*, lpNumberOfBytesWritten=0x1242bd00*=0x12d31, lpOverlapped=0x1242bd0c) returned 1
	[0172.956] GetFileType (hFile=0x33c) returned 0x1
	[0172.956] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x12d31, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.956] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8501 | out: pbBuffer=0x127e8501) returned 1
	[0172.956] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0172.957] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0172.957] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744490 | out: pbBuffer=0x12744490) returned 1
	[0172.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cDuUfzDckOk7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cduufzdckok7.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.957] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0172.957] WriteFile (in: hFile=0x1e4, lpBuffer=0x124b6500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x124b6500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.957] CloseHandle (hObject=0x1e4) returned 1
	[0172.957] CloseHandle (hObject=0x33c) returned 1
	[0172.957] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cDuUfzDckOk7.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cduufzdckok7.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cDuUfzDckOk7.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cduufzdckok7.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lV2thUy TpXUKyZ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lv2thuy tpxukyz.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.965] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0172.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lV2thUy TpXUKyZ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lv2thuy tpxukyz.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x47820280, ftCreationTime.dwHighDateTime=0x1d5dff2, ftLastAccessTime.dwLowDateTime=0x55f09370, ftLastAccessTime.dwHighDateTime=0x1d5e021, ftLastWriteTime.dwLowDateTime=0x55f09370, ftLastWriteTime.dwHighDateTime=0x1d5e021, nFileSizeHigh=0x0, nFileSizeLow=0x7c3d)) returned 1
	[0172.965] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0172.965] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127444b8 | out: pbBuffer=0x127444b8) returned 1
	[0172.965] ReadFile (in: hFile=0x33c, lpBuffer=0x128e2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128e2000*, lpNumberOfBytesRead=0x1242bd1c*=0x7c3d, lpOverlapped=0x0) returned 1
	[0172.974] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.978] SetEvent (hEvent=0xa0) returned 1
	[0172.978] SetEvent (hEvent=0x318) returned 1
	[0172.978] GetFileType (hFile=0x33c) returned 0x1
	[0172.978] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0172.992] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.992] WriteFile (in: hFile=0x33c, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x7c3d, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x1242bd00*=0x7c3d, lpOverlapped=0x1242bd0c) returned 1
	[0172.992] GetFileType (hFile=0x33c) returned 0x1
	[0172.992] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x7c3d, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.992] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0172.993] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0172.993] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0172.993] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744330 | out: pbBuffer=0x12744330) returned 1
	[0172.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lV2thUy TpXUKyZ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lv2thuy tpxukyz.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.993] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0172.993] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.993] CloseHandle (hObject=0x1e4) returned 1
	[0172.993] CloseHandle (hObject=0x33c) returned 1
	[0172.994] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lV2thUy TpXUKyZ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lv2thuy tpxukyz.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lV2thUy TpXUKyZ.rtf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lv2thuy tpxukyz.rtf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lCNCVSn nhy PV-rE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lcncvsn nhy pv-re.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.002] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.002] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lCNCVSn nhy PV-rE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lcncvsn nhy pv-re.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cb44f0, ftCreationTime.dwHighDateTime=0x1d5e7c6, ftLastAccessTime.dwLowDateTime=0x23c8a350, ftLastAccessTime.dwHighDateTime=0x1d5e0bd, ftLastWriteTime.dwLowDateTime=0x23c8a350, ftLastWriteTime.dwHighDateTime=0x1d5e0bd, nFileSizeHigh=0x0, nFileSizeLow=0x8ecf)) returned 1
	[0173.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0173.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744358 | out: pbBuffer=0x12744358) returned 1
	[0173.003] ReadFile (in: hFile=0x33c, lpBuffer=0x126fc000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x126fc000*, lpNumberOfBytesRead=0x12767d1c*=0x8ecf, lpOverlapped=0x0) returned 1
	[0173.069] GetFileType (hFile=0x33c) returned 0x1
	[0173.069] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.069] WriteFile (in: hFile=0x33c, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x8ecf, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x12767d00*=0x8ecf, lpOverlapped=0x12767d0c) returned 1
	[0173.069] GetFileType (hFile=0x33c) returned 0x1
	[0173.069] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x8ecf, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.069] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec401 | out: pbBuffer=0x124ec401) returned 1
	[0173.070] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec501 | out: pbBuffer=0x124ec501) returned 1
	[0173.070] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec601 | out: pbBuffer=0x124ec601) returned 1
	[0173.070] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744570 | out: pbBuffer=0x12744570) returned 1
	[0173.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lCNCVSn nhy PV-rE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lcncvsn nhy pv-re.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.070] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.070] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.071] CloseHandle (hObject=0x1e4) returned 1
	[0173.071] CloseHandle (hObject=0x33c) returned 1
	[0173.071] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lCNCVSn nhy PV-rE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lcncvsn nhy pv-re.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lCNCVSn nhy PV-rE.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lcncvsn nhy pv-re.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.114] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0173.121] SetEvent (hEvent=0x318) returned 1
	[0173.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uQs_GiNMl.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uqs_ginml.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.122] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0173.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uQs_GiNMl.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uqs_ginml.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef81d40, ftCreationTime.dwHighDateTime=0x1d5dd19, ftLastAccessTime.dwLowDateTime=0xae474a00, ftLastAccessTime.dwHighDateTime=0x1d5d9a0, ftLastWriteTime.dwLowDateTime=0xae474a00, ftLastWriteTime.dwHighDateTime=0x1d5d9a0, nFileSizeHigh=0x0, nFileSizeLow=0x2092)) returned 1
	[0173.122] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0173.122] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0173.123] ReadFile (in: hFile=0x33c, lpBuffer=0x1268e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1268e000*, lpNumberOfBytesRead=0x12769d1c*=0x2092, lpOverlapped=0x0) returned 1
	[0173.125] GetFileType (hFile=0x33c) returned 0x1
	[0173.125] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.125] WriteFile (in: hFile=0x33c, lpBuffer=0x1259a000*, nNumberOfBytesToWrite=0x2092, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1259a000*, lpNumberOfBytesWritten=0x12769d00*=0x2092, lpOverlapped=0x12769d0c) returned 1
	[0173.125] GetFileType (hFile=0x33c) returned 0x1
	[0173.125] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x2092, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400901 | out: pbBuffer=0x12400901) returned 1
	[0173.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0173.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0173.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0173.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uQs_GiNMl.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uqs_ginml.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.126] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0173.126] WriteFile (in: hFile=0x344, lpBuffer=0x125ea500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ea500*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.126] CloseHandle (hObject=0x344) returned 1
	[0173.133] CloseHandle (hObject=0x33c) returned 1
	[0173.133] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uQs_GiNMl.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uqs_ginml.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\uQs_GiNMl.mp4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\uqs_ginml.mp4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.182] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0173.192] SetEvent (hEvent=0x80) returned 1
	[0173.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\zBhNx8pere.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zbhnx8pere.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.194] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0173.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\zBhNx8pere.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zbhnx8pere.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12613ad0 | out: lpFileInformation=0x12613ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ef0ce90, ftCreationTime.dwHighDateTime=0x1d5e1cb, ftLastAccessTime.dwLowDateTime=0xc0e4b3d0, ftLastAccessTime.dwHighDateTime=0x1d5de3e, ftLastWriteTime.dwLowDateTime=0xc0e4b3d0, ftLastWriteTime.dwHighDateTime=0x1d5de3e, nFileSizeHigh=0x0, nFileSizeLow=0x18edd)) returned 1
	[0173.194] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0173.194] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0173.194] ReadFile (in: hFile=0x344, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12613d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x12613d1c*=0x18edd, lpOverlapped=0x0) returned 1
	[0173.213] GetFileType (hFile=0x344) returned 0x1
	[0173.213] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.213] WriteFile (in: hFile=0x344, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x18edd, lpNumberOfBytesWritten=0x12613d00, lpOverlapped=0x12613d0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12613d00*=0x18edd, lpOverlapped=0x12613d0c) returned 1
	[0173.214] GetFileType (hFile=0x344) returned 0x1
	[0173.214] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x18edd, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0173.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0173.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0173.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0173.215] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\zBhNx8pere.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zbhnx8pere.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0173.215] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0173.215] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12613d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12613d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.215] CloseHandle (hObject=0x2dc) returned 1
	[0173.224] CloseHandle (hObject=0x344) returned 1
	[0173.238] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\zBhNx8pere.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zbhnx8pere.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\zBhNx8pere.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\zbhnx8pere.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.446] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0173.454] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0173.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4wgcKnqzp.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4wgcknqzp.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.471] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0173.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4wgcKnqzp.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4wgcknqzp.png"), fInfoLevelId=0x0, lpFileInformation=0x12613ad0 | out: lpFileInformation=0x12613ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6cd12a0, ftCreationTime.dwHighDateTime=0x1d5e2f2, ftLastAccessTime.dwLowDateTime=0xec21710, ftLastAccessTime.dwHighDateTime=0x1d5e546, ftLastWriteTime.dwLowDateTime=0xec21710, ftLastWriteTime.dwHighDateTime=0x1d5e546, nFileSizeHigh=0x0, nFileSizeLow=0xd5eb)) returned 1
	[0173.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0173.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0173.471] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12613d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12613d1c*=0xd5eb, lpOverlapped=0x0) returned 1
	[0173.475] GetFileType (hFile=0x344) returned 0x1
	[0173.475] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.476] WriteFile (in: hFile=0x344, lpBuffer=0x126b2000*, nNumberOfBytesToWrite=0xd5eb, lpNumberOfBytesWritten=0x12613d00, lpOverlapped=0x12613d0c | out: lpBuffer=0x126b2000*, lpNumberOfBytesWritten=0x12613d00*=0xd5eb, lpOverlapped=0x12613d0c) returned 1
	[0173.476] GetFileType (hFile=0x344) returned 0x1
	[0173.476] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xd5eb, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.476] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271c201 | out: pbBuffer=0x1271c201) returned 1
	[0173.484] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271c301 | out: pbBuffer=0x1271c301) returned 1
	[0173.484] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271c401 | out: pbBuffer=0x1271c401) returned 1
	[0173.485] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0173.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4wgcKnqzp.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4wgcknqzp.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0173.485] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0173.485] WriteFile (in: hFile=0x2dc, lpBuffer=0x127ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12613d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee000*, lpNumberOfBytesWritten=0x12613d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.485] CloseHandle (hObject=0x2dc) returned 1
	[0173.489] CloseHandle (hObject=0x344) returned 1
	[0173.491] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4wgcKnqzp.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4wgcknqzp.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4wgcKnqzp.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4wgcknqzp.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DUbL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dubl.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.623] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0173.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DUbL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dubl.avi"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0de1f0, ftCreationTime.dwHighDateTime=0x1d5d800, ftLastAccessTime.dwLowDateTime=0xebc31290, ftLastAccessTime.dwHighDateTime=0x1d5e5e1, ftLastWriteTime.dwLowDateTime=0xebc31290, ftLastWriteTime.dwHighDateTime=0x1d5e5e1, nFileSizeHigh=0x0, nFileSizeLow=0x6d51)) returned 1
	[0173.623] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0173.623] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0173.624] ReadFile (in: hFile=0x344, lpBuffer=0x12970000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12970000*, lpNumberOfBytesRead=0x1260fd1c*=0x6d51, lpOverlapped=0x0) returned 1
	[0173.627] GetFileType (hFile=0x344) returned 0x1
	[0173.627] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.627] WriteFile (in: hFile=0x344, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x6d51, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x1260fd00*=0x6d51, lpOverlapped=0x1260fd0c) returned 1
	[0173.628] GetFileType (hFile=0x344) returned 0x1
	[0173.628] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x6d51, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.628] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271ca01 | out: pbBuffer=0x1271ca01) returned 1
	[0173.628] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271cb01 | out: pbBuffer=0x1271cb01) returned 1
	[0173.628] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271cc01 | out: pbBuffer=0x1271cc01) returned 1
	[0173.628] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0173.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DUbL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dubl.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.628] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0173.628] WriteFile (in: hFile=0x33c, lpBuffer=0x127eea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x127eea00*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.635] CloseHandle (hObject=0x33c) returned 1
	[0173.638] CloseHandle (hObject=0x344) returned 1
	[0173.640] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DUbL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dubl.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DUbL.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dubl.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.685] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0173.686] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0173.687] SetEvent (hEvent=0x80) returned 1
	[0173.687] SetEvent (hEvent=0x2e8) returned 1
	[0173.687] SwitchToThread () returned 1
	[0173.690] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0173.703] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0173.716] SetEvent (hEvent=0x2e8) returned 1
	[0173.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OJqu0YWzgtSqMwrpo.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ojqu0ywzgtsqmwrpo.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.718] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0173.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OJqu0YWzgtSqMwrpo.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ojqu0ywzgtsqmwrpo.ods"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a44da0, ftCreationTime.dwHighDateTime=0x1d5dba4, ftLastAccessTime.dwLowDateTime=0xb6cb4620, ftLastAccessTime.dwHighDateTime=0x1d5e3f7, ftLastWriteTime.dwLowDateTime=0xb6cb4620, ftLastWriteTime.dwHighDateTime=0x1d5e3f7, nFileSizeHigh=0x0, nFileSizeLow=0x123db)) returned 1
	[0173.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0173.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0173.718] ReadFile (in: hFile=0x344, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1260fd1c*=0x123db, lpOverlapped=0x0) returned 1
	[0173.724] GetFileType (hFile=0x344) returned 0x1
	[0173.724] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.724] WriteFile (in: hFile=0x344, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x123db, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x1260fd00*=0x123db, lpOverlapped=0x1260fd0c) returned 1
	[0173.725] GetFileType (hFile=0x344) returned 0x1
	[0173.725] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x123db, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0173.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0173.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0173.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0173.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OJqu0YWzgtSqMwrpo.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ojqu0ywzgtsqmwrpo.ods"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.726] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0173.726] WriteFile (in: hFile=0x1e4, lpBuffer=0x127e4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x127e4000*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.726] CloseHandle (hObject=0x1e4) returned 1
	[0173.728] CloseHandle (hObject=0x344) returned 1
	[0173.730] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OJqu0YWzgtSqMwrpo.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ojqu0ywzgtsqmwrpo.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OJqu0YWzgtSqMwrpo.ods.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ojqu0ywzgtsqmwrpo.ods.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.790] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0173.824] SetEvent (hEvent=0x2e8) returned 1
	[0173.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\50aZNtE50d7uJ8et.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\50aznte50d7uj8et.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.825] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0173.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\50aZNtE50d7uJ8et.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\50aznte50d7uj8et.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd38380, ftCreationTime.dwHighDateTime=0x1d5e011, ftLastAccessTime.dwLowDateTime=0x86defdb0, ftLastAccessTime.dwHighDateTime=0x1d5e1ec, ftLastWriteTime.dwLowDateTime=0x86defdb0, ftLastWriteTime.dwHighDateTime=0x1d5e1ec, nFileSizeHigh=0x0, nFileSizeLow=0xaddc)) returned 1
	[0173.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ef80 | out: pbBuffer=0x1240ef80) returned 1
	[0173.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0173.825] ReadFile (in: hFile=0x1e4, lpBuffer=0x12570000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12570000*, lpNumberOfBytesRead=0x1276dd1c*=0xaddc, lpOverlapped=0x0) returned 1
	[0173.841] GetFileType (hFile=0x1e4) returned 0x1
	[0173.841] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.842] WriteFile (in: hFile=0x1e4, lpBuffer=0x125b0000*, nNumberOfBytesToWrite=0xaddc, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x125b0000*, lpNumberOfBytesWritten=0x1276dd00*=0xaddc, lpOverlapped=0x1276dd0c) returned 1
	[0173.842] GetFileType (hFile=0x1e4) returned 0x1
	[0173.842] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0xaddc, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.842] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0173.842] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0173.842] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0173.842] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0173.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\50aZNtE50d7uJ8et.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\50aznte50d7uj8et.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.843] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0173.843] WriteFile (in: hFile=0x33c, lpBuffer=0x127e4a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x127e4a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.843] CloseHandle (hObject=0x33c) returned 1
	[0173.848] CloseHandle (hObject=0x1e4) returned 1
	[0173.848] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\50aZNtE50d7uJ8et.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\50aznte50d7uj8et.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\50aZNtE50d7uJ8et.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\50aznte50d7uj8et.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.005] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.216] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.267] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.283] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.299] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.315] SetEvent (hEvent=0x68) returned 1
	[0174.315] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.318] SetEvent (hEvent=0x80) returned 1
	[0174.319] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0174.323] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0174.324] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0174.324] SetEvent (hEvent=0x2e8) returned 1
	[0174.324] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0174.333] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.341] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.359] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.375] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.389] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.431] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.455] SetEvent (hEvent=0x70) returned 1
	[0174.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y91lC8B.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y91lc8b.ods"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f57500, ftCreationTime.dwHighDateTime=0x1d5e386, ftLastAccessTime.dwLowDateTime=0xae2d2de0, ftLastAccessTime.dwHighDateTime=0x1d5df28, ftLastWriteTime.dwLowDateTime=0xae2d2de0, ftLastWriteTime.dwHighDateTime=0x1d5df28, nFileSizeHigh=0x0, nFileSizeLow=0x4d47)) returned 1
	[0174.457] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.533] SetEvent (hEvent=0x68) returned 1
	[0174.533] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.546] SetEvent (hEvent=0x80) returned 1
	[0174.546] SwitchToThread () returned 1
	[0174.560] SetEvent (hEvent=0x80) returned 1
	[0174.560] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.563] SetEvent (hEvent=0x80) returned 1
	[0174.563] SetEvent (hEvent=0x30c) returned 1
	[0174.563] SetEvent (hEvent=0x68) returned 1
	[0174.564] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.579] SetEvent (hEvent=0x68) returned 1
	[0174.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gxHrQlTHsed.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gxhrqlthsed.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.580] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gxHrQlTHsed.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gxhrqlthsed.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d71260, ftCreationTime.dwHighDateTime=0x1d5e7cd, ftLastAccessTime.dwLowDateTime=0xa0627c70, ftLastAccessTime.dwHighDateTime=0x1d5dce8, ftLastWriteTime.dwLowDateTime=0xa0627c70, ftLastWriteTime.dwHighDateTime=0x1d5dce8, nFileSizeHigh=0x0, nFileSizeLow=0x5f06)) returned 1
	[0174.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0174.580] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0174.580] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1276dd1c*=0x5f06, lpOverlapped=0x0) returned 1
	[0174.614] GetFileType (hFile=0x33c) returned 0x1
	[0174.614] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.614] WriteFile (in: hFile=0x33c, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x5f06, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x1276dd00*=0x5f06, lpOverlapped=0x1276dd0c) returned 1
	[0174.614] GetFileType (hFile=0x33c) returned 0x1
	[0174.614] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x5f06, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.615] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8101 | out: pbBuffer=0x127e8101) returned 1
	[0174.615] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8201 | out: pbBuffer=0x127e8201) returned 1
	[0174.616] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8301 | out: pbBuffer=0x127e8301) returned 1
	[0174.616] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c8 | out: pbBuffer=0x124103c8) returned 1
	[0174.616] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gxHrQlTHsed.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gxhrqlthsed.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0174.616] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.616] WriteFile (in: hFile=0x2dc, lpBuffer=0x1263c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.616] CloseHandle (hObject=0x2dc) returned 1
	[0174.623] CloseHandle (hObject=0x33c) returned 1
	[0174.624] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gxHrQlTHsed.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gxhrqlthsed.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\gxHrQlTHsed.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gxhrqlthsed.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.661] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3q52z1IG2f.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3q52z1ig2f.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0174.770] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3q52z1IG2f.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3q52z1ig2f.doc"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b0fddb0, ftCreationTime.dwHighDateTime=0x1d5e395, ftLastAccessTime.dwLowDateTime=0x65160340, ftLastAccessTime.dwHighDateTime=0x1d5df8a, ftLastWriteTime.dwLowDateTime=0x65160340, ftLastWriteTime.dwHighDateTime=0x1d5df8a, nFileSizeHigh=0x0, nFileSizeLow=0x7d4b)) returned 1
	[0174.770] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0174.770] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0174.770] ReadFile (in: hFile=0x1e4, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12767d1c*=0x7d4b, lpOverlapped=0x0) returned 1
	[0174.789] GetFileType (hFile=0x1e4) returned 0x1
	[0174.789] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.789] WriteFile (in: hFile=0x1e4, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x7d4b, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x12767d00*=0x7d4b, lpOverlapped=0x12767d0c) returned 1
	[0174.789] GetFileType (hFile=0x1e4) returned 0x1
	[0174.789] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x7d4b, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec101 | out: pbBuffer=0x124ec101) returned 1
	[0174.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0174.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0174.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0174.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3q52z1IG2f.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3q52z1ig2f.doc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.790] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.790] WriteFile (in: hFile=0x34c, lpBuffer=0x12658000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12658000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.790] CloseHandle (hObject=0x34c) returned 1
	[0174.793] CloseHandle (hObject=0x1e4) returned 1
	[0174.794] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3q52z1IG2f.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3q52z1ig2f.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3q52z1IG2f.doc.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3q52z1ig2f.doc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.822] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.825] SetEvent (hEvent=0x68) returned 1
	[0174.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4AV0W2vHFFyiKq.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4av0w2vhffyikq.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0174.826] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4AV0W2vHFFyiKq.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4av0w2vhffyikq.ods"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x832e2670, ftCreationTime.dwHighDateTime=0x1d5ddd5, ftLastAccessTime.dwLowDateTime=0x3ed28eb0, ftLastAccessTime.dwHighDateTime=0x1d5e011, ftLastWriteTime.dwLowDateTime=0x3ed28eb0, ftLastWriteTime.dwHighDateTime=0x1d5e011, nFileSizeHigh=0x0, nFileSizeLow=0x36b1)) returned 1
	[0174.826] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732860 | out: pbBuffer=0x12732860) returned 1
	[0174.826] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744488 | out: pbBuffer=0x12744488) returned 1
	[0174.826] ReadFile (in: hFile=0x1e4, lpBuffer=0x1290c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1290c000*, lpNumberOfBytesRead=0x1242bd1c*=0x36b1, lpOverlapped=0x0) returned 1
	[0174.830] GetFileType (hFile=0x1e4) returned 0x1
	[0174.830] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.830] WriteFile (in: hFile=0x1e4, lpBuffer=0x1289a000*, nNumberOfBytesToWrite=0x36b1, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1289a000*, lpNumberOfBytesWritten=0x1242bd00*=0x36b1, lpOverlapped=0x1242bd0c) returned 1
	[0174.830] GetFileType (hFile=0x1e4) returned 0x1
	[0174.830] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x36b1, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.830] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0174.830] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0174.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0174.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744540 | out: pbBuffer=0x12744540) returned 1
	[0174.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4AV0W2vHFFyiKq.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4av0w2vhffyikq.ods"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.831] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.831] WriteFile (in: hFile=0x34c, lpBuffer=0x1272ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1272ca00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.831] CloseHandle (hObject=0x34c) returned 1
	[0174.832] CloseHandle (hObject=0x1e4) returned 1
	[0174.833] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4AV0W2vHFFyiKq.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4av0w2vhffyikq.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4AV0W2vHFFyiKq.ods.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4av0w2vhffyikq.ods.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.865] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.869] SetEvent (hEvent=0x30c) returned 1
	[0174.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9Ku0amEFC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9ku0amefc.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.871] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9Ku0amEFC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9ku0amefc.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18d0a070, ftCreationTime.dwHighDateTime=0x1d5dc39, ftLastAccessTime.dwLowDateTime=0xd6ba8010, ftLastAccessTime.dwHighDateTime=0x1d5e3ff, ftLastWriteTime.dwLowDateTime=0xd6ba8010, ftLastWriteTime.dwHighDateTime=0x1d5e3ff, nFileSizeHigh=0x0, nFileSizeLow=0x15626)) returned 1
	[0174.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0174.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0174.871] ReadFile (in: hFile=0x344, lpBuffer=0x128b0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x128b0000*, lpNumberOfBytesRead=0x1276dd1c*=0x15626, lpOverlapped=0x0) returned 1
	[0174.876] GetFileType (hFile=0x344) returned 0x1
	[0174.876] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.876] WriteFile (in: hFile=0x344, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x15626, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x1276dd00*=0x15626, lpOverlapped=0x1276dd0c) returned 1
	[0174.876] GetFileType (hFile=0x344) returned 0x1
	[0174.877] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x15626, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0174.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0174.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0174.877] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0174.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9Ku0amEFC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9ku0amefc.pdf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.877] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.877] WriteFile (in: hFile=0x33c, lpBuffer=0x1272c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1272c000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.878] CloseHandle (hObject=0x33c) returned 1
	[0174.880] CloseHandle (hObject=0x344) returned 1
	[0174.881] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9Ku0amEFC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9ku0amefc.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9Ku0amEFC.pdf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9ku0amefc.pdf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.912] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.916] SetEvent (hEvent=0x30c) returned 1
	[0174.916] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DCFtleBnIxF2X_m.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcftlebnixf2x_m.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.917] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DCFtleBnIxF2X_m.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcftlebnixf2x_m.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa25983c0, ftCreationTime.dwHighDateTime=0x1d58770, ftLastAccessTime.dwLowDateTime=0x875f1830, ftLastAccessTime.dwHighDateTime=0x1d568a0, ftLastWriteTime.dwLowDateTime=0x875f1830, ftLastWriteTime.dwHighDateTime=0x1d568a0, nFileSizeHigh=0x0, nFileSizeLow=0xfdb3)) returned 1
	[0174.917] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0174.917] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0174.917] ReadFile (in: hFile=0x344, lpBuffer=0x1266a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1266a000*, lpNumberOfBytesRead=0x12767d1c*=0xfdb3, lpOverlapped=0x0) returned 1
	[0174.921] GetFileType (hFile=0x344) returned 0x1
	[0174.921] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.921] WriteFile (in: hFile=0x344, lpBuffer=0x12718000*, nNumberOfBytesToWrite=0xfdb3, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12718000*, lpNumberOfBytesWritten=0x12767d00*=0xfdb3, lpOverlapped=0x12767d0c) returned 1
	[0174.922] GetFileType (hFile=0x344) returned 0x1
	[0174.922] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xfdb3, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.922] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0174.922] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec301 | out: pbBuffer=0x124ec301) returned 1
	[0174.922] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec401 | out: pbBuffer=0x124ec401) returned 1
	[0174.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0174.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DCFtleBnIxF2X_m.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcftlebnixf2x_m.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.923] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.923] WriteFile (in: hFile=0x33c, lpBuffer=0x12602000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12602000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.923] CloseHandle (hObject=0x33c) returned 1
	[0174.924] CloseHandle (hObject=0x344) returned 1
	[0174.925] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DCFtleBnIxF2X_m.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcftlebnixf2x_m.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DCFtleBnIxF2X_m.xlsx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcftlebnixf2x_m.xlsx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.957] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0174.966] SetEvent (hEvent=0x30c) returned 1
	[0174.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IG2NoYwlJvOGpIXh6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ig2noywljvogpixh6.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.968] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0174.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IG2NoYwlJvOGpIXh6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ig2noywljvogpixh6.docx"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa11c6c30, ftCreationTime.dwHighDateTime=0x1d5aad8, ftLastAccessTime.dwLowDateTime=0x99d94530, ftLastAccessTime.dwHighDateTime=0x1d56cd3, ftLastWriteTime.dwLowDateTime=0x99d94530, ftLastWriteTime.dwHighDateTime=0x1d56cd3, nFileSizeHigh=0x0, nFileSizeLow=0x16ab5)) returned 1
	[0174.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0174.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0174.968] ReadFile (in: hFile=0x344, lpBuffer=0x12930000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x12930000*, lpNumberOfBytesRead=0x12611d1c*=0x16ab5, lpOverlapped=0x0) returned 1
	[0174.974] GetFileType (hFile=0x344) returned 0x1
	[0174.974] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.974] WriteFile (in: hFile=0x344, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0x16ab5, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x12611d00*=0x16ab5, lpOverlapped=0x12611d0c) returned 1
	[0174.975] GetFileType (hFile=0x344) returned 0x1
	[0174.975] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x16ab5, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0174.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0174.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0174.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0174.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IG2NoYwlJvOGpIXh6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ig2noywljvogpixh6.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.976] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0174.976] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.976] CloseHandle (hObject=0x33c) returned 1
	[0174.978] CloseHandle (hObject=0x344) returned 1
	[0174.979] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IG2NoYwlJvOGpIXh6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ig2noywljvogpixh6.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IG2NoYwlJvOGpIXh6.docx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ig2noywljvogpixh6.docx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0175.006] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0175.010] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0175.011] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0175.011] SetEvent (hEvent=0x70) returned 1
	[0175.011] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0175.013] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0176.127] SetEvent (hEvent=0x2e8) returned 1
	[0176.127] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0176.227] SetEvent (hEvent=0x2e8) returned 1
	[0176.227] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0176.240] SetEvent (hEvent=0x2e8) returned 1
	[0176.240] SetEvent (hEvent=0x80) returned 1
	[0176.241] GetFileType (hFile=0x1e4) returned 0x1
	[0176.241] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.241] WriteFile (in: hFile=0x1e4, lpBuffer=0x126f4000*, nNumberOfBytesToWrite=0x14cce, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x126f4000*, lpNumberOfBytesWritten=0x12767d00*=0x14cce, lpOverlapped=0x12767d0c) returned 1
	[0176.242] GetFileType (hFile=0x1e4) returned 0x1
	[0176.242] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x14cce, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.242] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0176.242] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0176.242] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0176.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0176.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xi5_KGPIcF9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xi5_kgpicf9.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0176.243] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0176.243] WriteFile (in: hFile=0x350, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.243] CloseHandle (hObject=0x350) returned 1
	[0176.243] CloseHandle (hObject=0x1e4) returned 1
	[0176.243] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xi5_KGPIcF9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xi5_kgpicf9.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xi5_KGPIcF9.pptx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xi5_kgpicf9.pptx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZRae5xMKGljR.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zrae5xmkgljr.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0176.248] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0176.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZRae5xMKGljR.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zrae5xmkgljr.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe598a90, ftCreationTime.dwHighDateTime=0x1d5a663, ftLastAccessTime.dwLowDateTime=0xa1b17860, ftLastAccessTime.dwHighDateTime=0x1d56c9f, ftLastWriteTime.dwLowDateTime=0xa1b17860, ftLastWriteTime.dwHighDateTime=0x1d56c9f, nFileSizeHigh=0x0, nFileSizeLow=0x7e06)) returned 1
	[0176.248] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0176.248] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0176.248] ReadFile (in: hFile=0x1e4, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12767d1c*=0x7e06, lpOverlapped=0x0) returned 1
	[0176.334] GetFileType (hFile=0x1e4) returned 0x1
	[0176.334] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.334] WriteFile (in: hFile=0x1e4, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x7e06, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x12767d00*=0x7e06, lpOverlapped=0x12767d0c) returned 1
	[0176.335] GetFileType (hFile=0x1e4) returned 0x1
	[0176.335] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x7e06, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0176.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0176.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8801 | out: pbBuffer=0x127e8801) returned 1
	[0176.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0176.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZRae5xMKGljR.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zrae5xmkgljr.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0176.335] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0176.335] WriteFile (in: hFile=0x34c, lpBuffer=0x1260ca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1260ca00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.336] CloseHandle (hObject=0x34c) returned 1
	[0176.336] CloseHandle (hObject=0x1e4) returned 1
	[0176.336] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZRae5xMKGljR.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zrae5xmkgljr.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZRae5xMKGljR.pptx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zrae5xmkgljr.pptx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.674] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0176.675] SetEvent (hEvent=0x30c) returned 1
	[0176.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0176.676] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0176.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0176.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0176.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744010 | out: pbBuffer=0x12744010) returned 1
	[0176.677] ReadFile (in: hFile=0x1e4, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x12767d1c*=0x192, lpOverlapped=0x0) returned 1
	[0176.679] GetFileType (hFile=0x1e4) returned 0x1
	[0176.679] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.679] WriteFile (in: hFile=0x1e4, lpBuffer=0x1270c000*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1270c000*, lpNumberOfBytesWritten=0x12767d00*=0x192, lpOverlapped=0x12767d0c) returned 1
	[0176.679] GetFileType (hFile=0x1e4) returned 0x1
	[0176.679] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0176.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0176.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0176.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d8 | out: pbBuffer=0x127440d8) returned 1
	[0176.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0176.680] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0176.680] WriteFile (in: hFile=0x33c, lpBuffer=0x125ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ee000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.680] CloseHandle (hObject=0x33c) returned 1
	[0176.681] CloseHandle (hObject=0x1e4) returned 1
	[0176.682] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i1NGxT_2.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i1ngxt_2.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0176.837] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0176.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i1NGxT_2.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i1ngxt_2.pps"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77674a40, ftCreationTime.dwHighDateTime=0x1d5e467, ftLastAccessTime.dwLowDateTime=0xf9b12750, ftLastAccessTime.dwHighDateTime=0x1d5d977, ftLastWriteTime.dwLowDateTime=0xf9b12750, ftLastWriteTime.dwHighDateTime=0x1d5d977, nFileSizeHigh=0x0, nFileSizeLow=0x14a3c)) returned 1
	[0176.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0176.837] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f0 | out: pbBuffer=0x127440f0) returned 1
	[0176.837] ReadFile (in: hFile=0x2dc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f5d1c*=0x14a3c, lpOverlapped=0x0) returned 1
	[0176.843] GetFileType (hFile=0x2dc) returned 0x1
	[0176.843] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.843] WriteFile (in: hFile=0x2dc, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x14a3c, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x124f5d00*=0x14a3c, lpOverlapped=0x124f5d0c) returned 1
	[0176.844] GetFileType (hFile=0x2dc) returned 0x1
	[0176.845] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x14a3c, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.845] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0176.846] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb28, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb28, ulNumEntriesRemoved=0x33b0fb0c) returned 0
	[0176.846] SetEvent (hEvent=0x2e8) returned 1
	[0176.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0176.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0176.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744528 | out: pbBuffer=0x12744528) returned 1
	[0176.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i1NGxT_2.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i1ngxt_2.pps"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0176.847] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0176.847] WriteFile (in: hFile=0x34c, lpBuffer=0x125ee500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ee500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.848] CloseHandle (hObject=0x34c) returned 1
	[0176.853] CloseHandle (hObject=0x2dc) returned 1
	[0176.854] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i1NGxT_2.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i1ngxt_2.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\i1NGxT_2.pps.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i1ngxt_2.pps.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.895] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0176.898] SetEvent (hEvent=0x318) returned 1
	[0176.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jeFFyoPYYV1p-.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jeffyopyyv1p-.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0176.900] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0176.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jeFFyoPYYV1p-.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jeffyopyyv1p-.docx"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55b32bc0, ftCreationTime.dwHighDateTime=0x1d5e2d3, ftLastAccessTime.dwLowDateTime=0x7bd431d0, ftLastAccessTime.dwHighDateTime=0x1d5da15, ftLastWriteTime.dwLowDateTime=0x7bd431d0, ftLastWriteTime.dwHighDateTime=0x1d5da15, nFileSizeHigh=0x0, nFileSizeLow=0x11cd2)) returned 1
	[0176.900] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e4a0 | out: pbBuffer=0x1240e4a0) returned 1
	[0176.900] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788128 | out: pbBuffer=0x12788128) returned 1
	[0176.900] ReadFile (in: hFile=0x1e4, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f3d1c*=0x11cd2, lpOverlapped=0x0) returned 1
	[0176.905] GetFileType (hFile=0x1e4) returned 0x1
	[0176.905] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.905] WriteFile (in: hFile=0x1e4, lpBuffer=0x1271c000*, nNumberOfBytesToWrite=0x11cd2, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1271c000*, lpNumberOfBytesWritten=0x124f3d00*=0x11cd2, lpOverlapped=0x124f3d0c) returned 1
	[0176.905] GetFileType (hFile=0x1e4) returned 0x1
	[0176.905] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x11cd2, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0176.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0176.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0176.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881f0 | out: pbBuffer=0x127881f0) returned 1
	[0176.906] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jeFFyoPYYV1p-.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jeffyopyyv1p-.docx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0176.906] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0176.906] WriteFile (in: hFile=0x344, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.906] CloseHandle (hObject=0x344) returned 1
	[0176.907] CloseHandle (hObject=0x1e4) returned 1
	[0176.909] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jeFFyoPYYV1p-.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jeffyopyyv1p-.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\jeFFyoPYYV1p-.docx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\jeffyopyyv1p-.docx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.979] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0177.036] SetEvent (hEvent=0x318) returned 1
	[0177.036] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lZDPaudj3O QTkuAu.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lzdpaudj3o qtkuau.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0177.038] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0177.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lZDPaudj3O QTkuAu.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lzdpaudj3o qtkuau.doc"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82575890, ftCreationTime.dwHighDateTime=0x1d5de50, ftLastAccessTime.dwLowDateTime=0x2dcd59f0, ftLastAccessTime.dwHighDateTime=0x1d5d7b6, ftLastWriteTime.dwLowDateTime=0x2dcd59f0, ftLastWriteTime.dwHighDateTime=0x1d5d7b6, nFileSizeHigh=0x0, nFileSizeLow=0xb55c)) returned 1
	[0177.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0177.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744478 | out: pbBuffer=0x12744478) returned 1
	[0177.038] ReadFile (in: hFile=0x34c, lpBuffer=0x1268e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1268e000*, lpNumberOfBytesRead=0x1242bd1c*=0xb55c, lpOverlapped=0x0) returned 1
	[0177.048] GetFileType (hFile=0x34c) returned 0x1
	[0177.048] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.048] WriteFile (in: hFile=0x34c, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0xb55c, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x1242bd00*=0xb55c, lpOverlapped=0x1242bd0c) returned 1
	[0177.048] GetFileType (hFile=0x34c) returned 0x1
	[0177.048] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xb55c, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a01 | out: pbBuffer=0x127e8a01) returned 1
	[0177.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0177.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0177.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744570 | out: pbBuffer=0x12744570) returned 1
	[0177.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lZDPaudj3O QTkuAu.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lzdpaudj3o qtkuau.doc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0177.049] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0177.049] WriteFile (in: hFile=0x344, lpBuffer=0x125eef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125eef00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0177.049] CloseHandle (hObject=0x344) returned 1
	[0177.063] CloseHandle (hObject=0x34c) returned 1
	[0177.086] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lZDPaudj3O QTkuAu.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lzdpaudj3o qtkuau.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\lZDPaudj3O QTkuAu.doc.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lzdpaudj3o qtkuau.doc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.136] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0177.144] SetEvent (hEvent=0x318) returned 1
	[0177.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n5qCmJE8IyM7pwIxOV5H.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\n5qcmje8iym7pwixov5h.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0177.145] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0177.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n5qCmJE8IyM7pwIxOV5H.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\n5qcmje8iym7pwixov5h.rtf"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd23fb0, ftCreationTime.dwHighDateTime=0x1d5d7ff, ftLastAccessTime.dwLowDateTime=0x8837a0, ftLastAccessTime.dwHighDateTime=0x1d5db88, ftLastWriteTime.dwLowDateTime=0x8837a0, ftLastWriteTime.dwHighDateTime=0x1d5db88, nFileSizeHigh=0x0, nFileSizeLow=0x13a7f)) returned 1
	[0177.145] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732860 | out: pbBuffer=0x12732860) returned 1
	[0177.145] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0177.146] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0177.149] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb28, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb28, ulNumEntriesRemoved=0x33b0fb0c) returned 0
	[0177.149] SetEvent (hEvent=0xa0) returned 1
	[0177.149] SetEvent (hEvent=0x318) returned 1
	[0177.149] ReadFile (in: hFile=0x34c, lpBuffer=0x1289a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1289a000*, lpNumberOfBytesRead=0x12767d1c*=0x13a7f, lpOverlapped=0x0) returned 1
	[0177.155] GetFileType (hFile=0x34c) returned 0x1
	[0177.155] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.155] WriteFile (in: hFile=0x34c, lpBuffer=0x128e4000*, nNumberOfBytesToWrite=0x13a7f, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x128e4000*, lpNumberOfBytesWritten=0x12767d00*=0x13a7f, lpOverlapped=0x12767d0c) returned 1
	[0177.155] GetFileType (hFile=0x34c) returned 0x1
	[0177.155] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x13a7f, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.155] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0177.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0177.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0177.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127882b0 | out: pbBuffer=0x127882b0) returned 1
	[0177.156] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n5qCmJE8IyM7pwIxOV5H.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\n5qcmje8iym7pwixov5h.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0177.156] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0177.156] WriteFile (in: hFile=0x2dc, lpBuffer=0x127ea500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ea500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0177.156] CloseHandle (hObject=0x2dc) returned 1
	[0177.158] CloseHandle (hObject=0x34c) returned 1
	[0177.160] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n5qCmJE8IyM7pwIxOV5H.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\n5qcmje8iym7pwixov5h.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\n5qCmJE8IyM7pwIxOV5H.rtf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\n5qcmje8iym7pwixov5h.rtf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.190] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0177.200] SetEvent (hEvent=0x30c) returned 1
	[0177.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yWe19NnqLCh.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ywe19nnqlch.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0177.201] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0177.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yWe19NnqLCh.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ywe19nnqlch.ppt"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ed9faf0, ftCreationTime.dwHighDateTime=0x1d5da40, ftLastAccessTime.dwLowDateTime=0x2ffa06c0, ftLastAccessTime.dwHighDateTime=0x1d5e0f2, ftLastWriteTime.dwLowDateTime=0x2ffa06c0, ftLastWriteTime.dwHighDateTime=0x1d5e0f2, nFileSizeHigh=0x0, nFileSizeLow=0xb6e1)) returned 1
	[0177.201] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0177.201] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788020 | out: pbBuffer=0x12788020) returned 1
	[0177.201] ReadFile (in: hFile=0x34c, lpBuffer=0x128fa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128fa000*, lpNumberOfBytesRead=0x124f5d1c*=0xb6e1, lpOverlapped=0x0) returned 1
	[0177.218] GetFileType (hFile=0x34c) returned 0x1
	[0177.218] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.218] WriteFile (in: hFile=0x34c, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0xb6e1, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x124f5d00*=0xb6e1, lpOverlapped=0x124f5d0c) returned 1
	[0177.218] GetFileType (hFile=0x34c) returned 0x1
	[0177.218] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xb6e1, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0177.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0177.219] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0177.219] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0177.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yWe19NnqLCh.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ywe19nnqlch.ppt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0177.219] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0177.219] WriteFile (in: hFile=0x33c, lpBuffer=0x125f8000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f8000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0177.219] CloseHandle (hObject=0x33c) returned 1
	[0177.244] CloseHandle (hObject=0x34c) returned 1
	[0177.315] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yWe19NnqLCh.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ywe19nnqlch.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\yWe19NnqLCh.ppt.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ywe19nnqlch.ppt.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.470] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0178.081] SetEvent (hEvent=0x70) returned 1
	[0178.081] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0178.086] SetEvent (hEvent=0x68) returned 1
	[0178.087] SetEvent (hEvent=0x318) returned 1
	[0178.087] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0178.087] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0178.088] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0178.088] SetEvent (hEvent=0x68) returned 1
	[0178.088] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0178.088] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0179.977] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0180.484] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0180.671] SetEvent (hEvent=0x30c) returned 1
	[0180.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0180.672] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0180.672] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6)) returned 1
	[0180.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0180.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0180.672] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0180.706] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0180.706] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb28, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb28, ulNumEntriesRemoved=0x33b0fb0c) returned 0
	[0180.707] SetEvent (hEvent=0x30c) returned 1
	[0180.707] SetEvent (hEvent=0x318) returned 1
	[0180.708] ReadFile (in: hFile=0x33c, lpBuffer=0x12904000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12904000*, lpNumberOfBytesRead=0x1242bd1c*=0x1e6, lpOverlapped=0x0) returned 1
	[0180.709] GetFileType (hFile=0x33c) returned 0x1
	[0180.709] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0180.709] WriteFile (in: hFile=0x33c, lpBuffer=0x1263c000*, nNumberOfBytesToWrite=0x1e6, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1263c000*, lpNumberOfBytesWritten=0x1242bd00*=0x1e6, lpOverlapped=0x1242bd0c) returned 1
	[0180.709] GetFileType (hFile=0x33c) returned 0x1
	[0180.709] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1e6, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0180.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0180.710] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0180.710] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0180.710] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0180.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0180.751] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0180.751] WriteFile (in: hFile=0x344, lpBuffer=0x12770500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12770500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0180.751] CloseHandle (hObject=0x344) returned 1
	[0180.751] CloseHandle (hObject=0x33c) returned 1
	[0180.751] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0181.981] SetEvent (hEvent=0xa0) returned 1
	[0181.981] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0182.464] SetEvent (hEvent=0x70) returned 1
	[0182.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0182.465] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0182.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244)) returned 1
	[0182.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0182.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0182.465] ReadFile (in: hFile=0x34c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f5d1c*=0x244, lpOverlapped=0x0) returned 1
	[0182.467] GetFileType (hFile=0x34c) returned 0x1
	[0182.467] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0182.467] WriteFile (in: hFile=0x34c, lpBuffer=0x12622780*, nNumberOfBytesToWrite=0x244, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12622780*, lpNumberOfBytesWritten=0x124f5d00*=0x244, lpOverlapped=0x124f5d0c) returned 1
	[0182.468] GetFileType (hFile=0x34c) returned 0x1
	[0182.468] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x244, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0182.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0182.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0182.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0182.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0182.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0182.470] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0182.471] WriteFile (in: hFile=0x1e4, lpBuffer=0x12770a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12770a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0182.471] CloseHandle (hObject=0x1e4) returned 1
	[0182.551] CloseHandle (hObject=0x34c) returned 1
	[0182.632] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0182.975] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0183.016] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0183.051] SetEvent (hEvent=0x70) returned 1
	[0183.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\cUBfh0Uy-2kRB6QQS.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\cubfh0uy-2krb6qqs.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.053] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0183.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\cUBfh0Uy-2kRB6QQS.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\cubfh0uy-2krb6qqs.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ce5f940, ftCreationTime.dwHighDateTime=0x1d5e6a7, ftLastAccessTime.dwLowDateTime=0x7d11d610, ftLastAccessTime.dwHighDateTime=0x1d5db82, ftLastWriteTime.dwLowDateTime=0x7d11d610, ftLastWriteTime.dwHighDateTime=0x1d5db82, nFileSizeHigh=0x0, nFileSizeLow=0xbf8f)) returned 1
	[0183.053] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c480 | out: pbBuffer=0x1244c480) returned 1
	[0183.053] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410558 | out: pbBuffer=0x12410558) returned 1
	[0183.053] ReadFile (in: hFile=0x2dc, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f5d1c*=0xbf8f, lpOverlapped=0x0) returned 1
	[0183.076] GetFileType (hFile=0x2dc) returned 0x1
	[0183.076] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.076] WriteFile (in: hFile=0x2dc, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0xbf8f, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x124f5d00*=0xbf8f, lpOverlapped=0x124f5d0c) returned 1
	[0183.077] GetFileType (hFile=0x2dc) returned 0x1
	[0183.077] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0xbf8f, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.077] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0183.077] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0183.077] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0183.077] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410630 | out: pbBuffer=0x12410630) returned 1
	[0183.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\cUBfh0Uy-2kRB6QQS.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\cubfh0uy-2krb6qqs.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.078] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0183.078] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.078] CloseHandle (hObject=0x344) returned 1
	[0183.090] CloseHandle (hObject=0x2dc) returned 1
	[0183.102] SetEvent (hEvent=0x2e8) returned 1
	[0183.102] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0183.108] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0183.122] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0183.122] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0183.122] SetEvent (hEvent=0x68) returned 1
	[0183.122] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0183.133] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0183.133] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\cUBfh0Uy-2kRB6QQS.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\cubfh0uy-2krb6qqs.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\cUBfh0Uy-2kRB6QQS.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\cubfh0uy-2krb6qqs.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.136] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7bc10, ftCreationTime.dwHighDateTime=0x1d5e13e, ftLastAccessTime.dwLowDateTime=0x43eacc50, ftLastAccessTime.dwHighDateTime=0x1d5e624, ftLastWriteTime.dwLowDateTime=0x43eacc50, ftLastWriteTime.dwHighDateTime=0x1d5e624, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0183.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0183.137] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7bc10, ftCreationTime.dwHighDateTime=0x1d5e13e, ftLastAccessTime.dwLowDateTime=0x43eacc50, ftLastAccessTime.dwHighDateTime=0x1d5e624, ftLastWriteTime.dwLowDateTime=0x43eacc50, ftLastWriteTime.dwHighDateTime=0x1d5e624, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0183.146] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8a7bc10, ftCreationTime.dwHighDateTime=0x1d5e13e, ftLastAccessTime.dwLowDateTime=0x43eacc50, ftLastAccessTime.dwHighDateTime=0x1d5e624, ftLastWriteTime.dwLowDateTime=0x43eacc50, ftLastWriteTime.dwHighDateTime=0x1d5e624, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0183.146] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe43f1830, ftCreationTime.dwHighDateTime=0x1d5dfe6, ftLastAccessTime.dwLowDateTime=0xf3a72840, ftLastAccessTime.dwHighDateTime=0x1d5d95a, ftLastWriteTime.dwLowDateTime=0xf3a72840, ftLastWriteTime.dwHighDateTime=0x1d5d95a, nFileSizeHigh=0x0, nFileSizeLow=0x4c56, dwReserved0=0x0, dwReserved1=0x0, cFileName="DiGKNDUtXuB4hlkF-1.wav", cAlternateFileName="DIGKND~1.WAV")) returned 1
	[0183.146] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeadedfd0, ftCreationTime.dwHighDateTime=0x1d5dbeb, ftLastAccessTime.dwLowDateTime=0xa73fa990, ftLastAccessTime.dwHighDateTime=0x1d5dd7f, ftLastWriteTime.dwLowDateTime=0xa73fa990, ftLastWriteTime.dwHighDateTime=0x1d5dd7f, nFileSizeHigh=0x0, nFileSizeLow=0xb11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hpNap.wav", cAlternateFileName="")) returned 1
	[0183.146] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b338c90, ftCreationTime.dwHighDateTime=0x1d5e7f3, ftLastAccessTime.dwLowDateTime=0xf221f2c0, ftLastAccessTime.dwHighDateTime=0x1d5dc16, ftLastWriteTime.dwLowDateTime=0xf221f2c0, ftLastWriteTime.dwHighDateTime=0x1d5dc16, nFileSizeHigh=0x0, nFileSizeLow=0x30ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="IvRPZEaw.mp3", cAlternateFileName="")) returned 1
	[0183.146] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19cc2510, ftCreationTime.dwHighDateTime=0x1d5ddc6, ftLastAccessTime.dwLowDateTime=0x10e94780, ftLastAccessTime.dwHighDateTime=0x1d5dc6c, ftLastWriteTime.dwLowDateTime=0x10e94780, ftLastWriteTime.dwHighDateTime=0x1d5dc6c, nFileSizeHigh=0x0, nFileSizeLow=0x14f28, dwReserved0=0x0, dwReserved1=0x0, cFileName="T0Uv3wpO.wav", cAlternateFileName="")) returned 1
	[0183.146] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0183.147] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0183.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0183.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0183.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.151] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0183.151] WriteFile (in: hFile=0x2dc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0183.152] CloseHandle (hObject=0x2dc) returned 1
	[0183.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\DiGKNDUtXuB4hlkF-1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\digkndutxub4hlkf-1.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe43f1830, ftCreationTime.dwHighDateTime=0x1d5dfe6, ftLastAccessTime.dwLowDateTime=0xf3a72840, ftLastAccessTime.dwHighDateTime=0x1d5d95a, ftLastWriteTime.dwLowDateTime=0xf3a72840, ftLastWriteTime.dwHighDateTime=0x1d5d95a, nFileSizeHigh=0x0, nFileSizeLow=0x4c56)) returned 1
	[0183.153] SetEvent (hEvent=0x68) returned 1
	[0183.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\IvRPZEaw.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\ivrpzeaw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b338c90, ftCreationTime.dwHighDateTime=0x1d5e7f3, ftLastAccessTime.dwLowDateTime=0xf221f2c0, ftLastAccessTime.dwHighDateTime=0x1d5dc16, ftLastWriteTime.dwLowDateTime=0xf221f2c0, ftLastWriteTime.dwHighDateTime=0x1d5dc16, nFileSizeHigh=0x0, nFileSizeLow=0x30ff)) returned 1
	[0183.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\T0Uv3wpO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\t0uv3wpo.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19cc2510, ftCreationTime.dwHighDateTime=0x1d5ddc6, ftLastAccessTime.dwLowDateTime=0x10e94780, ftLastAccessTime.dwHighDateTime=0x1d5dc6c, ftLastWriteTime.dwLowDateTime=0x10e94780, ftLastWriteTime.dwHighDateTime=0x1d5dc6c, nFileSizeHigh=0x0, nFileSizeLow=0x14f28)) returned 1
	[0183.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\hpNap.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\hpnap.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeadedfd0, ftCreationTime.dwHighDateTime=0x1d5dbeb, ftLastAccessTime.dwLowDateTime=0xa73fa990, ftLastAccessTime.dwHighDateTime=0x1d5dd7f, ftLastWriteTime.dwLowDateTime=0xa73fa990, ftLastWriteTime.dwHighDateTime=0x1d5dd7f, nFileSizeHigh=0x0, nFileSizeLow=0xb11a)) returned 1
	[0183.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\W47IEbkFsT0lZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\w47iebkfst0lz.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfc206d0, ftCreationTime.dwHighDateTime=0x1d5e29f, ftLastAccessTime.dwLowDateTime=0x7158fc90, ftLastAccessTime.dwHighDateTime=0x1d5de43, ftLastWriteTime.dwLowDateTime=0x7158fc90, ftLastWriteTime.dwHighDateTime=0x1d5de43, nFileSizeHigh=0x0, nFileSizeLow=0x83ea)) returned 1
	[0183.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\hpNap.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\hpnap.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.163] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0183.163] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\hpNap.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\hpnap.wav"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeadedfd0, ftCreationTime.dwHighDateTime=0x1d5dbeb, ftLastAccessTime.dwLowDateTime=0xa73fa990, ftLastAccessTime.dwHighDateTime=0x1d5dd7f, ftLastWriteTime.dwLowDateTime=0xa73fa990, ftLastWriteTime.dwHighDateTime=0x1d5dd7f, nFileSizeHigh=0x0, nFileSizeLow=0xb11a)) returned 1
	[0183.163] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3a0 | out: pbBuffer=0x1240e3a0) returned 1
	[0183.163] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788098 | out: pbBuffer=0x12788098) returned 1
	[0183.163] ReadFile (in: hFile=0x34c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1242bd1c*=0xb11a, lpOverlapped=0x0) returned 1
	[0183.189] GetFileType (hFile=0x34c) returned 0x1
	[0183.189] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.189] WriteFile (in: hFile=0x34c, lpBuffer=0x1271a000*, nNumberOfBytesToWrite=0xb11a, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1271a000*, lpNumberOfBytesWritten=0x1242bd00*=0xb11a, lpOverlapped=0x1242bd0c) returned 1
	[0183.189] GetFileType (hFile=0x34c) returned 0x1
	[0183.189] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xb11a, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.190] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0183.190] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0183.190] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0183.190] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788150 | out: pbBuffer=0x12788150) returned 1
	[0183.215] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\hpNap.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\hpnap.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0183.215] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0183.215] WriteFile (in: hFile=0x1e4, lpBuffer=0x127de000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127de000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.215] CloseHandle (hObject=0x1e4) returned 1
	[0183.215] CloseHandle (hObject=0x34c) returned 1
	[0183.215] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\hpNap.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\hpnap.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\hpNap.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\hpnap.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.219] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\7cnWgjSIxz6a6j.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\7cnwgjsixz6a6j.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c26adc0, ftCreationTime.dwHighDateTime=0x1d5d8d3, ftLastAccessTime.dwLowDateTime=0x362d7ac0, ftLastAccessTime.dwHighDateTime=0x1d5e257, ftLastWriteTime.dwLowDateTime=0x362d7ac0, ftLastWriteTime.dwHighDateTime=0x1d5e257, nFileSizeHigh=0x0, nFileSizeLow=0x134b5)) returned 1
	[0183.220] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e3d3230, ftCreationTime.dwHighDateTime=0x1d5e6fe, ftLastAccessTime.dwLowDateTime=0x9ae19790, ftLastAccessTime.dwHighDateTime=0x1d5e27e, ftLastWriteTime.dwLowDateTime=0x9ae19790, ftLastWriteTime.dwHighDateTime=0x1d5e27e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0183.221] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0183.221] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e3d3230, ftCreationTime.dwHighDateTime=0x1d5e6fe, ftLastAccessTime.dwLowDateTime=0x9ae19790, ftLastAccessTime.dwHighDateTime=0x1d5e27e, ftLastWriteTime.dwLowDateTime=0x9ae19790, ftLastWriteTime.dwHighDateTime=0x1d5e27e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0183.237] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0183.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\sTgqujIHysw6RJ8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\stgqujihysw6rj8.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.286] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\sTgqujIHysw6RJ8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\stgqujihysw6rj8.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x331f2a90, ftCreationTime.dwHighDateTime=0x1d5d7e9, ftLastAccessTime.dwLowDateTime=0xc60fdbb0, ftLastAccessTime.dwHighDateTime=0x1d5dbd6, ftLastWriteTime.dwLowDateTime=0xc60fdbb0, ftLastWriteTime.dwHighDateTime=0x1d5dbd6, nFileSizeHigh=0x0, nFileSizeLow=0xb0fd)) returned 1
	[0183.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0183.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0183.286] ReadFile (in: hFile=0x34c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12767d1c*=0xb0fd, lpOverlapped=0x0) returned 1
	[0183.311] GetFileType (hFile=0x34c) returned 0x1
	[0183.312] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.312] WriteFile (in: hFile=0x34c, lpBuffer=0x127d4000*, nNumberOfBytesToWrite=0xb0fd, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x127d4000*, lpNumberOfBytesWritten=0x12767d00*=0xb0fd, lpOverlapped=0x12767d0c) returned 1
	[0183.313] GetFileType (hFile=0x34c) returned 0x1
	[0183.313] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xb0fd, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0183.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0183.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0183.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744310 | out: pbBuffer=0x12744310) returned 1
	[0183.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\sTgqujIHysw6RJ8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\stgqujihysw6rj8.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.314] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.314] WriteFile (in: hFile=0x2dc, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.325] CloseHandle (hObject=0x2dc) returned 1
	[0183.325] CloseHandle (hObject=0x34c) returned 1
	[0183.325] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\sTgqujIHysw6RJ8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\stgqujihysw6rj8.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\sTgqujIHysw6RJ8.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\stgqujihysw6rj8.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\kGT4gm0xlJ Hu4Fzmv1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\kgt4gm0xlj hu4fzmv1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.329] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.329] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\kGT4gm0xlJ Hu4Fzmv1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\kgt4gm0xlj hu4fzmv1.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3afe2ea0, ftCreationTime.dwHighDateTime=0x1d5e626, ftLastAccessTime.dwLowDateTime=0x7140cf00, ftLastAccessTime.dwHighDateTime=0x1d5dda6, ftLastWriteTime.dwLowDateTime=0x7140cf00, ftLastWriteTime.dwHighDateTime=0x1d5dda6, nFileSizeHigh=0x0, nFileSizeLow=0x3754)) returned 1
	[0183.329] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127323e0 | out: pbBuffer=0x127323e0) returned 1
	[0183.329] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744338 | out: pbBuffer=0x12744338) returned 1
	[0183.329] ReadFile (in: hFile=0x34c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12767d1c*=0x3754, lpOverlapped=0x0) returned 1
	[0183.342] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0183.354] SetEvent (hEvent=0x30c) returned 1
	[0183.354] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0183.651] SetEvent (hEvent=0x2e8) returned 1
	[0183.651] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0183.656] SetEvent (hEvent=0x80) returned 1
	[0183.657] SetEvent (hEvent=0x70) returned 1
	[0183.657] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0183.676] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0183.676] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x0
	[0183.686] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0183.686] SetEvent (hEvent=0x68) returned 1
	[0183.686] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0183.693] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0183.694] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HYv95_2F.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hyv95_2f.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.695] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0183.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HYv95_2F.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hyv95_2f.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31517f0, ftCreationTime.dwHighDateTime=0x1d5e66d, ftLastAccessTime.dwLowDateTime=0xca00f650, ftLastAccessTime.dwHighDateTime=0x1d5e3c9, ftLastWriteTime.dwLowDateTime=0xca00f650, ftLastWriteTime.dwHighDateTime=0x1d5e3c9, nFileSizeHigh=0x0, nFileSizeLow=0xe2b2)) returned 1
	[0183.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0183.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0183.695] ReadFile (in: hFile=0x33c, lpBuffer=0x1258c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1258c000*, lpNumberOfBytesRead=0x1276dd1c*=0xe2b2, lpOverlapped=0x0) returned 1
	[0183.715] GetFileType (hFile=0x33c) returned 0x1
	[0183.715] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.715] WriteFile (in: hFile=0x33c, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0xe2b2, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x1276dd00*=0xe2b2, lpOverlapped=0x1276dd0c) returned 1
	[0183.716] GetFileType (hFile=0x33c) returned 0x1
	[0183.716] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xe2b2, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.716] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0183.716] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0183.717] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0183.717] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0183.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HYv95_2F.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hyv95_2f.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.717] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0183.717] WriteFile (in: hFile=0x34c, lpBuffer=0x12742000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12742000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.717] CloseHandle (hObject=0x34c) returned 1
	[0183.717] CloseHandle (hObject=0x33c) returned 1
	[0183.718] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HYv95_2F.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hyv95_2f.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HYv95_2F.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hyv95_2f.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.721] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0183.721] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8)) returned 1
	[0183.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c2c0 | out: pbBuffer=0x1244c2c0) returned 1
	[0183.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0183.722] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12429d1c*=0x1f8, lpOverlapped=0x0) returned 1
	[0183.724] GetFileType (hFile=0x33c) returned 0x1
	[0183.724] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.724] WriteFile (in: hFile=0x33c, lpBuffer=0x125ae400*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125ae400*, lpNumberOfBytesWritten=0x12429d00*=0x1f8, lpOverlapped=0x12429d0c) returned 1
	[0183.724] GetFileType (hFile=0x33c) returned 0x1
	[0183.724] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0183.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0183.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0183.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0183.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.725] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0183.725] WriteFile (in: hFile=0x34c, lpBuffer=0x12742500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12742500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.725] CloseHandle (hObject=0x34c) returned 1
	[0183.726] CloseHandle (hObject=0x33c) returned 1
	[0183.726] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.729] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\0z4rLjFebCjEx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\0z4rljfebcjex.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.730] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\0z4rLjFebCjEx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\0z4rljfebcjex.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f2ef30, ftCreationTime.dwHighDateTime=0x1d5e215, ftLastAccessTime.dwLowDateTime=0xe9262150, ftLastAccessTime.dwHighDateTime=0x1d5df22, ftLastWriteTime.dwLowDateTime=0xe9262150, ftLastWriteTime.dwHighDateTime=0x1d5df22, nFileSizeHigh=0x0, nFileSizeLow=0xcbcd)) returned 1
	[0183.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c5a0 | out: pbBuffer=0x1244c5a0) returned 1
	[0183.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744378 | out: pbBuffer=0x12744378) returned 1
	[0183.731] ReadFile (in: hFile=0x33c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12767d1c*=0xcbcd, lpOverlapped=0x0) returned 1
	[0183.758] GetFileType (hFile=0x33c) returned 0x1
	[0183.758] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.758] WriteFile (in: hFile=0x33c, lpBuffer=0x12882000*, nNumberOfBytesToWrite=0xcbcd, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12882000*, lpNumberOfBytesWritten=0x12767d00*=0xcbcd, lpOverlapped=0x12767d0c) returned 1
	[0183.759] GetFileType (hFile=0x33c) returned 0x1
	[0183.759] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xcbcd, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0183.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0183.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401681 | out: pbBuffer=0x12401681) returned 1
	[0183.759] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744430 | out: pbBuffer=0x12744430) returned 1
	[0183.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\0z4rLjFebCjEx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\0z4rljfebcjex.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.759] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.759] WriteFile (in: hFile=0x2dc, lpBuffer=0x12742a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12742a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.765] CloseHandle (hObject=0x2dc) returned 1
	[0183.765] CloseHandle (hObject=0x33c) returned 1
	[0183.765] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\0z4rLjFebCjEx.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\0z4rljfebcjex.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\0z4rLjFebCjEx.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\0z4rljfebcjex.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\4_fPzbCxmDTNY2BjBf.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\4_fpzbcxmdtny2bjbf.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.768] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0183.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\4_fPzbCxmDTNY2BjBf.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\4_fpzbcxmdtny2bjbf.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13893160, ftCreationTime.dwHighDateTime=0x1d5e1eb, ftLastAccessTime.dwLowDateTime=0x8993ebe0, ftLastAccessTime.dwHighDateTime=0x1d5dd07, ftLastWriteTime.dwLowDateTime=0x8993ebe0, ftLastWriteTime.dwHighDateTime=0x1d5dd07, nFileSizeHigh=0x0, nFileSizeLow=0x17c92)) returned 1
	[0183.769] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c7e0 | out: pbBuffer=0x1244c7e0) returned 1
	[0183.769] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127445e8 | out: pbBuffer=0x127445e8) returned 1
	[0183.769] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x17c92, lpOverlapped=0x0) returned 1
	[0183.779] GetFileType (hFile=0x33c) returned 0x1
	[0183.779] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.779] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x17c92, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12429d00*=0x17c92, lpOverlapped=0x12429d0c) returned 1
	[0183.780] GetFileType (hFile=0x33c) returned 0x1
	[0183.780] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x17c92, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.780] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401781 | out: pbBuffer=0x12401781) returned 1
	[0183.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401881 | out: pbBuffer=0x12401881) returned 1
	[0183.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401981 | out: pbBuffer=0x12401981) returned 1
	[0183.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446a0 | out: pbBuffer=0x127446a0) returned 1
	[0183.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\4_fPzbCxmDTNY2BjBf.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\4_fpzbcxmdtny2bjbf.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.781] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0183.781] WriteFile (in: hFile=0x34c, lpBuffer=0x12743900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12743900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.781] CloseHandle (hObject=0x34c) returned 1
	[0183.782] CloseHandle (hObject=0x33c) returned 1
	[0183.782] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\4_fPzbCxmDTNY2BjBf.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\4_fpzbcxmdtny2bjbf.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\4_fPzbCxmDTNY2BjBf.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\4_fpzbcxmdtny2bjbf.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.784] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0184.754] SetEvent (hEvent=0x318) returned 1
	[0184.754] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\F9 beT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\f9 bet.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0184.756] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0184.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\F9 beT.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\f9 bet.wav"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91db1500, ftCreationTime.dwHighDateTime=0x1d5e29b, ftLastAccessTime.dwLowDateTime=0xe9cbdac0, ftLastAccessTime.dwHighDateTime=0x1d5da8e, ftLastWriteTime.dwLowDateTime=0xe9cbdac0, ftLastWriteTime.dwHighDateTime=0x1d5da8e, nFileSizeHigh=0x0, nFileSizeLow=0x16b08)) returned 1
	[0184.756] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244ca00 | out: pbBuffer=0x1244ca00) returned 1
	[0184.756] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446b8 | out: pbBuffer=0x127446b8) returned 1
	[0184.756] ReadFile (in: hFile=0x34c, lpBuffer=0x1294c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1294c000*, lpNumberOfBytesRead=0x12767d1c*=0x16b08, lpOverlapped=0x0) returned 1
	[0184.796] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0184.885] SetEvent (hEvent=0x68) returned 1
	[0184.998] SetEvent (hEvent=0x68) returned 1
	[0184.998] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0185.062] SetEvent (hEvent=0x68) returned 1
	[0185.062] SetEvent (hEvent=0x70) returned 1
	[0185.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\uJ4z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\uj4z.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0185.063] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x128dbd0c | out: lpMode=0x128dbd0c) returned 0
	[0185.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\uJ4z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\uj4z.mp3"), fInfoLevelId=0x0, lpFileInformation=0x128dbad0 | out: lpFileInformation=0x128dbad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30edec80, ftCreationTime.dwHighDateTime=0x1d5dce8, ftLastAccessTime.dwLowDateTime=0x694b24f0, ftLastAccessTime.dwHighDateTime=0x1d5d949, ftLastWriteTime.dwLowDateTime=0x694b24f0, ftLastWriteTime.dwHighDateTime=0x1d5d949, nFileSizeHigh=0x0, nFileSizeLow=0xd307)) returned 1
	[0185.063] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0185.064] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0185.064] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x128dbd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x128dbd1c*=0xd307, lpOverlapped=0x0) returned 1
	[0185.120] GetFileType (hFile=0x33c) returned 0x1
	[0185.120] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x128dbce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.120] WriteFile (in: hFile=0x33c, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0xd307, lpNumberOfBytesWritten=0x128dbd00, lpOverlapped=0x128dbd0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x128dbd00*=0xd307, lpOverlapped=0x128dbd0c) returned 1
	[0185.121] GetFileType (hFile=0x33c) returned 0x1
	[0185.121] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd307, lpNewFilePointer=0x0, dwMoveMethod=0x128dbce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.121] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0185.122] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0185.122] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0185.122] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0185.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\uJ4z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\uj4z.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0185.122] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x128dbd0c | out: lpMode=0x128dbd0c) returned 0
	[0185.122] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x128dbd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x128dbd0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.123] CloseHandle (hObject=0x34c) returned 1
	[0185.123] CloseHandle (hObject=0x33c) returned 1
	[0185.123] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\uJ4z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\uj4z.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\uJ4z.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\uj4z.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.134] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0185.225] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0185.366] SetEvent (hEvent=0x318) returned 1
	[0185.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0ph-4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0ph-4.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0185.367] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0185.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0ph-4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0ph-4.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ff44c90, ftCreationTime.dwHighDateTime=0x1d5e5f6, ftLastAccessTime.dwLowDateTime=0xcc176de0, ftLastAccessTime.dwHighDateTime=0x1d5e192, ftLastWriteTime.dwLowDateTime=0xcc176de0, ftLastWriteTime.dwHighDateTime=0x1d5e192, nFileSizeHigh=0x0, nFileSizeLow=0xf27f)) returned 1
	[0185.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0185.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0185.367] ReadFile (in: hFile=0x34c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12769d1c*=0xf27f, lpOverlapped=0x0) returned 1
	[0185.417] GetFileType (hFile=0x34c) returned 0x1
	[0185.417] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.417] WriteFile (in: hFile=0x34c, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0xf27f, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x12769d00*=0xf27f, lpOverlapped=0x12769d0c) returned 1
	[0185.418] GetFileType (hFile=0x34c) returned 0x1
	[0185.418] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xf27f, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0185.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0185.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0185.418] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744350 | out: pbBuffer=0x12744350) returned 1
	[0185.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0ph-4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0ph-4.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0185.419] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0185.419] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.419] CloseHandle (hObject=0x344) returned 1
	[0185.419] CloseHandle (hObject=0x34c) returned 1
	[0185.419] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0ph-4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0ph-4.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0ph-4.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0ph-4.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\6OSJe_C.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\6osje_c.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0185.423] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x128dbd0c | out: lpMode=0x128dbd0c) returned 0
	[0185.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\6OSJe_C.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\6osje_c.png"), fInfoLevelId=0x0, lpFileInformation=0x128dbad0 | out: lpFileInformation=0x128dbad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573cc710, ftCreationTime.dwHighDateTime=0x1d5d911, ftLastAccessTime.dwLowDateTime=0xf3a86790, ftLastAccessTime.dwHighDateTime=0x1d5e78e, ftLastWriteTime.dwLowDateTime=0xf3a86790, ftLastWriteTime.dwHighDateTime=0x1d5e78e, nFileSizeHigh=0x0, nFileSizeLow=0x3ead)) returned 1
	[0185.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0185.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744368 | out: pbBuffer=0x12744368) returned 1
	[0185.424] ReadFile (in: hFile=0x34c, lpBuffer=0x1258c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x128dbd1c, lpOverlapped=0x0 | out: lpBuffer=0x1258c000*, lpNumberOfBytesRead=0x128dbd1c*=0x3ead, lpOverlapped=0x0) returned 1
	[0185.492] SetEvent (hEvent=0x80) returned 1
	[0185.492] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0185.623] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0185.623] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0185.623] SetEvent (hEvent=0x80) returned 1
	[0185.623] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0185.671] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0185.671] GetFileType (hFile=0x34c) returned 0x1
	[0185.671] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.671] WriteFile (in: hFile=0x34c, lpBuffer=0x12522000*, nNumberOfBytesToWrite=0x3ead, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12522000*, lpNumberOfBytesWritten=0x1276dd00*=0x3ead, lpOverlapped=0x1276dd0c) returned 1
	[0185.672] GetFileType (hFile=0x34c) returned 0x1
	[0185.672] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x3ead, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0185.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0185.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0185.672] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e160 | out: pbBuffer=0x1251e160) returned 1
	[0185.673] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\6OSJe_C.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\6osje_c.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.673] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0185.673] WriteFile (in: hFile=0x2dc, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.673] CloseHandle (hObject=0x2dc) returned 1
	[0185.673] CloseHandle (hObject=0x34c) returned 1
	[0185.673] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\6OSJe_C.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\6osje_c.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\6OSJe_C.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\6osje_c.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TP3bdPfUcde_x.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tp3bdpfucde_x.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0185.680] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0185.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TP3bdPfUcde_x.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tp3bdpfucde_x.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11fecf70, ftCreationTime.dwHighDateTime=0x1d5e0fc, ftLastAccessTime.dwLowDateTime=0xb3a38870, ftLastAccessTime.dwHighDateTime=0x1d5dc24, ftLastWriteTime.dwLowDateTime=0xb3a38870, ftLastWriteTime.dwHighDateTime=0x1d5dc24, nFileSizeHigh=0x0, nFileSizeLow=0x5f46)) returned 1
	[0185.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e940 | out: pbBuffer=0x1240e940) returned 1
	[0185.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e228 | out: pbBuffer=0x1251e228) returned 1
	[0185.680] ReadFile (in: hFile=0x34c, lpBuffer=0x125ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x125ac000*, lpNumberOfBytesRead=0x1276dd1c*=0x5f46, lpOverlapped=0x0) returned 1
	[0185.745] GetFileType (hFile=0x34c) returned 0x1
	[0185.745] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.746] WriteFile (in: hFile=0x34c, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x5f46, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x1276dd00*=0x5f46, lpOverlapped=0x1276dd0c) returned 1
	[0185.746] GetFileType (hFile=0x34c) returned 0x1
	[0185.746] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x5f46, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.746] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0185.746] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0185.746] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0185.747] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e6d0 | out: pbBuffer=0x1251e6d0) returned 1
	[0185.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TP3bdPfUcde_x.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tp3bdpfucde_x.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.747] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0185.747] WriteFile (in: hFile=0x2dc, lpBuffer=0x125fea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125fea00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.747] CloseHandle (hObject=0x2dc) returned 1
	[0185.747] CloseHandle (hObject=0x34c) returned 1
	[0185.747] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TP3bdPfUcde_x.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tp3bdpfucde_x.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\TP3bdPfUcde_x.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\tp3bdpfucde_x.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\g5Z1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\g5z1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32440720, ftCreationTime.dwHighDateTime=0x1d5e56e, ftLastAccessTime.dwLowDateTime=0x1149c050, ftLastAccessTime.dwHighDateTime=0x1d5e46a, ftLastWriteTime.dwLowDateTime=0x1149c050, ftLastWriteTime.dwHighDateTime=0x1d5e46a, nFileSizeHigh=0x0, nFileSizeLow=0x41f7)) returned 1
	[0185.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\iw-KpJ4CGM5D1Nr2-5J.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\iw-kpj4cgm5d1nr2-5j.png"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9464cd20, ftCreationTime.dwHighDateTime=0x1d5db48, ftLastAccessTime.dwLowDateTime=0x5f8c50b0, ftLastAccessTime.dwHighDateTime=0x1d5e560, ftLastWriteTime.dwLowDateTime=0x5f8c50b0, ftLastWriteTime.dwHighDateTime=0x1d5e560, nFileSizeHigh=0x0, nFileSizeLow=0xb37f)) returned 1
	[0185.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\g5Z1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\g5z1.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0185.810] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0185.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\g5Z1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\g5z1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32440720, ftCreationTime.dwHighDateTime=0x1d5e56e, ftLastAccessTime.dwLowDateTime=0x1149c050, ftLastAccessTime.dwHighDateTime=0x1d5e46a, ftLastWriteTime.dwLowDateTime=0x1149c050, ftLastWriteTime.dwHighDateTime=0x1d5e46a, nFileSizeHigh=0x0, nFileSizeLow=0x41f7)) returned 1
	[0185.810] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ede0 | out: pbBuffer=0x1240ede0) returned 1
	[0185.810] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e6e8 | out: pbBuffer=0x1251e6e8) returned 1
	[0185.810] ReadFile (in: hFile=0x34c, lpBuffer=0x1268a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfBytesRead=0x1276dd1c*=0x41f7, lpOverlapped=0x0) returned 1
	[0185.863] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.166] SetEvent (hEvent=0x30c) returned 1
	[0186.167] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.207] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5bBpGkcu3tYsh6hWIw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5bbpgkcu3tysh6hwiw.png"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf49080, ftCreationTime.dwHighDateTime=0x1d5e43e, ftLastAccessTime.dwLowDateTime=0x96614890, ftLastAccessTime.dwHighDateTime=0x1d5e21b, ftLastWriteTime.dwLowDateTime=0x96614890, ftLastWriteTime.dwHighDateTime=0x1d5e21b, nFileSizeHigh=0x0, nFileSizeLow=0x143f5)) returned 1
	[0186.283] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.296] SetEvent (hEvent=0x80) returned 1
	[0186.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DEQmAz4ZoU3y.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\deqmaz4zou3y.png"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffbd0710, ftCreationTime.dwHighDateTime=0x1d5e609, ftLastAccessTime.dwLowDateTime=0xad8c1c20, ftLastAccessTime.dwHighDateTime=0x1d5e04a, ftLastWriteTime.dwLowDateTime=0xad8c1c20, ftLastWriteTime.dwHighDateTime=0x1d5e04a, nFileSizeHigh=0x0, nFileSizeLow=0x9304)) returned 1
	[0186.297] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.315] SetEvent (hEvent=0x30c) returned 1
	[0186.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\D_dPNp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d_dpnp.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9e90c00, ftCreationTime.dwHighDateTime=0x1d5d832, ftLastAccessTime.dwLowDateTime=0xa6ff8680, ftLastAccessTime.dwHighDateTime=0x1d5e315, ftLastWriteTime.dwLowDateTime=0xa6ff8680, ftLastWriteTime.dwHighDateTime=0x1d5e315, nFileSizeHigh=0x0, nFileSizeLow=0x10369)) returned 1
	[0186.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ExV5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\exv5.png"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f720840, ftCreationTime.dwHighDateTime=0x1d5d8d2, ftLastAccessTime.dwLowDateTime=0x55876140, ftLastAccessTime.dwHighDateTime=0x1d5d895, ftLastWriteTime.dwLowDateTime=0x55876140, ftLastWriteTime.dwHighDateTime=0x1d5d895, nFileSizeHigh=0x0, nFileSizeLow=0x1172a)) returned 1
	[0186.317] SetEvent (hEvent=0x318) returned 1
	[0186.317] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.365] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.382] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.417] SetEvent (hEvent=0x318) returned 1
	[0186.418] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.544] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.752] SetEvent (hEvent=0x68) returned 1
	[0186.752] SetEvent (hEvent=0x318) returned 1
	[0186.752] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.881] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.901] SetEvent (hEvent=0x318) returned 1
	[0186.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\0gnmonj_rKcLGfg6.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\0gnmonj_rkclgfg6.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.902] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\0gnmonj_rKcLGfg6.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\0gnmonj_rkclgfg6.avi"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbce22070, ftCreationTime.dwHighDateTime=0x1d5e135, ftLastAccessTime.dwLowDateTime=0xf3421c0, ftLastAccessTime.dwHighDateTime=0x1d5d86c, ftLastWriteTime.dwLowDateTime=0xf3421c0, ftLastWriteTime.dwHighDateTime=0x1d5d86c, nFileSizeHigh=0x0, nFileSizeLow=0x17eab)) returned 1
	[0186.902] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3c0 | out: pbBuffer=0x1240e3c0) returned 1
	[0186.902] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0186.902] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12769d1c*=0x17eab, lpOverlapped=0x0) returned 1
	[0186.922] GetFileType (hFile=0x344) returned 0x1
	[0186.922] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.922] WriteFile (in: hFile=0x344, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x17eab, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12769d00*=0x17eab, lpOverlapped=0x12769d0c) returned 1
	[0186.922] GetFileType (hFile=0x344) returned 0x1
	[0186.922] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x17eab, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.922] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0186.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0186.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0186.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410400 | out: pbBuffer=0x12410400) returned 1
	[0186.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\0gnmonj_rKcLGfg6.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\0gnmonj_rkclgfg6.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.923] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.923] WriteFile (in: hFile=0x1e4, lpBuffer=0x12638000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12638000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.923] CloseHandle (hObject=0x1e4) returned 1
	[0186.923] CloseHandle (hObject=0x344) returned 1
	[0186.923] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\0gnmonj_rKcLGfg6.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\0gnmonj_rkclgfg6.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\0gnmonj_rKcLGfg6.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\0gnmonj_rkclgfg6.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\NWK49oPh4.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\nwk49oph4.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.932] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\NWK49oPh4.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\nwk49oph4.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe2a79f0, ftCreationTime.dwHighDateTime=0x1d5dab5, ftLastAccessTime.dwLowDateTime=0x9340dec0, ftLastAccessTime.dwHighDateTime=0x1d5e7fa, ftLastWriteTime.dwLowDateTime=0x9340dec0, ftLastWriteTime.dwHighDateTime=0x1d5e7fa, nFileSizeHigh=0x0, nFileSizeLow=0x16220)) returned 1
	[0186.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e6a0 | out: pbBuffer=0x1240e6a0) returned 1
	[0186.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410428 | out: pbBuffer=0x12410428) returned 1
	[0186.932] ReadFile (in: hFile=0x344, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12769d1c*=0x16220, lpOverlapped=0x0) returned 1
	[0186.953] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0186.988] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0187.012] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0187.032] SetEvent (hEvent=0x2e8) returned 1
	[0187.033] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\9M QqIKYO.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\9m qqikyo.avi"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb541cef0, ftCreationTime.dwHighDateTime=0x1d5de70, ftLastAccessTime.dwLowDateTime=0x7a437a00, ftLastAccessTime.dwHighDateTime=0x1d5e79a, ftLastWriteTime.dwLowDateTime=0x7a437a00, ftLastWriteTime.dwHighDateTime=0x1d5e79a, nFileSizeHigh=0x0, nFileSizeLow=0x17223)) returned 1
	[0187.034] SwitchToThread () returned 1
	[0187.071] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0187.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\IBxVz5 C.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\ibxvz5 c.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0187.071] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0187.071] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12727d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12727d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.071] CloseHandle (hObject=0x2dc) returned 1
	[0187.071] CloseHandle (hObject=0x34c) returned 1
	[0187.072] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\IBxVz5 C.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\ibxvz5 c.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\IBxVz5 C.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw\\ibxvz5 c.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.079] GetFileType (hFile=0x33c) returned 0x1
	[0187.079] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.079] WriteFile (in: hFile=0x33c, lpBuffer=0x128e4000*, nNumberOfBytesToWrite=0x12549, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x128e4000*, lpNumberOfBytesWritten=0x12767d00*=0x12549, lpOverlapped=0x12767d0c) returned 1
	[0187.080] GetFileType (hFile=0x33c) returned 0x1
	[0187.081] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x12549, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434201 | out: pbBuffer=0x12434201) returned 1
	[0187.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434301 | out: pbBuffer=0x12434301) returned 1
	[0187.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434401 | out: pbBuffer=0x12434401) returned 1
	[0187.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410410 | out: pbBuffer=0x12410410) returned 1
	[0187.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\TBZe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\tbze.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0187.082] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0187.082] WriteFile (in: hFile=0x34c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.082] CloseHandle (hObject=0x34c) returned 1
	[0187.082] CloseHandle (hObject=0x33c) returned 1
	[0187.082] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\TBZe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\tbze.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\TBZe.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\tbze.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\hlU6.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\hlu6.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cab3bf0, ftCreationTime.dwHighDateTime=0x1d5dd1e, ftLastAccessTime.dwLowDateTime=0xb7b07160, ftLastAccessTime.dwHighDateTime=0x1d5df96, ftLastWriteTime.dwLowDateTime=0xb7b07160, ftLastWriteTime.dwHighDateTime=0x1d5df96, nFileSizeHigh=0x0, nFileSizeLow=0x10161)) returned 1
	[0187.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\byAw\\oDQP.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\byaw\\odqp.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10c222f0, ftCreationTime.dwHighDateTime=0x1d5e1bb, ftLastAccessTime.dwLowDateTime=0x98035960, ftLastAccessTime.dwHighDateTime=0x1d5e548, ftLastWriteTime.dwLowDateTime=0x98035960, ftLastWriteTime.dwHighDateTime=0x1d5e548, nFileSizeHigh=0x0, nFileSizeLow=0x12758)) returned 1
	[0187.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\pxRjH_WjQp7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\pxrjh_wjqp7.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4096b110, ftCreationTime.dwHighDateTime=0x1d5e75d, ftLastAccessTime.dwLowDateTime=0x56878b0, ftLastAccessTime.dwHighDateTime=0x1d5da71, ftLastWriteTime.dwLowDateTime=0x56878b0, ftLastWriteTime.dwHighDateTime=0x1d5da71, nFileSizeHigh=0x0, nFileSizeLow=0xbbd0)) returned 1
	[0187.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\xp_t-U1vlWF9cYtgh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\xp_t-u1vlwf9cytgh.swf"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84dfdf0, ftCreationTime.dwHighDateTime=0x1d5e60d, ftLastAccessTime.dwLowDateTime=0x8f9dad0, ftLastAccessTime.dwHighDateTime=0x1d5da87, ftLastWriteTime.dwLowDateTime=0x8f9dad0, ftLastWriteTime.dwHighDateTime=0x1d5da87, nFileSizeHigh=0x0, nFileSizeLow=0x5220)) returned 1
	[0187.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\pxRjH_WjQp7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\pxrjh_wjqp7.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0187.090] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0187.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\pxRjH_WjQp7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\pxrjh_wjqp7.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4096b110, ftCreationTime.dwHighDateTime=0x1d5e75d, ftLastAccessTime.dwLowDateTime=0x56878b0, ftLastAccessTime.dwHighDateTime=0x1d5da71, ftLastWriteTime.dwLowDateTime=0x56878b0, ftLastWriteTime.dwHighDateTime=0x1d5da71, nFileSizeHigh=0x0, nFileSizeLow=0xbbd0)) returned 1
	[0187.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e940 | out: pbBuffer=0x1240e940) returned 1
	[0187.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410518 | out: pbBuffer=0x12410518) returned 1
	[0187.090] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12767d1c*=0xbbd0, lpOverlapped=0x0) returned 1
	[0187.209] GetFileType (hFile=0x33c) returned 0x1
	[0187.209] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.209] WriteFile (in: hFile=0x33c, lpBuffer=0x1286a000*, nNumberOfBytesToWrite=0xbbd0, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1286a000*, lpNumberOfBytesWritten=0x12767d00*=0xbbd0, lpOverlapped=0x12767d0c) returned 1
	[0187.209] GetFileType (hFile=0x33c) returned 0x1
	[0187.209] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xbbd0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434501 | out: pbBuffer=0x12434501) returned 1
	[0187.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434601 | out: pbBuffer=0x12434601) returned 1
	[0187.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434701 | out: pbBuffer=0x12434701) returned 1
	[0187.210] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105d0 | out: pbBuffer=0x124105d0) returned 1
	[0187.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\pxRjH_WjQp7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\pxrjh_wjqp7.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0187.210] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0187.210] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.210] CloseHandle (hObject=0x1e4) returned 1
	[0187.210] CloseHandle (hObject=0x33c) returned 1
	[0187.210] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\pxRjH_WjQp7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\pxrjh_wjqp7.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\jELWgBKXCbTMxaxKNIr\\pxRjH_WjQp7.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\jelwgbkxcbtmxaxknir\\pxrjh_wjqp7.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.230] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0187.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\dp_X2gBHg5E4b Mfrae.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\dp_x2gbhg5e4b mfrae.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76378fa0, ftCreationTime.dwHighDateTime=0x1d5d9ad, ftLastAccessTime.dwLowDateTime=0xb2c07680, ftLastAccessTime.dwHighDateTime=0x1d5d926, ftLastWriteTime.dwLowDateTime=0xb2c07680, ftLastWriteTime.dwHighDateTime=0x1d5d926, nFileSizeHigh=0x0, nFileSizeLow=0x14c35)) returned 1
	[0187.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\r3ICd_h.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\r3icd_h.avi"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6004efb0, ftCreationTime.dwHighDateTime=0x1d5e43a, ftLastAccessTime.dwLowDateTime=0xa40e2e80, ftLastAccessTime.dwHighDateTime=0x1d5d9f7, ftLastWriteTime.dwLowDateTime=0xa40e2e80, ftLastWriteTime.dwHighDateTime=0x1d5d9f7, nFileSizeHigh=0x0, nFileSizeLow=0x13fbb)) returned 1
	[0187.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\dp_X2gBHg5E4b Mfrae.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\dp_x2gbhg5e4b mfrae.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0187.281] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0187.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\dp_X2gBHg5E4b Mfrae.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\dp_x2gbhg5e4b mfrae.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76378fa0, ftCreationTime.dwHighDateTime=0x1d5d9ad, ftLastAccessTime.dwLowDateTime=0xb2c07680, ftLastAccessTime.dwHighDateTime=0x1d5d926, ftLastWriteTime.dwLowDateTime=0xb2c07680, ftLastWriteTime.dwHighDateTime=0x1d5d926, nFileSizeHigh=0x0, nFileSizeLow=0x14c35)) returned 1
	[0187.281] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0187.281] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0187.282] ReadFile (in: hFile=0x34c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x12727d1c*=0x14c35, lpOverlapped=0x0) returned 1
	[0187.328] SetEvent (hEvent=0x68) returned 1
	[0187.328] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0187.332] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0187.332] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0187.372] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0187.373] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fb30, ulCount=0x10, ulNumEntriesRemoved=0x33b0fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fb30, ulNumEntriesRemoved=0x33b0fb14) returned 0
	[0187.373] SetEvent (hEvent=0x80) returned 1
	[0187.373] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0x1) returned 0x102
	[0187.422] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0187.423] GetFileType (hFile=0x34c) returned 0x1
	[0187.423] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.423] WriteFile (in: hFile=0x34c, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x14c35, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x1276dd00*=0x14c35, lpOverlapped=0x1276dd0c) returned 1
	[0187.423] GetFileType (hFile=0x34c) returned 0x1
	[0187.424] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x14c35, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0187.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0187.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0187.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0187.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\dp_X2gBHg5E4b Mfrae.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\dp_x2gbhg5e4b mfrae.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0187.424] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0187.425] WriteFile (in: hFile=0x2dc, lpBuffer=0x128e0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.425] CloseHandle (hObject=0x2dc) returned 1
	[0187.425] CloseHandle (hObject=0x34c) returned 1
	[0187.425] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\dp_X2gBHg5E4b Mfrae.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\dp_x2gbhg5e4b mfrae.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\dp_X2gBHg5E4b Mfrae.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\dp_x2gbhg5e4b mfrae.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.428] GetFileType (hFile=0x33c) returned 0x1
	[0187.428] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.428] WriteFile (in: hFile=0x33c, lpBuffer=0x124ee000*, nNumberOfBytesToWrite=0x82f7, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x124ee000*, lpNumberOfBytesWritten=0x12767d00*=0x82f7, lpOverlapped=0x12767d0c) returned 1
	[0187.429] GetFileType (hFile=0x33c) returned 0x1
	[0187.429] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x82f7, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0187.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0187.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0187.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0187.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\iA9TzO1cn.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ia9tzo1cn.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0187.430] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0187.430] WriteFile (in: hFile=0x34c, lpBuffer=0x128e0500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.430] CloseHandle (hObject=0x34c) returned 1
	[0187.430] CloseHandle (hObject=0x33c) returned 1
	[0187.430] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\iA9TzO1cn.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ia9tzo1cn.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\iA9TzO1cn.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ia9tzo1cn.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.433] CreateFileW (lpFileName="C:\\Users\\All Users" (normalized: "c:\\users\\all users"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.433] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x37ec9230, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x37ec9230, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0187.433] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0187.433] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0187.832] SetEvent (hEvent=0x2e8) returned 1
	[0187.832] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0187.833] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0187.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x66b2700, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xddd35f67, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0xbd7f0)) returned 1
	[0187.834] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732460 | out: pbBuffer=0x12732460) returned 1
	[0187.834] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0187.834] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12767d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0187.927] GetFileType (hFile=0x33c) returned 0x1
	[0187.927] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.017] WriteFile (in: hFile=0x33c, lpBuffer=0x12814000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12814000*, lpNumberOfBytesWritten=0x12767d00*=0x20000, lpOverlapped=0x12767d0c) returned 1
	[0188.018] GetFileType (hFile=0x33c) returned 0x1
	[0188.018] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.019] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0188.019] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0188.019] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0188.019] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788278 | out: pbBuffer=0x12788278) returned 1
	[0188.019] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0188.019] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0188.019] WriteFile (in: hFile=0x34c, lpBuffer=0x128e0a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0188.058] CloseHandle (hObject=0x34c) returned 1
	[0188.058] CloseHandle (hObject=0x33c) returned 1
	[0188.058] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0188.062] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0188.114] SetEvent (hEvent=0x318) returned 1
	[0188.114] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0188.115] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0188.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff107f92, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1a00)) returned 1
	[0188.115] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e600 | out: pbBuffer=0x1252e600) returned 1
	[0188.115] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251eb08 | out: pbBuffer=0x1251eb08) returned 1
	[0188.115] ReadFile (in: hFile=0x33c, lpBuffer=0x1268a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1268a000*, lpNumberOfBytesRead=0x12429d1c*=0x1a00, lpOverlapped=0x0) returned 1
	[0188.161] GetFileType (hFile=0x33c) returned 0x1
	[0188.161] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.161] WriteFile (in: hFile=0x33c, lpBuffer=0x1271c000*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1271c000*, lpNumberOfBytesWritten=0x12429d00*=0x1a00, lpOverlapped=0x12429d0c) returned 1
	[0188.161] GetFileType (hFile=0x33c) returned 0x1
	[0188.161] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1a00, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.162] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0188.162] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0188.162] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0188.162] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ebc0 | out: pbBuffer=0x1251ebc0) returned 1
	[0188.162] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0188.162] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0188.163] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0188.163] CloseHandle (hObject=0x344) returned 1
	[0188.164] CloseHandle (hObject=0x33c) returned 1
	[0188.164] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0188.176] WaitForSingleObject (hHandle=0x2f4, dwMilliseconds=0xffffffff) returned 0x0
	[0188.216] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fad4, ulCount=0x10, ulNumEntriesRemoved=0x33b0fab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fad4, ulNumEntriesRemoved=0x33b0fab8) returned 0
	[0188.216] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fad4, ulCount=0x10, ulNumEntriesRemoved=0x33b0fab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fad4, ulNumEntriesRemoved=0x33b0fab8) returned 1
	[0199.549] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x33b0fab4, fWait=0, lpdwFlags=0x33b0fac4 | out: lpcbTransfer=0x33b0fab4, lpdwFlags=0x33b0fac4) returned 1
	[0199.549] SetEvent (hEvent=0x2e8) returned 1
	[0199.549] SetEvent (hEvent=0xa0) returned 1
	[0199.549] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x46a, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0199.549] SetEvent (hEvent=0x308) returned 1
	[0199.549] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fad4, ulCount=0x10, ulNumEntriesRemoved=0x33b0fab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fad4, ulNumEntriesRemoved=0x33b0fab8) returned 0
	[0199.549] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fad4, ulCount=0x10, ulNumEntriesRemoved=0x33b0fab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fad4, ulNumEntriesRemoved=0x33b0fab8) returned 1
	[0206.222] WSAGetOverlappedResult (in: s=0x2f8, lpOverlapped=0x12510c14, lpcbTransfer=0x33b0fab4, fWait=0, lpdwFlags=0x33b0fac4 | out: lpcbTransfer=0x33b0fab4, lpdwFlags=0x33b0fac4) returned 0
	[0206.224] GetProcAddress (hModule=0x77230000, lpProcName="closesocket") returned 0x77233918
	[0206.225] closesocket (s=0x2f8) returned 0
	[0206.225] SetEvent (hEvent=0x2e8) returned 1
	[0206.226] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fabc, ulCount=0x10, ulNumEntriesRemoved=0x33b0faa0, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33b0fabc, ulNumEntriesRemoved=0x33b0faa0) returned 0
	[0206.226] GetQueuedCompletionStatusEx (CompletionPort=0x10c, lpCompletionPortEntries=0x33b0fabc, ulCount=0x10, ulNumEntriesRemoved=0x33b0faa0, dwMilliseconds=0xffffffff, fAlertable=0) 

Thread:
	id = 54
	os_tid = 0x9ac

	[0107.632] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x33d3ff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x33d3ff38*=0x310) returned 1
	[0107.633] VirtualQuery (in: lpAddress=0x33d3ff48, lpBuffer=0x33d3ff48, dwLength=0x1c | out: lpBuffer=0x33d3ff48*(BaseAddress=0x33d3f000, AllocationBase=0x33c40000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0107.633] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x308
	[0107.633] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0107.719] VirtualAlloc (lpAddress=0x127e6000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127e6000
	[0107.720] VirtualFree (lpAddress=0x12840000, dwSize=0x3c0000, dwFreeType=0x4000) returned 1
	[0107.739] VirtualAlloc (lpAddress=0x127e8000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127e8000
	[0107.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x44d4f0, lpParameter=0x127e6000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x314
	[0107.833] CloseHandle (hObject=0x314) returned 1
	[0107.834] VirtualAlloc (lpAddress=0x127ea000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127ea000
	[0107.834] VirtualAlloc (lpAddress=0x127ec000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127ec000
	[0107.835] VirtualAlloc (lpAddress=0x127ee000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x127ee000
	[0107.835] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0107.870] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0107.912] SetEvent (hEvent=0x318) returned 1
	[0107.912] SetEvent (hEvent=0x2e4) returned 1
	[0107.912] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0107.953] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0107.972] SetEvent (hEvent=0x320) returned 1
	[0107.972] VirtualAlloc (lpAddress=0x1286a000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x1286a000
	[0107.973] SetEvent (hEvent=0x318) returned 1
	[0107.973] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x1) returned 0x102
	[0107.994] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0107.994] VirtualAlloc (lpAddress=0x12872000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x12872000
	[0107.994] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0107.995] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0107.995] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xece1ee80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263e00)) returned 1
	[0107.995] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e3a0 | out: pbBuffer=0x1252e3a0) returned 1
	[0107.995] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1246a1e8 | out: pbBuffer=0x1246a1e8) returned 1
	[0107.995] VirtualAlloc (lpAddress=0x12874000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x12874000
	[0107.996] VirtualAlloc (lpAddress=0x12894000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x12894000
	[0107.997] ReadFile (in: hFile=0x328, lpBuffer=0x12874000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12874000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0108.038] SwitchToThread () returned 1
	[0108.112] SetEvent (hEvent=0x320) returned 1
	[0108.113] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0108.263] SetEvent (hEvent=0x320) returned 1
	[0108.263] SetEvent (hEvent=0x318) returned 1
	[0108.263] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0108.265] GetFileType (hFile=0x328) returned 0x1
	[0108.265] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0108.265] WriteFile (in: hFile=0x328, lpBuffer=0x126ee000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x126ee000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0108.266] GetFileType (hFile=0x328) returned 0x1
	[0108.266] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0108.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0108.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0108.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0108.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0108.268] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0108.268] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0108.268] WriteFile (in: hFile=0x2cc, lpBuffer=0x12868500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12868500*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0108.695] CloseHandle (hObject=0x2cc) returned 1
	[0109.130] CloseHandle (hObject=0x328) returned 1
	[0109.130] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0109.131] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0109.131] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0109.131] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290)) returned 1
	[0109.132] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0109.132] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410598 | out: pbBuffer=0x12410598) returned 1
	[0109.133] ReadFile (in: hFile=0x328, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0109.285] SetEvent (hEvent=0xa0) returned 1
	[0109.286] GetFileType (hFile=0x328) returned 0x1
	[0109.286] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0109.286] WriteFile (in: hFile=0x328, lpBuffer=0x1259a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x1259a000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0109.287] GetFileType (hFile=0x328) returned 0x1
	[0109.287] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0109.288] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0109.288] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0109.288] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0109.288] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0109.288] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0109.289] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0109.289] WriteFile (in: hFile=0x304, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0109.381] CloseHandle (hObject=0x304) returned 1
	[0113.024] CloseHandle (hObject=0x328) returned 1
	[0113.026] SwitchToThread () returned 1
	[0113.107] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0113.108] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f5bbc | out: lpFileInformation=0x124f5bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0113.300] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0113.301] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f5a94 | out: lpFindFileData=0x124f5a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0113.393] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xee829690, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf00dbad0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf00dbad0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0113.393] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlkLR.cab", cAlternateFileName="")) returned 1
	[0113.393] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.msi", cAlternateFileName="OUTLOO~1.MSI")) returned 1
	[0113.393] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookMUI.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1
	[0113.393] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0113.393] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f5ad8 | out: lpFindFileData=0x124f5ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0113.394] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0113.395] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f575c | out: lpFileInformation=0x124f575c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0113.396] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0113.396] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0113.397] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f596c | out: lpMode=0x124f596c) returned 0
	[0113.397] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f596c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f596c*=0x1180, lpOverlapped=0x0) returned 1
	[0113.398] CloseHandle (hObject=0x2cc) returned 1
	[0113.399] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlkLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlklr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3a6f2400, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3a6f2400, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xeebe0180, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xe21fcc)) returned 1
	[0113.399] SetEvent (hEvent=0x70) returned 1
	[0113.399] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2bba00)) returned 1
	[0113.400] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72)) returned 1
	[0113.400] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f)) returned 1
	[0113.485] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0113.485] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0113.485] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee827f20, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xc72)) returned 1
	[0113.485] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127320c0 | out: pbBuffer=0x127320c0) returned 1
	[0113.486] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744078 | out: pbBuffer=0x12744078) returned 1
	[0113.486] ReadFile (in: hFile=0x2fc, lpBuffer=0x1270e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1270e000*, lpNumberOfBytesRead=0x12429d1c*=0xc72, lpOverlapped=0x0) returned 1
	[0113.682] GetFileType (hFile=0x2fc) returned 0x1
	[0113.683] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.683] WriteFile (in: hFile=0x2fc, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0xc72, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x12429d00*=0xc72, lpOverlapped=0x12429d0c) returned 1
	[0113.683] GetFileType (hFile=0x2fc) returned 0x1
	[0113.683] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xc72, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.683] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0113.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0113.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0113.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0113.684] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0113.685] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0113.685] WriteFile (in: hFile=0x33c, lpBuffer=0x124b8000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b8000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0113.685] CloseHandle (hObject=0x33c) returned 1
	[0113.686] CloseHandle (hObject=0x2fc) returned 1
	[0113.687] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\OutlookMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\outlookmui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0113.688] SetEvent (hEvent=0x2e4) returned 1
	[0113.688] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0113.688] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0113.688] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf00db300, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x106f)) returned 1
	[0113.688] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0113.688] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0113.690] ReadFile (in: hFile=0x2fc, lpBuffer=0x12914000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12914000*, lpNumberOfBytesRead=0x12429d1c*=0x106f, lpOverlapped=0x0) returned 1
	[0113.862] GetFileType (hFile=0x2fc) returned 0x1
	[0113.862] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.862] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x106f, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x12429d00*=0x106f, lpOverlapped=0x12429d0c) returned 1
	[0113.863] GetFileType (hFile=0x2fc) returned 0x1
	[0113.863] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x106f, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.863] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0113.863] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0113.863] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0113.863] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0113.864] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0113.864] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0113.864] WriteFile (in: hFile=0x340, lpBuffer=0x124b8500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b8500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0113.864] CloseHandle (hObject=0x340) returned 1
	[0113.869] CloseHandle (hObject=0x2fc) returned 1
	[0113.869] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001A-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-001a-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0113.870] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0114.392] SetEvent (hEvent=0x11c) returned 1
	[0114.392] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0114.501] SetEvent (hEvent=0x2f4) returned 1
	[0114.501] SetEvent (hEvent=0x2e4) returned 1
	[0114.501] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0116.581] SetEvent (hEvent=0x70) returned 1
	[0116.581] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0120.212] SetEvent (hEvent=0x30c) returned 1
	[0120.213] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0120.283] SetEvent (hEvent=0x30c) returned 1
	[0120.283] SetEvent (hEvent=0x2e4) returned 1
	[0120.284] GetFileType (hFile=0x2cc) returned 0x1
	[0120.284] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.284] WriteFile (in: hFile=0x2cc, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f7d00, lpOverlapped=0x124f7d0c | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x124f7d00*=0x20000, lpOverlapped=0x124f7d0c) returned 1
	[0120.360] GetFileType (hFile=0x2cc) returned 0x1
	[0120.360] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.360] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0120.360] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0120.360] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0120.361] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0120.362] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0120.362] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7d0c | out: lpMode=0x124f7d0c) returned 0
	[0120.362] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.421] CloseHandle (hObject=0x2fc) returned 1
	[0120.503] CloseHandle (hObject=0x2cc) returned 1
	[0120.503] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Office32MUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\office32mui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.504] SetEvent (hEvent=0x2e4) returned 1
	[0120.504] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0120.504] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7d0c | out: lpMode=0x124f7d0c) returned 0
	[0120.504] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7ad0 | out: lpFileInformation=0x124f7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa13c510, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x73c)) returned 1
	[0120.505] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0120.505] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441f8 | out: pbBuffer=0x127441f8) returned 1
	[0120.505] ReadFile (in: hFile=0x2cc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f7d1c*=0x73c, lpOverlapped=0x0) returned 1
	[0120.564] GetFileType (hFile=0x2cc) returned 0x1
	[0120.564] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.564] WriteFile (in: hFile=0x2cc, lpBuffer=0x126dc000*, nNumberOfBytesToWrite=0x73c, lpNumberOfBytesWritten=0x124f7d00, lpOverlapped=0x124f7d0c | out: lpBuffer=0x126dc000*, lpNumberOfBytesWritten=0x124f7d00*=0x73c, lpOverlapped=0x124f7d0c) returned 1
	[0120.564] GetFileType (hFile=0x2cc) returned 0x1
	[0120.564] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x73c, lpNewFilePointer=0x0, dwMoveMethod=0x124f7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.564] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0120.565] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0120.565] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f01 | out: pbBuffer=0x12400f01) returned 1
	[0120.565] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127442b0 | out: pbBuffer=0x127442b0) returned 1
	[0120.565] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0120.565] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7d0c | out: lpMode=0x124f7d0c) returned 0
	[0120.565] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.566] CloseHandle (hObject=0x33c) returned 1
	[0120.569] CloseHandle (hObject=0x2cc) returned 1
	[0120.569] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0044-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0044-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.570] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0120.859] SetEvent (hEvent=0x70) returned 1
	[0120.859] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0120.863] SetEvent (hEvent=0x30c) returned 1
	[0120.863] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x1) returned 0x0
	[0120.865] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x1) returned 0x0
	[0120.868] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33d3fb30, ulCount=0x10, ulNumEntriesRemoved=0x33d3fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33d3fb30, ulNumEntriesRemoved=0x33d3fb14) returned 0
	[0120.868] SetEvent (hEvent=0x70) returned 1
	[0120.868] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x1) returned 0x0
	[0120.879] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0120.883] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0120.883] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0120.891] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xf58ee8d0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf6e0ec10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf6e0ec10, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0120.892] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.msi", cAlternateFileName="ONENOT~1.MSI")) returned 1
	[0120.892] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteMUI.xml", cAlternateFileName="ONENOT~1.XML")) returned 1
	[0120.892] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OnoteLR.cab", cAlternateFileName="")) returned 1
	[0120.892] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0120.892] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0120.892] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0120.893] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0120.894] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0120.894] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0120.897] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0120.897] WriteFile (in: hFile=0x304, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0120.899] CloseHandle (hObject=0x304) returned 1
	[0120.899] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5914a30, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1
	[0120.899] SetEvent (hEvent=0x70) returned 1
	[0120.899] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OneNoteMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onenotemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58ed930, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x646)) returned 1
	[0120.900] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\OnoteLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\onotelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x36db9d00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x36db9d00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf5e95540, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10a5df8)) returned 1
	[0120.903] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00A1-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-00a1-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf6e0d4a0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x7c4)) returned 1
	[0120.903] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0120.914] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0120.914] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0120.926] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xa5b30b20, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xa5bc90a0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa5bc90a0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0120.926] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.msi", cAlternateFileName="PROJEC~1.MSI")) returned 1
	[0120.926] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjectMUI.xml", cAlternateFileName="PROJEC~1.XML")) returned 1
	[0120.926] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProjLR.cab", cAlternateFileName="")) returned 1
	[0120.926] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x309dfcc0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x309dfcc0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5bc88d0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0120.926] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0120.926] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0120.928] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0120.929] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0120.929] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0120.930] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0120.930] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0120.932] CloseHandle (hObject=0x340) returned 1
	[0120.932] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30306de0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30306de0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b7cde0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x7e1dcd)) returned 1
	[0120.944] SetEvent (hEvent=0x70) returned 1
	[0120.945] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x308ae9f0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x308ae9f0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b55ce0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x265400)) returned 1
	[0120.950] SetEvent (hEvent=0x70) returned 1
	[0120.950] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1
	[0120.958] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0120.962] SetEvent (hEvent=0x2f4) returned 1
	[0120.962] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0121.145] SetEvent (hEvent=0x68) returned 1
	[0121.145] SetEvent (hEvent=0x30c) returned 1
	[0121.145] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0xffffffff) returned 0x0
	[0121.164] GetFileType (hFile=0x328) returned 0x1
	[0121.164] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.164] WriteFile (in: hFile=0x328, lpBuffer=0x1270c000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x1270c000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0121.165] GetFileType (hFile=0x328) returned 0x1
	[0121.165] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0121.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0121.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0121.166] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0121.166] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0121.166] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.166] WriteFile (in: hFile=0x2fc, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.184] CloseHandle (hObject=0x2fc) returned 1
	[0121.184] CloseHandle (hObject=0x328) returned 1
	[0121.184] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.185] SetEvent (hEvent=0x80) returned 1
	[0121.185] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x26e2) returned 0x102
	[0131.542] SetEvent (hEvent=0x318) returned 1
	[0131.542] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x13878) returned 0x0
	[0142.253] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x26e1) returned 0x102
	[0152.892] SetEvent (hEvent=0x30c) returned 1
	[0152.892] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x13866) returned 0x0
	[0153.117] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x26d1) returned 0x102
	[0164.738] SetEvent (hEvent=0x70) returned 1
	[0164.738] SetEvent (hEvent=0x2f4) returned 1
	[0164.738] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x13835) returned 0x0
	[0165.279] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x2697) returned 0x102
	[0176.809] SetEvent (hEvent=0x2e8) returned 1
	[0176.809] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x13810) returned 0x0
	[0199.596] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x26e1) returned 0x102
	[0209.600] SetEvent (hEvent=0xa0) returned 1
	[0209.601] SetEvent (hEvent=0x2e8) returned 1
	[0209.601] SetEvent (hEvent=0x78) returned 1
	[0209.601] WaitForSingleObject (hHandle=0x308, dwMilliseconds=0x1387b) 

Thread:
	id = 55
	os_tid = 0x9bc

	[0107.866] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x33e7ff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x33e7ff38*=0x31c) returned 1
	[0107.866] VirtualQuery (in: lpAddress=0x33e7ff48, lpBuffer=0x33e7ff48, dwLength=0x1c | out: lpBuffer=0x33e7ff48*(BaseAddress=0x33e7f000, AllocationBase=0x33d80000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0107.866] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x318
	[0107.866] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0107.926] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0107.934] SetEvent (hEvent=0x308) returned 1
	[0107.934] SetEvent (hEvent=0x2e4) returned 1
	[0107.934] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0107.994] SetEvent (hEvent=0x308) returned 1
	[0107.994] SwitchToThread () returned 1
	[0108.036] SwitchToThread () returned 1
	[0108.112] SetEvent (hEvent=0x320) returned 1
	[0108.112] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x330
	[0108.112] GetConsoleMode (in: hConsoleHandle=0x330, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0108.112] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0108.315] SetEvent (hEvent=0x70) returned 1
	[0108.315] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x8f8)) returned 1
	[0108.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0108.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0108.692] ReadFile (in: hFile=0x330, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x126e5d1c*=0x8f8, lpOverlapped=0x0) returned 1
	[0108.980] GetFileType (hFile=0x330) returned 0x1
	[0108.980] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0108.981] WriteFile (in: hFile=0x330, lpBuffer=0x12494900*, nNumberOfBytesToWrite=0x8f8, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12494900*, lpNumberOfBytesWritten=0x126e5d00*=0x8f8, lpOverlapped=0x126e5d0c) returned 1
	[0108.981] GetFileType (hFile=0x330) returned 0x1
	[0108.981] SetFilePointerEx (in: hFile=0x330, liDistanceToMove=0x8f8, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0108.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0108.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0108.981] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0108.982] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0108.982] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0108.982] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0108.982] WriteFile (in: hFile=0x338, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0108.982] CloseHandle (hObject=0x338) returned 1
	[0108.999] CloseHandle (hObject=0x330) returned 1
	[0109.000] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0109.004] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1
	[0109.004] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PptLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\pptlr.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2d523500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x2d523500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe8b079d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x431a290)) returned 1
	[0109.129] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0121.620] SetEvent (hEvent=0x30c) returned 1
	[0121.620] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0121.672] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0121.697] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0121.895] SetEvent (hEvent=0x2e4) returned 1
	[0121.895] SetEvent (hEvent=0x70) returned 1
	[0121.895] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0121.904] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0121.904] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0121.904] SetEvent (hEvent=0x70) returned 1
	[0121.904] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0121.906] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0121.906] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.100] SetEvent (hEvent=0x30c) returned 1
	[0122.100] SetEvent (hEvent=0x320) returned 1
	[0122.100] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.104] SetEvent (hEvent=0x70) returned 1
	[0122.104] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\osetup.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\osetup.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.161] SetEvent (hEvent=0x2e8) returned 1
	[0122.161] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0122.161] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0122.161] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0122.161] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0122.161] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0122.162] ReadFile (in: hFile=0x340, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.180] GetFileType (hFile=0x340) returned 0x1
	[0122.180] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.180] WriteFile (in: hFile=0x340, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0122.181] GetFileType (hFile=0x340) returned 0x1
	[0122.181] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.181] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0122.181] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0122.181] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0122.181] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0122.181] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.182] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0122.182] WriteFile (in: hFile=0x338, lpBuffer=0x12524000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12524000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.189] CloseHandle (hObject=0x338) returned 1
	[0122.190] CloseHandle (hObject=0x340) returned 1
	[0122.191] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\PidGenX.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pidgenx.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.218] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.232] SetEvent (hEvent=0x80) returned 1
	[0122.232] SetEvent (hEvent=0x70) returned 1
	[0122.232] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.360] SetEvent (hEvent=0x2e8) returned 1
	[0122.360] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.378] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.482] SetEvent (hEvent=0x30c) returned 1
	[0122.482] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.491] SetEvent (hEvent=0x68) returned 1
	[0122.491] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0122.492] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0122.494] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0122.495] SetEvent (hEvent=0x30c) returned 1
	[0122.495] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0122.503] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.504] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.504] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x249fa376, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae0e8854, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae0e8854, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0xd5310)) returned 1
	[0122.504] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0122.504] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0122.504] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.514] GetFileType (hFile=0x33c) returned 0x1
	[0122.514] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.514] WriteFile (in: hFile=0x33c, lpBuffer=0x126ec000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x126ec000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0122.514] GetFileType (hFile=0x33c) returned 0x1
	[0122.515] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.515] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0122.515] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0122.515] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0122.515] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0122.515] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.515] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.515] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.525] CloseHandle (hObject=0x2fc) returned 1
	[0122.525] CloseHandle (hObject=0x33c) returned 1
	[0122.525] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), lpNewFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.533] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.541] SetEvent (hEvent=0x80) returned 1
	[0122.541] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.541] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.541] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f)) returned 1
	[0122.541] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0122.541] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0122.541] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x126e9d1c*=0x2f, lpOverlapped=0x0) returned 1
	[0122.543] GetFileType (hFile=0x33c) returned 0x1
	[0122.543] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.543] WriteFile (in: hFile=0x33c, lpBuffer=0x125300c0*, nNumberOfBytesToWrite=0x2f, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x125300c0*, lpNumberOfBytesWritten=0x126e9d00*=0x2f, lpOverlapped=0x126e9d0c) returned 1
	[0122.543] GetFileType (hFile=0x33c) returned 0x1
	[0122.543] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x2f, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.543] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0122.543] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0122.543] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0122.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0122.544] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.544] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.544] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.544] CloseHandle (hObject=0x2fc) returned 1
	[0122.544] CloseHandle (hObject=0x33c) returned 1
	[0122.545] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), lpNewFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.546] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.546] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.546] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d)) returned 1
	[0122.546] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e660 | out: pbBuffer=0x1252e660) returned 1
	[0122.546] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0122.546] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x126e7d1c*=0x41d, lpOverlapped=0x0) returned 1
	[0122.562] GetFileType (hFile=0x33c) returned 0x1
	[0122.562] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.562] WriteFile (in: hFile=0x33c, lpBuffer=0x12491200*, nNumberOfBytesToWrite=0x41d, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12491200*, lpNumberOfBytesWritten=0x126e7d00*=0x41d, lpOverlapped=0x126e7d0c) returned 1
	[0122.563] GetFileType (hFile=0x33c) returned 0x1
	[0122.563] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x41d, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0122.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0122.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0122.564] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106b0 | out: pbBuffer=0x124106b0) returned 1
	[0122.564] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.564] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.564] WriteFile (in: hFile=0x2fc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.564] CloseHandle (hObject=0x2fc) returned 1
	[0122.564] CloseHandle (hObject=0x33c) returned 1
	[0122.565] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), lpNewFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.565] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.622] SetEvent (hEvent=0x80) returned 1
	[0122.622] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.622] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.622] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.623] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.623] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.623] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.623] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.623] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png\\*", lpFindFileData=0x126e7a44 | out: lpFindFileData=0x126e7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.623] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.626] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.642] SetEvent (hEvent=0x80) returned 1
	[0122.642] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.642] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.642] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.642] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.642] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.642] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png\\*", lpFindFileData=0x126e7a44 | out: lpFindFileData=0x126e7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.642] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.683] SetEvent (hEvent=0x80) returned 1
	[0122.683] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.683] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.683] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.683] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.683] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.683] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.683] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.684] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico\\*", lpFindFileData=0x126e7a44 | out: lpFindFileData=0x126e7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.684] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.700] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.702] SetEvent (hEvent=0x80) returned 1
	[0122.702] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.703] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico\\*", lpFindFileData=0x126e7a44 | out: lpFindFileData=0x126e7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.703] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.703] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml\\*", lpFindFileData=0x126e9a44 | out: lpFindFileData=0x126e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.703] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.703] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.703] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.703] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.703] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0122.712] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0123.097] SetEvent (hEvent=0x80) returned 1
	[0123.097] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlconfig.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0123.098] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0123.098] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlconfig.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00)) returned 1
	[0123.098] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e880 | out: pbBuffer=0x1252e880) returned 1
	[0123.098] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410770 | out: pbBuffer=0x12410770) returned 1
	[0123.098] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f1d1c*=0x3d00, lpOverlapped=0x0) returned 1
	[0123.116] GetFileType (hFile=0x33c) returned 0x1
	[0123.116] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.116] WriteFile (in: hFile=0x33c, lpBuffer=0x12986000*, nNumberOfBytesToWrite=0x3d00, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12986000*, lpNumberOfBytesWritten=0x124f1d00*=0x3d00, lpOverlapped=0x124f1d0c) returned 1
	[0123.117] GetFileType (hFile=0x33c) returned 0x1
	[0123.117] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3d00, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435181 | out: pbBuffer=0x12435181) returned 1
	[0123.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435281 | out: pbBuffer=0x12435281) returned 1
	[0123.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435381 | out: pbBuffer=0x12435381) returned 1
	[0123.117] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410848 | out: pbBuffer=0x12410848) returned 1
	[0123.117] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlconfig.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0123.117] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0123.117] WriteFile (in: hFile=0x32c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.118] CloseHandle (hObject=0x32c) returned 1
	[0123.118] CloseHandle (hObject=0x33c) returned 1
	[0123.118] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlconfig.dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlconfig.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.119] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0123.119] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0123.119] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c)) returned 1
	[0123.119] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252eaa0 | out: pbBuffer=0x1252eaa0) returned 1
	[0123.119] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410870 | out: pbBuffer=0x12410870) returned 1
	[0123.119] ReadFile (in: hFile=0x33c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f3d1c*=0x3a7c, lpOverlapped=0x0) returned 1
	[0123.246] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0123.253] SetEvent (hEvent=0x2e4) returned 1
	[0123.253] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0123.253] SetEvent (hEvent=0x2e4) returned 1
	[0123.254] SetEvent (hEvent=0x68) returned 1
	[0123.254] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE" (normalized: "c:\\programdata\\microsoft\\office"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.261] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE" (normalized: "c:\\programdata\\microsoft\\office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.261] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.319] SetEvent (hEvent=0xa0) returned 1
	[0123.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x6d3a4910, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetLibrary.ico", cAlternateFileName="ASSETL~1.ICO")) returned 1
	[0123.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentRepository.ico", cAlternateFileName="DOCUME~1.ICO")) returned 1
	[0123.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySharePoints.ico", cAlternateFileName="MYSHAR~1.ICO")) returned 1
	[0123.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc92d1d00, ftCreationTime.dwHighDateTime=0x1c627a2, ftLastAccessTime.dwLowDateTime=0x594ac510, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xc92d1d00, ftLastWriteTime.dwHighDateTime=0x1c627a2, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MySite.ico", cAlternateFileName="")) returned 1
	[0123.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf2444900, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x5ab49610, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xf2444900, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointPortalSite.ico", cAlternateFileName="SHAREP~1.ICO")) returned 1
	[0123.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad743900, ftCreationTime.dwHighDateTime=0x1c62706, ftLastAccessTime.dwLowDateTime=0x6d3a4910, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xad743900, ftLastWriteTime.dwHighDateTime=0x1c62706, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharePointTeamSite.ico", cAlternateFileName="SHAREP~2.ICO")) returned 1
	[0123.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeed38550, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xeed38550, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UICaptions", cAlternateFileName="UICAPT~1")) returned 1
	[0123.319] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.319] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.320] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.321] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.321] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\office\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0123.321] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0123.321] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0123.323] CloseHandle (hObject=0x2cc) returned 1
	[0123.323] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\programdata\\microsoft\\office\\assetlibrary.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5011dd00, ftCreationTime.dwHighDateTime=0x1ca04ff, ftLastAccessTime.dwLowDateTime=0x5f409670, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x5011dd00, ftLastWriteTime.dwHighDateTime=0x1ca04ff, nFileSizeHigh=0x0, nFileSizeLow=0x1536)) returned 1
	[0123.324] SetEvent (hEvent=0x80) returned 1
	[0123.324] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\programdata\\microsoft\\office\\documentrepository.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabeeea00, ftCreationTime.dwHighDateTime=0x1c63848, ftLastAccessTime.dwLowDateTime=0x51e19d30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xabeeea00, ftLastWriteTime.dwHighDateTime=0x1c63848, nFileSizeHigh=0x0, nFileSizeLow=0x627e)) returned 1
	[0123.328] SetEvent (hEvent=0x68) returned 1
	[0123.328] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\programdata\\microsoft\\office\\mysharepoints.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2bfbd800, ftCreationTime.dwHighDateTime=0x1c9facb, ftLastAccessTime.dwLowDateTime=0x6a3248d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2bfbd800, ftLastWriteTime.dwHighDateTime=0x1c9facb, nFileSizeHigh=0x0, nFileSizeLow=0x5532e)) returned 1
	[0123.330] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0123.363] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0123.386] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0123.537] SetEvent (hEvent=0x80) returned 1
	[0123.538] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0123.540] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0123.540] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0123.540] SetEvent (hEvent=0x70) returned 1
	[0123.540] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0123.542] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0123.626] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0123.712] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.228] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.239] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.271] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.271] SetEvent (hEvent=0x68) returned 1
	[0124.271] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.273] SetEvent (hEvent=0x68) returned 1
	[0124.273] SetEvent (hEvent=0x80) returned 1
	[0124.273] SwitchToThread () returned 1
	[0124.274] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.280] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.292] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.306] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.311] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.317] SetEvent (hEvent=0x80) returned 1
	[0124.317] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.318] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.318] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60)) returned 1
	[0124.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c280 | out: pbBuffer=0x1244c280) returned 1
	[0124.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0124.318] ReadFile (in: hFile=0x338, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.437] GetFileType (hFile=0x338) returned 0x1
	[0124.437] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.437] WriteFile (in: hFile=0x338, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0124.438] GetFileType (hFile=0x338) returned 0x1
	[0124.438] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0124.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0124.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0124.439] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e8a0 | out: pbBuffer=0x1251e8a0) returned 1
	[0124.439] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.439] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.439] WriteFile (in: hFile=0x32c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.457] CloseHandle (hObject=0x32c) returned 1
	[0124.466] CloseHandle (hObject=0x338) returned 1
	[0124.469] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.522] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.525] SetEvent (hEvent=0x2e4) returned 1
	[0124.525] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.525] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.525] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6d7a1200, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6d7a1200, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360)) returned 1
	[0124.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0124.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0124.525] ReadFile (in: hFile=0x340, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x126e5d1c*=0x3360, lpOverlapped=0x0) returned 1
	[0124.528] GetFileType (hFile=0x340) returned 0x1
	[0124.528] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.528] WriteFile (in: hFile=0x340, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x3360, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x126e5d00*=0x3360, lpOverlapped=0x126e5d0c) returned 1
	[0124.528] GetFileType (hFile=0x340) returned 0x1
	[0124.528] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x3360, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.528] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0124.529] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0124.529] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0124.529] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0124.529] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.530] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.530] WriteFile (in: hFile=0x32c, lpBuffer=0x12634000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12634000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.530] CloseHandle (hObject=0x32c) returned 1
	[0124.530] CloseHandle (hObject=0x340) returned 1
	[0124.531] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.551] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.552] SetEvent (hEvent=0x80) returned 1
	[0124.552] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.552] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0124.552] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a315700, ftCreationTime.dwHighDateTime=0x1cac814, ftLastAccessTime.dwLowDateTime=0xef0a44f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6a315700, ftLastWriteTime.dwHighDateTime=0x1cac814, nFileSizeHigh=0x0, nFileSizeLow=0x77560)) returned 1
	[0124.553] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c480 | out: pbBuffer=0x1244c480) returned 1
	[0124.553] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e788 | out: pbBuffer=0x1251e788) returned 1
	[0124.553] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.562] GetFileType (hFile=0x33c) returned 0x1
	[0124.562] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.562] WriteFile (in: hFile=0x33c, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0124.563] GetFileType (hFile=0x33c) returned 0x1
	[0124.563] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0124.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0124.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0124.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e8a0 | out: pbBuffer=0x1251e8a0) returned 1
	[0124.563] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.564] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0124.564] WriteFile (in: hFile=0x2fc, lpBuffer=0x12634a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12634a00*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.568] CloseHandle (hObject=0x2fc) returned 1
	[0124.569] CloseHandle (hObject=0x33c) returned 1
	[0124.585] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.624] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.626] SetEvent (hEvent=0x80) returned 1
	[0124.626] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.626] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.626] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6b688100, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef0f07b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x6b688100, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x25360)) returned 1
	[0124.626] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0124.626] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441c8 | out: pbBuffer=0x127441c8) returned 1
	[0124.626] ReadFile (in: hFile=0x33c, lpBuffer=0x12918000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12918000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.633] GetFileType (hFile=0x33c) returned 0x1
	[0124.633] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.633] WriteFile (in: hFile=0x33c, lpBuffer=0x12958000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12958000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0124.634] GetFileType (hFile=0x33c) returned 0x1
	[0124.634] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.634] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0124.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0124.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0124.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744280 | out: pbBuffer=0x12744280) returned 1
	[0124.635] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.635] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.636] WriteFile (in: hFile=0x32c, lpBuffer=0x12780a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12780a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.636] CloseHandle (hObject=0x32c) returned 1
	[0124.636] CloseHandle (hObject=0x33c) returned 1
	[0124.637] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.685] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.690] SetEvent (hEvent=0x30c) returned 1
	[0124.690] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.690] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.690] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeed38550, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x3760)) returned 1
	[0124.691] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732080 | out: pbBuffer=0x12732080) returned 1
	[0124.691] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788020 | out: pbBuffer=0x12788020) returned 1
	[0124.691] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f5d1c*=0x3760, lpOverlapped=0x0) returned 1
	[0124.702] GetFileType (hFile=0x33c) returned 0x1
	[0124.702] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.703] WriteFile (in: hFile=0x33c, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x124f5d00*=0x3760, lpOverlapped=0x124f5d0c) returned 1
	[0124.703] GetFileType (hFile=0x33c) returned 0x1
	[0124.703] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3760, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.703] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0124.703] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0124.703] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0124.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0124.704] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.704] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.704] WriteFile (in: hFile=0x338, lpBuffer=0x124b2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b2000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.704] CloseHandle (hObject=0x338) returned 1
	[0124.705] CloseHandle (hObject=0x33c) returned 1
	[0124.705] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.707] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60)) returned 1
	[0124.707] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0xc160)) returned 1
	[0124.714] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.754] SetEvent (hEvent=0x2e4) returned 1
	[0124.754] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360)) returned 1
	[0124.754] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63b88300, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x63b88300, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60)) returned 1
	[0124.754] SetEvent (hEvent=0x2e8) returned 1
	[0124.754] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.865] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.897] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360)) returned 1
	[0124.898] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xca190500, ftCreationTime.dwHighDateTime=0x1cac7f6, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xca190500, ftLastWriteTime.dwHighDateTime=0x1cac7f6, nFileSizeHigh=0x0, nFileSizeLow=0x4360)) returned 1
	[0124.898] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.898] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.898] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x94d0df00, ftCreationTime.dwHighDateTime=0x1cac817, ftLastAccessTime.dwLowDateTime=0xef058230, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x94d0df00, ftLastWriteTime.dwHighDateTime=0x1cac817, nFileSizeHigh=0x0, nFileSizeLow=0x3360)) returned 1
	[0124.898] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0124.899] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0124.899] ReadFile (in: hFile=0x32c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x126ebd1c*=0x3360, lpOverlapped=0x0) returned 1
	[0124.918] GetFileType (hFile=0x32c) returned 0x1
	[0124.918] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.918] WriteFile (in: hFile=0x32c, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x3360, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x126ebd00*=0x3360, lpOverlapped=0x126ebd0c) returned 1
	[0124.919] GetFileType (hFile=0x32c) returned 0x1
	[0124.919] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x3360, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.919] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0124.919] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0124.919] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0124.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0124.920] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.920] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.920] WriteFile (in: hFile=0x338, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.920] CloseHandle (hObject=0x338) returned 1
	[0124.920] CloseHandle (hObject=0x32c) returned 1
	[0124.921] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.921] SetEvent (hEvent=0x30c) returned 1
	[0124.921] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0124.946] SetEvent (hEvent=0x2e8) returned 1
	[0124.947] SetEvent (hEvent=0x80) returned 1
	[0124.947] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.385] SetEvent (hEvent=0x80) returned 1
	[0125.386] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.387] SetEvent (hEvent=0x80) returned 1
	[0125.387] SetEvent (hEvent=0x70) returned 1
	[0125.387] SwitchToThread () returned 1
	[0125.388] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.394] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.402] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.453] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.461] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.476] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.477] SetEvent (hEvent=0x68) returned 1
	[0125.477] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.477] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.478] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xf5fa06b0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xf5fa06b0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xf5fec970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1
	[0125.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0125.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0125.478] ReadFile (in: hFile=0x338, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0x158, lpOverlapped=0x0) returned 1
	[0125.479] GetFileType (hFile=0x338) returned 0x1
	[0125.479] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.479] WriteFile (in: hFile=0x338, lpBuffer=0x1263a160*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1263a160*, lpNumberOfBytesWritten=0x124f3d00*=0x158, lpOverlapped=0x124f3d0c) returned 1
	[0125.480] GetFileType (hFile=0x338) returned 0x1
	[0125.480] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0125.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0125.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0125.481] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441b0 | out: pbBuffer=0x127441b0) returned 1
	[0125.481] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.481] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.481] WriteFile (in: hFile=0x340, lpBuffer=0x12462500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12462500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.481] CloseHandle (hObject=0x340) returned 1
	[0125.482] CloseHandle (hObject=0x338) returned 1
	[0125.482] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.517] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.519] SetEvent (hEvent=0x68) returned 1
	[0125.519] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.519] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.519] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x5269fec0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0125.520] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732680 | out: pbBuffer=0x12732680) returned 1
	[0125.520] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882a8 | out: pbBuffer=0x127882a8) returned 1
	[0125.520] ReadFile (in: hFile=0x338, lpBuffer=0x128e2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e2000*, lpNumberOfBytesRead=0x124f5d1c*=0x146, lpOverlapped=0x0) returned 1
	[0125.521] GetFileType (hFile=0x338) returned 0x1
	[0125.521] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.521] WriteFile (in: hFile=0x338, lpBuffer=0x1247c9a0*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1247c9a0*, lpNumberOfBytesWritten=0x124f5d00*=0x146, lpOverlapped=0x124f5d0c) returned 1
	[0125.521] GetFileType (hFile=0x338) returned 0x1
	[0125.521] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x146, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.521] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0125.522] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0125.522] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0125.522] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788370 | out: pbBuffer=0x12788370) returned 1
	[0125.522] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.522] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.522] WriteFile (in: hFile=0x340, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.522] CloseHandle (hObject=0x340) returned 1
	[0125.523] CloseHandle (hObject=0x338) returned 1
	[0125.523] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.553] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.554] SetEvent (hEvent=0x70) returned 1
	[0125.554] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.555] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.555] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x15e)) returned 1
	[0125.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0125.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0125.555] ReadFile (in: hFile=0x2fc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f1d1c*=0x15e, lpOverlapped=0x0) returned 1
	[0125.572] GetFileType (hFile=0x2fc) returned 0x1
	[0125.572] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.572] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x124f1d00*=0x15e, lpOverlapped=0x124f1d0c) returned 1
	[0125.573] GetFileType (hFile=0x2fc) returned 0x1
	[0125.573] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x15e, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.573] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0125.573] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0125.573] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0125.573] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0125.574] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.574] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.574] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.574] CloseHandle (hObject=0x340) returned 1
	[0125.581] CloseHandle (hObject=0x2fc) returned 1
	[0125.584] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.599] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.601] SetEvent (hEvent=0x70) returned 1
	[0125.601] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.601] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.601] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1
	[0125.601] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0125.601] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0125.601] ReadFile (in: hFile=0x2fc, lpBuffer=0x126d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d8000*, lpNumberOfBytesRead=0x12429d1c*=0x16a, lpOverlapped=0x0) returned 1
	[0125.602] GetFileType (hFile=0x2fc) returned 0x1
	[0125.602] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.603] WriteFile (in: hFile=0x2fc, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x12429d00*=0x16a, lpOverlapped=0x12429d0c) returned 1
	[0125.603] GetFileType (hFile=0x2fc) returned 0x1
	[0125.603] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x16a, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0125.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0125.603] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0125.604] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0125.604] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.604] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.604] WriteFile (in: hFile=0x340, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.604] CloseHandle (hObject=0x340) returned 1
	[0125.605] CloseHandle (hObject=0x2fc) returned 1
	[0125.606] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.620] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.630] SetEvent (hEvent=0x70) returned 1
	[0125.630] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.630] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.630] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xe80ff230, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe80ff230, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x21dc)) returned 1
	[0125.630] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0125.630] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0125.630] ReadFile (in: hFile=0x2fc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0x21dc, lpOverlapped=0x0) returned 1
	[0125.678] SetEvent (hEvent=0xa0) returned 1
	[0125.679] GetFileType (hFile=0x2fc) returned 0x1
	[0125.679] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.679] WriteFile (in: hFile=0x2fc, lpBuffer=0x12982000*, nNumberOfBytesToWrite=0x21dc, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12982000*, lpNumberOfBytesWritten=0x124f3d00*=0x21dc, lpOverlapped=0x124f3d0c) returned 1
	[0125.679] GetFileType (hFile=0x2fc) returned 0x1
	[0125.679] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x21dc, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.679] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0125.679] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0125.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0125.680] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788190 | out: pbBuffer=0x12788190) returned 1
	[0125.680] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.680] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.680] WriteFile (in: hFile=0x2cc, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.680] CloseHandle (hObject=0x2cc) returned 1
	[0125.680] CloseHandle (hObject=0x2fc) returned 1
	[0125.681] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.681] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.812] SetEvent (hEvent=0x30c) returned 1
	[0125.812] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.812] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.812] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59d2100, ftCreationTime.dwHighDateTime=0x1d0a100, ftLastAccessTime.dwLowDateTime=0x59d2100, ftLastAccessTime.dwHighDateTime=0x1d0a100, ftLastWriteTime.dwLowDateTime=0x59d2100, ftLastWriteTime.dwHighDateTime=0x1d0a100, nFileSizeHigh=0x0, nFileSizeLow=0xf7139)) returned 1
	[0125.812] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e640 | out: pbBuffer=0x1240e640) returned 1
	[0125.812] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0125.812] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0125.813] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.813] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0125.813] SetEvent (hEvent=0x30c) returned 1
	[0125.814] ReadFile (in: hFile=0x338, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0125.841] GetFileType (hFile=0x338) returned 0x1
	[0125.841] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.841] WriteFile (in: hFile=0x338, lpBuffer=0x128bc000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x128bc000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0125.843] GetFileType (hFile=0x338) returned 0x1
	[0125.843] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0125.844] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0125.844] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0125.844] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127883c0 | out: pbBuffer=0x127883c0) returned 1
	[0125.844] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.844] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.844] WriteFile (in: hFile=0x2fc, lpBuffer=0x12612500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.848] CloseHandle (hObject=0x2fc) returned 1
	[0125.848] CloseHandle (hObject=0x338) returned 1
	[0125.848] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), lpNewFileName="C:\\ProgramData\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.850] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.857] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.880] SetEvent (hEvent=0x70) returned 1
	[0125.880] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.881] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.881] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c)) returned 1
	[0125.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0125.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0125.881] ReadFile (in: hFile=0x338, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0125.895] GetFileType (hFile=0x338) returned 0x1
	[0125.895] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.895] WriteFile (in: hFile=0x338, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0125.897] GetFileType (hFile=0x338) returned 0x1
	[0125.897] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.897] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0125.897] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0125.897] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0125.898] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0125.898] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.898] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.898] WriteFile (in: hFile=0x2fc, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.903] CloseHandle (hObject=0x2fc) returned 1
	[0125.903] CloseHandle (hObject=0x338) returned 1
	[0125.906] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), lpNewFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.920] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0125.926] SetEvent (hEvent=0x70) returned 1
	[0125.926] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.927] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0125.927] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be)) returned 1
	[0125.927] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0125.927] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0125.927] ReadFile (in: hFile=0x2cc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0125.945] GetFileType (hFile=0x2cc) returned 0x1
	[0125.945] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.945] WriteFile (in: hFile=0x2cc, lpBuffer=0x128dc000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x128dc000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0125.946] GetFileType (hFile=0x2cc) returned 0x1
	[0125.946] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.946] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0125.946] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0125.947] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d01 | out: pbBuffer=0x127e8d01) returned 1
	[0125.947] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5e0 | out: pbBuffer=0x1251e5e0) returned 1
	[0125.947] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.947] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0125.947] WriteFile (in: hFile=0x2fc, lpBuffer=0x12612a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12612a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.959] CloseHandle (hObject=0x2fc) returned 1
	[0125.959] CloseHandle (hObject=0x2cc) returned 1
	[0125.959] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.960] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.960] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.960] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e)) returned 1
	[0125.960] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0125.960] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f8 | out: pbBuffer=0x1251e5f8) returned 1
	[0125.960] ReadFile (in: hFile=0x2cc, lpBuffer=0x1291c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1291c000*, lpNumberOfBytesRead=0x124f1d1c*=0x28e, lpOverlapped=0x0) returned 1
	[0125.962] GetFileType (hFile=0x2cc) returned 0x1
	[0125.962] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.962] WriteFile (in: hFile=0x2cc, lpBuffer=0x12610840*, nNumberOfBytesToWrite=0x28e, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12610840*, lpNumberOfBytesWritten=0x124f1d00*=0x28e, lpOverlapped=0x124f1d0c) returned 1
	[0125.962] GetFileType (hFile=0x2cc) returned 0x1
	[0125.962] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x28e, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.962] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8f01 | out: pbBuffer=0x127e8f01) returned 1
	[0125.962] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9001 | out: pbBuffer=0x127e9001) returned 1
	[0125.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9101 | out: pbBuffer=0x127e9101) returned 1
	[0125.963] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0125.963] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.963] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.963] WriteFile (in: hFile=0x2fc, lpBuffer=0x12612f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.963] CloseHandle (hObject=0x2fc) returned 1
	[0125.963] CloseHandle (hObject=0x2cc) returned 1
	[0125.963] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.964] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.964] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.964] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428)) returned 1
	[0125.965] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f100 | out: pbBuffer=0x1240f100) returned 1
	[0125.965] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e758 | out: pbBuffer=0x1251e758) returned 1
	[0125.965] ReadFile (in: hFile=0x2cc, lpBuffer=0x1295c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1295c000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0125.978] GetFileType (hFile=0x2cc) returned 0x1
	[0125.978] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.978] WriteFile (in: hFile=0x2cc, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0125.979] GetFileType (hFile=0x2cc) returned 0x1
	[0125.979] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.979] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9201 | out: pbBuffer=0x127e9201) returned 1
	[0125.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9301 | out: pbBuffer=0x127e9301) returned 1
	[0125.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9401 | out: pbBuffer=0x127e9401) returned 1
	[0125.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e870 | out: pbBuffer=0x1251e870) returned 1
	[0125.980] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.980] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.980] WriteFile (in: hFile=0x2fc, lpBuffer=0x12613400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12613400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.989] CloseHandle (hObject=0x2fc) returned 1
	[0125.989] CloseHandle (hObject=0x2cc) returned 1
	[0125.990] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.991] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0126.001] SetEvent (hEvent=0x70) returned 1
	[0126.001] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.002] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0126.002] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124)) returned 1
	[0126.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f500 | out: pbBuffer=0x1240f500) returned 1
	[0126.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e888 | out: pbBuffer=0x1251e888) returned 1
	[0126.002] ReadFile (in: hFile=0x2cc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.012] GetFileType (hFile=0x2cc) returned 0x1
	[0126.012] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.012] WriteFile (in: hFile=0x2cc, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0126.013] GetFileType (hFile=0x2cc) returned 0x1
	[0126.013] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9601 | out: pbBuffer=0x127e9601) returned 1
	[0126.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9701 | out: pbBuffer=0x127e9701) returned 1
	[0126.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9801 | out: pbBuffer=0x127e9801) returned 1
	[0126.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e9a0 | out: pbBuffer=0x1251e9a0) returned 1
	[0126.014] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.015] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0126.015] WriteFile (in: hFile=0x338, lpBuffer=0x12613900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12613900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.028] CloseHandle (hObject=0x338) returned 1
	[0126.028] CloseHandle (hObject=0x2cc) returned 1
	[0126.028] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0126.088] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0126.198] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0126.229] SetEvent (hEvent=0x30c) returned 1
	[0126.229] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0126.238] SetEvent (hEvent=0x2e4) returned 1
	[0126.238] SetEvent (hEvent=0x2e8) returned 1
	[0126.238] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0126.241] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0126.255] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0126.261] SetEvent (hEvent=0x30c) returned 1
	[0126.261] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.262] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0126.262] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c9b1b00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7c9b1b00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7c9b1b00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x554520)) returned 1
	[0126.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0126.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0126.262] ReadFile (in: hFile=0x338, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.278] GetFileType (hFile=0x338) returned 0x1
	[0126.278] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.278] WriteFile (in: hFile=0x338, lpBuffer=0x12818000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12818000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0126.279] GetFileType (hFile=0x338) returned 0x1
	[0126.279] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0126.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0126.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0126.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0126.279] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.280] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0126.280] WriteFile (in: hFile=0x340, lpBuffer=0x1264a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1264a000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.289] CloseHandle (hObject=0x340) returned 1
	[0126.303] CloseHandle (hObject=0x338) returned 1
	[0126.303] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.304] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.304] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0126.304] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69ee00, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7b69ee00, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7b69ee00, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a)) returned 1
	[0126.304] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0126.304] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0126.304] ReadFile (in: hFile=0x338, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.329] GetFileType (hFile=0x338) returned 0x1
	[0126.329] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.329] WriteFile (in: hFile=0x338, lpBuffer=0x126d4000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x126d4000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0126.330] GetFileType (hFile=0x338) returned 0x1
	[0126.330] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.330] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0126.330] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0126.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0126.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441b0 | out: pbBuffer=0x127441b0) returned 1
	[0126.331] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.331] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0126.331] WriteFile (in: hFile=0x340, lpBuffer=0x1264a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1264a500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.378] CloseHandle (hObject=0x340) returned 1
	[0126.378] CloseHandle (hObject=0x338) returned 1
	[0126.379] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.380] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0126.452] SetEvent (hEvent=0x30c) returned 1
	[0126.452] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.453] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0126.453] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aae6600, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x8aae6600, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x8aae6600, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418)) returned 1
	[0126.453] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c480 | out: pbBuffer=0x1244c480) returned 1
	[0126.453] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441c8 | out: pbBuffer=0x127441c8) returned 1
	[0126.453] ReadFile (in: hFile=0x338, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.500] GetFileType (hFile=0x338) returned 0x1
	[0126.500] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.500] WriteFile (in: hFile=0x338, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0126.501] GetFileType (hFile=0x338) returned 0x1
	[0126.501] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.501] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0126.501] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0126.502] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed181 | out: pbBuffer=0x124ed181) returned 1
	[0126.502] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744280 | out: pbBuffer=0x12744280) returned 1
	[0126.502] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.502] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0126.502] WriteFile (in: hFile=0x2fc, lpBuffer=0x1264aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1264aa00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.562] CloseHandle (hObject=0x2fc) returned 1
	[0126.562] CloseHandle (hObject=0x338) returned 1
	[0126.563] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.563] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0126.685] SetEvent (hEvent=0x30c) returned 1
	[0126.685] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.686] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0126.686] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x884c0c00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x884c0c00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x884c0c00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1)) returned 1
	[0126.686] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6a0 | out: pbBuffer=0x1244c6a0) returned 1
	[0126.686] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744298 | out: pbBuffer=0x12744298) returned 1
	[0126.686] ReadFile (in: hFile=0x338, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.735] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0126.821] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0127.515] SetEvent (hEvent=0x2e8) returned 1
	[0127.515] SetEvent (hEvent=0x70) returned 1
	[0127.515] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0128.551] SetEvent (hEvent=0x30c) returned 1
	[0128.551] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0128.559] SetEvent (hEvent=0x70) returned 1
	[0128.559] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0128.560] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0128.567] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0128.569] SetEvent (hEvent=0x70) returned 1
	[0128.569] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.569] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0128.569] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77)) returned 1
	[0128.569] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0128.569] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0128.570] ReadFile (in: hFile=0x340, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f1d1c*=0x77, lpOverlapped=0x0) returned 1
	[0128.571] GetFileType (hFile=0x340) returned 0x1
	[0128.571] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.571] WriteFile (in: hFile=0x340, lpBuffer=0x12434180*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12434180*, lpNumberOfBytesWritten=0x124f1d00*=0x77, lpOverlapped=0x124f1d0c) returned 1
	[0128.571] GetFileType (hFile=0x340) returned 0x1
	[0128.571] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x77, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.571] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0128.571] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0128.572] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0128.572] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0128.572] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0128.572] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0128.572] WriteFile (in: hFile=0x32c, lpBuffer=0x12714500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12714500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.572] CloseHandle (hObject=0x32c) returned 1
	[0128.572] CloseHandle (hObject=0x340) returned 1
	[0128.573] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.760] SetEvent (hEvent=0xa0) returned 1
	[0128.760] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0128.775] SetEvent (hEvent=0x2e8) returned 1
	[0128.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.776] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x892c)) returned 1
	[0128.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e540 | out: pbBuffer=0x1240e540) returned 1
	[0128.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0128.776] ReadFile (in: hFile=0x2cc, lpBuffer=0x127ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesRead=0x124f3d1c*=0x892c, lpOverlapped=0x0) returned 1
	[0128.795] GetFileType (hFile=0x2cc) returned 0x1
	[0128.795] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.795] WriteFile (in: hFile=0x2cc, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0x892c, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x124f3d00*=0x892c, lpOverlapped=0x124f3d0c) returned 1
	[0128.796] GetFileType (hFile=0x2cc) returned 0x1
	[0128.796] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x892c, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0128.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0128.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec901 | out: pbBuffer=0x124ec901) returned 1
	[0128.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0128.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0128.797] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.797] WriteFile (in: hFile=0x33c, lpBuffer=0x12632500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12632500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.798] CloseHandle (hObject=0x33c) returned 1
	[0128.798] CloseHandle (hObject=0x2cc) returned 1
	[0128.798] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\AdobeCMapFnt10.lst.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\adobecmapfnt10.lst.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.798] SetEvent (hEvent=0x2e8) returned 1
	[0128.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.799] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xecb5bdd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xecb5bdd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe952fcd0, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xcfc4)) returned 1
	[0128.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240edc0 | out: pbBuffer=0x1240edc0) returned 1
	[0128.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e758 | out: pbBuffer=0x1251e758) returned 1
	[0128.799] ReadFile (in: hFile=0x2cc, lpBuffer=0x12938000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12938000*, lpNumberOfBytesRead=0x124f3d1c*=0xcfc4, lpOverlapped=0x0) returned 1
	[0128.810] GetFileType (hFile=0x2cc) returned 0x1
	[0128.810] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.810] WriteFile (in: hFile=0x2cc, lpBuffer=0x12978000*, nNumberOfBytesToWrite=0xcfc4, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12978000*, lpNumberOfBytesWritten=0x124f3d00*=0xcfc4, lpOverlapped=0x124f3d0c) returned 1
	[0128.811] GetFileType (hFile=0x2cc) returned 0x1
	[0128.811] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xcfc4, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca01 | out: pbBuffer=0x124eca01) returned 1
	[0128.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb01 | out: pbBuffer=0x124ecb01) returned 1
	[0128.811] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc01 | out: pbBuffer=0x124ecc01) returned 1
	[0128.812] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e870 | out: pbBuffer=0x1251e870) returned 1
	[0128.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0128.812] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.812] WriteFile (in: hFile=0x2fc, lpBuffer=0x12632a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12632a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.812] CloseHandle (hObject=0x2fc) returned 1
	[0128.812] CloseHandle (hObject=0x2cc) returned 1
	[0128.812] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Acrobat\\10.0\\Cache\\AcroFnt10.lst.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\acrobat\\10.0\\cache\\acrofnt10.lst.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.813] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0128.820] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0128.850] SetEvent (hEvent=0x30c) returned 1
	[0128.850] SetEvent (hEvent=0x2e8) returned 1
	[0128.850] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0128.970] SetEvent (hEvent=0x30c) returned 1
	[0128.970] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0128.974] SetEvent (hEvent=0x80) returned 1
	[0128.974] SetEvent (hEvent=0x2e4) returned 1
	[0128.974] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0128.986] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0128.986] SetEvent (hEvent=0x70) returned 1
	[0128.986] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0128.997] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0128.997] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.997] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0128.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1
	[0128.997] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0128.997] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0128.997] ReadFile (in: hFile=0x2cc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f1d1c*=0x560, lpOverlapped=0x0) returned 1
	[0129.014] GetFileType (hFile=0x2cc) returned 0x1
	[0129.014] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.014] WriteFile (in: hFile=0x2cc, lpBuffer=0x1277e000*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1277e000*, lpNumberOfBytesWritten=0x124f1d00*=0x560, lpOverlapped=0x124f1d0c) returned 1
	[0129.014] GetFileType (hFile=0x2cc) returned 0x1
	[0129.014] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x560, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.015] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0129.015] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0129.015] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0129.015] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0129.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.015] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0129.015] WriteFile (in: hFile=0x32c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.015] CloseHandle (hObject=0x32c) returned 1
	[0129.016] CloseHandle (hObject=0x2cc) returned 1
	[0129.016] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap_unsigned.manifest.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0129.017] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0129.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), fInfoLevelId=0x0, lpFileInformation=0x12629ad0 | out: lpFileInformation=0x12629ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3bbcf350, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x37c1)) returned 1
	[0129.017] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0129.017] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0129.017] ReadFile (in: hFile=0x2cc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12629d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12629d1c*=0x37c1, lpOverlapped=0x0) returned 1
	[0129.017] GetFileType (hFile=0x2cc) returned 0x1
	[0129.017] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.017] WriteFile (in: hFile=0x2cc, lpBuffer=0x128db800*, nNumberOfBytesToWrite=0x37c1, lpNumberOfBytesWritten=0x12629d00, lpOverlapped=0x12629d0c | out: lpBuffer=0x128db800*, lpNumberOfBytesWritten=0x12629d00*=0x37c1, lpOverlapped=0x12629d0c) returned 1
	[0129.017] GetFileType (hFile=0x2cc) returned 0x1
	[0129.017] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x37c1, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.018] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0129.018] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0129.018] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0129.018] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104d0 | out: pbBuffer=0x124104d0) returned 1
	[0129.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0129.018] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0129.018] WriteFile (in: hFile=0x32c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12629d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12629d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.019] CloseHandle (hObject=0x32c) returned 1
	[0129.020] CloseHandle (hObject=0x2cc) returned 1
	[0129.020] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\manifests\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715.manifest.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1
	[0129.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b0b7d20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6b0b7d20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6b0b7d20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1
	[0129.056] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.056] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.057] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0129.057] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0129.057] WriteFile (in: hFile=0x2cc, lpBuffer=0x127d0000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x127d0000*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0129.058] CloseHandle (hObject=0x2cc) returned 1
	[0129.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.059] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.059] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f572ae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f572ae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.059] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1
	[0129.059] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.059] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.059] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0129.060] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0129.060] WriteFile (in: hFile=0x2cc, lpBuffer=0x127d1300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x127d1300*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0129.061] CloseHandle (hObject=0x2cc) returned 1
	[0129.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.075] SetEvent (hEvent=0xa0) returned 1
	[0129.075] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.075] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.077] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f572ae0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c593160, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c593160, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.078] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1
	[0129.078] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1
	[0129.078] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
	[0129.078] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EVWhitelist", cAlternateFileName="EVWHIT~1")) returned 1
	[0129.078] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1
	[0129.078] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e47510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e47510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e47510, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAFEBR~3")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAFEBR~4")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SAFEBR~1")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85d166b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAFEBR~2")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1
	[0129.079] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.079] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.082] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0129.082] WriteFile (in: hFile=0x340, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0129.083] CloseHandle (hObject=0x340) returned 1
	[0129.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.085] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.085] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.085] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.085] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.086] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0129.086] WriteFile (in: hFile=0x340, lpBuffer=0x126b0000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x126b0000*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0129.087] CloseHandle (hObject=0x340) returned 1
	[0129.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.089] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.089] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.089] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5beda0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1
	[0129.089] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1
	[0129.089] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1
	[0129.089] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.089] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.090] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0129.090] WriteFile (in: hFile=0x340, lpBuffer=0x126b1300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x126b1300*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0129.092] CloseHandle (hObject=0x340) returned 1
	[0129.092] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f5beda0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f5beda0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f5beda0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.093] SetEvent (hEvent=0x70) returned 1
	[0129.093] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.094] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.094] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f598c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.094] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.094] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.095] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0129.095] WriteFile (in: hFile=0x340, lpBuffer=0x126b2600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x126b2600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0129.096] CloseHandle (hObject=0x340) returned 1
	[0129.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f598c40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f598c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3a6374a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1
	[0129.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.100] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0129.106] SetEvent (hEvent=0x70) returned 1
	[0129.106] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0129.106] SetEvent (hEvent=0x70) returned 1
	[0129.107] SetEvent (hEvent=0x68) returned 1
	[0129.107] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c4887c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c4887c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0129.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d406e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d406e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d1e730, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0129.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x98d44890, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1
	[0129.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83b08a50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83b08a50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0b57b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1
	[0129.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9c3b6860, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3b6860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b8f70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1
	[0129.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1
	[0129.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82ad9940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82bed750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82bed750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~3")) returned 1
	[0129.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x824ad030, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82556720, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82556720, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~2")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x80d1a580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9174a630, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9174a630, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80e97340, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81c321d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81c321d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81c58330, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f47590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x19000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x824d3190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x824d3190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c3b6860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x142f, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802fc800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802fc800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x87f6d6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIcons", cAlternateFileName="JUMPLI~2")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x85096390, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85096390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85096390, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsOld", cAlternateFileName="JUMPLI~1")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83ede170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x90191d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x90191d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8124f5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80fc7e40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80fc7e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x825f0410, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82330270, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82330270, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8262ad90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86263d70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86263d70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86263d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Persistent State", cAlternateFileName="NETWOR~3")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x94034050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81d16a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81d16a10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9405a1b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x859aa710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c43f3e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c446910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1a9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8dea80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8dea80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8129b860, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x869fc2d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1
	[0129.111] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="README", cAlternateFileName="")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d66840, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d66840, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8195e7b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80d8c9a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80d8c9a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81984910, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c2e920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x88c2e920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x88c2e920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80ee3600, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80ee3600, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8c6cde50, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x868593b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x868593b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x868593b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d370c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f86c660, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f86c660, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82d608d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1
	[0129.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.114] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.117] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0129.117] WriteFile (in: hFile=0x340, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0129.143] CloseHandle (hObject=0x340) returned 1
	[0129.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0129.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0129.144] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0129.145] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0129.145] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1
	[0129.145] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1
	[0129.145] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1
	[0129.145] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1
	[0129.145] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1
	[0129.145] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0129.145] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0129.145] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0129.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0129.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0129.150] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0129.150] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0129.152] CloseHandle (hObject=0x340) returned 1
	[0129.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1
	[0129.153] SetEvent (hEvent=0x68) returned 1
	[0129.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1
	[0129.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0129.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000)) returned 1
	[0129.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x805aa0c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1
	[0129.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0129.158] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.158] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x805aa0c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x805aa0c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0e3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x402000)) returned 1
	[0129.158] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c5a0 | out: pbBuffer=0x1244c5a0) returned 1
	[0129.158] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0129.158] ReadFile (in: hFile=0x338, lpBuffer=0x128e8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e8000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0129.214] GetFileType (hFile=0x338) returned 0x1
	[0129.215] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.215] WriteFile (in: hFile=0x338, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0129.215] GetFileType (hFile=0x338) returned 0x1
	[0129.215] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0129.215] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434201 | out: pbBuffer=0x12434201) returned 1
	[0129.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434301 | out: pbBuffer=0x12434301) returned 1
	[0129.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434401 | out: pbBuffer=0x12434401) returned 1
	[0129.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744468 | out: pbBuffer=0x12744468) returned 1
	[0129.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0129.216] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0129.216] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0129.331] CloseHandle (hObject=0x33c) returned 1
	[0129.331] CloseHandle (hObject=0x338) returned 1
	[0129.331] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0129.333] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0129.334] SetEvent (hEvent=0x68) returned 1
	[0129.334] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0129.338] SetEvent (hEvent=0x2e8) returned 1
	[0129.338] SetEvent (hEvent=0x80) returned 1
	[0129.338] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0129.339] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0129.339] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0129.339] SetEvent (hEvent=0x2e8) returned 1
	[0129.340] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0129.340] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.047] SetEvent (hEvent=0x2e8) returned 1
	[0130.047] SetEvent (hEvent=0x70) returned 1
	[0130.047] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.162] SetEvent (hEvent=0x2e8) returned 1
	[0130.162] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.196] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12975ad0 | out: lpFileInformation=0x12975ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864ed410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864ebca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0130.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0130.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0130.196] ReadFile (in: hFile=0x340, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12975d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12975d1c*=0x104, lpOverlapped=0x0) returned 1
	[0130.198] GetFileType (hFile=0x340) returned 0x1
	[0130.198] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.198] WriteFile (in: hFile=0x340, lpBuffer=0x12514900*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x12975d00, lpOverlapped=0x12975d0c | out: lpBuffer=0x12514900*, lpNumberOfBytesWritten=0x12975d00*=0x104, lpOverlapped=0x12975d0c) returned 1
	[0130.198] GetFileType (hFile=0x340) returned 0x1
	[0130.198] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.198] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0130.198] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0130.199] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0130.199] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0130.199] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.199] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.199] WriteFile (in: hFile=0x32c, lpBuffer=0x125fa000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12975d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fa000*, lpNumberOfBytesWritten=0x12975d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.199] CloseHandle (hObject=0x32c) returned 1
	[0130.199] CloseHandle (hObject=0x340) returned 1
	[0130.200] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\el\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.200] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.266] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.274] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0130.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0130.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0130.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744828 | out: pbBuffer=0x12744828) returned 1
	[0130.274] ReadFile (in: hFile=0x340, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x12429d1c*=0xd8, lpOverlapped=0x0) returned 1
	[0130.275] GetFileType (hFile=0x340) returned 0x1
	[0130.275] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.275] WriteFile (in: hFile=0x340, lpBuffer=0x1263a460*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1263a460*, lpNumberOfBytesWritten=0x12429d00*=0xd8, lpOverlapped=0x12429d0c) returned 1
	[0130.278] GetFileType (hFile=0x340) returned 0x1
	[0130.278] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.278] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0130.278] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0130.278] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0130.278] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127449d0 | out: pbBuffer=0x127449d0) returned 1
	[0130.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.279] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0130.279] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.282] CloseHandle (hObject=0x2fc) returned 1
	[0130.282] CloseHandle (hObject=0x340) returned 1
	[0130.285] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\et\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.291] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.294] SetEvent (hEvent=0x68) returned 1
	[0130.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.294] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12975ad0 | out: lpFileInformation=0x12975ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8655f830, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8655e890, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdb)) returned 1
	[0130.294] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0130.294] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127449e8 | out: pbBuffer=0x127449e8) returned 1
	[0130.294] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0130.295] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0130.295] SetEvent (hEvent=0xa0) returned 1
	[0130.295] SetEvent (hEvent=0x68) returned 1
	[0130.295] ReadFile (in: hFile=0x340, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12975d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x12975d1c*=0xdb, lpOverlapped=0x0) returned 1
	[0130.297] GetFileType (hFile=0x340) returned 0x1
	[0130.297] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.297] WriteFile (in: hFile=0x340, lpBuffer=0x1263a7e0*, nNumberOfBytesToWrite=0xdb, lpNumberOfBytesWritten=0x12975d00, lpOverlapped=0x12975d0c | out: lpBuffer=0x1263a7e0*, lpNumberOfBytesWritten=0x12975d00*=0xdb, lpOverlapped=0x12975d0c) returned 1
	[0130.298] GetFileType (hFile=0x340) returned 0x1
	[0130.298] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xdb, lpNewFilePointer=0x0, dwMoveMethod=0x12975ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0130.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0130.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0130.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104a0 | out: pbBuffer=0x124104a0) returned 1
	[0130.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.299] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12975d0c | out: lpMode=0x12975d0c) returned 0
	[0130.299] WriteFile (in: hFile=0x2fc, lpBuffer=0x1277e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12975d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277e500*, lpNumberOfBytesWritten=0x12975d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.301] CloseHandle (hObject=0x2fc) returned 1
	[0130.301] SwitchToThread () returned 1
	[0130.301] CloseHandle (hObject=0x340) returned 1
	[0130.303] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\fil\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.307] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.315] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.325] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.365] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.376] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.384] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.395] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.409] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.420] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.429] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.438] SetEvent (hEvent=0x68) returned 1
	[0130.438] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.442] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.442] SetEvent (hEvent=0x70) returned 1
	[0130.442] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.444] SetEvent (hEvent=0x70) returned 1
	[0130.444] SetEvent (hEvent=0x2e8) returned 1
	[0130.444] SwitchToThread () returned 1
	[0130.445] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.450] SetEvent (hEvent=0x2e8) returned 1
	[0130.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.450] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0130.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x865f7db0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x865f8580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1
	[0130.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0130.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0130.451] ReadFile (in: hFile=0x2fc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f1d1c*=0xd9, lpOverlapped=0x0) returned 1
	[0130.452] GetFileType (hFile=0x2fc) returned 0x1
	[0130.452] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.452] WriteFile (in: hFile=0x2fc, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0xd9, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x124f1d00*=0xd9, lpOverlapped=0x124f1d0c) returned 1
	[0130.453] GetFileType (hFile=0x2fc) returned 0x1
	[0130.453] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd9, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.453] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0130.453] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0130.453] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0130.454] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0130.454] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.454] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0130.454] WriteFile (in: hFile=0x340, lpBuffer=0x124b4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b4000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.455] CloseHandle (hObject=0x340) returned 1
	[0130.455] CloseHandle (hObject=0x2fc) returned 1
	[0130.457] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\nl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.465] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.470] SetEvent (hEvent=0x2e8) returned 1
	[0130.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.470] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8661df10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8661cf70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0130.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0130.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0130.471] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1242bd1c*=0xd5, lpOverlapped=0x0) returned 1
	[0130.472] GetFileType (hFile=0x33c) returned 0x1
	[0130.472] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.473] WriteFile (in: hFile=0x33c, lpBuffer=0x12612380*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12612380*, lpNumberOfBytesWritten=0x1242bd00*=0xd5, lpOverlapped=0x1242bd0c) returned 1
	[0130.475] GetFileType (hFile=0x33c) returned 0x1
	[0130.475] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd5, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.475] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0130.475] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0130.475] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0130.475] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0130.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.475] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.475] WriteFile (in: hFile=0x340, lpBuffer=0x124b4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x124b4500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.478] CloseHandle (hObject=0x340) returned 1
	[0130.478] CloseHandle (hObject=0x33c) returned 1
	[0130.479] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.487] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.491] SetEvent (hEvent=0x2e8) returned 1
	[0130.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.492] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0130.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86644070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86644070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1
	[0130.492] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0130.492] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0130.492] ReadFile (in: hFile=0x2fc, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f1d1c*=0xd0, lpOverlapped=0x0) returned 1
	[0130.493] GetFileType (hFile=0x2fc) returned 0x1
	[0130.493] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.493] WriteFile (in: hFile=0x2fc, lpBuffer=0x12462000*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12462000*, lpNumberOfBytesWritten=0x124f1d00*=0xd0, lpOverlapped=0x124f1d0c) returned 1
	[0130.495] GetFileType (hFile=0x2fc) returned 0x1
	[0130.495] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0130.496] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0130.496] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0130.496] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0130.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.496] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0130.496] WriteFile (in: hFile=0x340, lpBuffer=0x124b4a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b4a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.499] CloseHandle (hObject=0x340) returned 1
	[0130.499] CloseHandle (hObject=0x2fc) returned 1
	[0130.500] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_PT\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\pt_pt\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.509] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.514] SetEvent (hEvent=0x2e8) returned 1
	[0130.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.514] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86690330, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8668fb60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10a)) returned 1
	[0130.514] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb20 | out: pbBuffer=0x1244cb20) returned 1
	[0130.514] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e748 | out: pbBuffer=0x1251e748) returned 1
	[0130.515] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x1242bd1c*=0x10a, lpOverlapped=0x0) returned 1
	[0130.516] GetFileType (hFile=0x33c) returned 0x1
	[0130.516] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.516] WriteFile (in: hFile=0x33c, lpBuffer=0x125fe900*, nNumberOfBytesToWrite=0x10a, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125fe900*, lpNumberOfBytesWritten=0x1242bd00*=0x10a, lpOverlapped=0x1242bd0c) returned 1
	[0130.518] GetFileType (hFile=0x33c) returned 0x1
	[0130.518] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x10a, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.518] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0130.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0130.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0130.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e860 | out: pbBuffer=0x1251e860) returned 1
	[0130.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.519] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.519] WriteFile (in: hFile=0x340, lpBuffer=0x124b4f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x124b4f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.521] CloseHandle (hObject=0x340) returned 1
	[0130.521] CloseHandle (hObject=0x33c) returned 1
	[0130.523] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ru\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.532] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.537] SetEvent (hEvent=0x2e8) returned 1
	[0130.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.537] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0130.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866b6490, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866b6c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1
	[0130.538] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd40 | out: pbBuffer=0x1244cd40) returned 1
	[0130.538] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e878 | out: pbBuffer=0x1251e878) returned 1
	[0130.538] ReadFile (in: hFile=0x2fc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f1d1c*=0xda, lpOverlapped=0x0) returned 1
	[0130.539] GetFileType (hFile=0x2fc) returned 0x1
	[0130.539] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.539] WriteFile (in: hFile=0x2fc, lpBuffer=0x12612a80*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12612a80*, lpNumberOfBytesWritten=0x124f1d00*=0xda, lpOverlapped=0x124f1d0c) returned 1
	[0130.541] GetFileType (hFile=0x2fc) returned 0x1
	[0130.541] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xda, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0130.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0130.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0130.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ea90 | out: pbBuffer=0x1251ea90) returned 1
	[0130.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.542] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0130.543] WriteFile (in: hFile=0x340, lpBuffer=0x124b5400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b5400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.545] CloseHandle (hObject=0x340) returned 1
	[0130.545] CloseHandle (hObject=0x2fc) returned 1
	[0130.546] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.555] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.561] SetEvent (hEvent=0x2e8) returned 1
	[0130.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.561] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x866dc5f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x866db650, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1
	[0130.561] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cf60 | out: pbBuffer=0x1244cf60) returned 1
	[0130.561] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251eab8 | out: pbBuffer=0x1251eab8) returned 1
	[0130.561] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0130.562] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.562] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0130.562] SetEvent (hEvent=0xa0) returned 1
	[0130.562] SetEvent (hEvent=0x2e8) returned 1
	[0130.562] ReadFile (in: hFile=0x33c, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x1242bd1c*=0xd6, lpOverlapped=0x0) returned 1
	[0130.565] GetFileType (hFile=0x33c) returned 0x1
	[0130.565] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.565] WriteFile (in: hFile=0x33c, lpBuffer=0x12612e00*, nNumberOfBytesToWrite=0xd6, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12612e00*, lpNumberOfBytesWritten=0x1242bd00*=0xd6, lpOverlapped=0x1242bd0c) returned 1
	[0130.568] GetFileType (hFile=0x33c) returned 0x1
	[0130.568] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd6, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.568] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0130.568] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0130.568] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0130.568] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107e0 | out: pbBuffer=0x124107e0) returned 1
	[0130.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.569] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.569] WriteFile (in: hFile=0x340, lpBuffer=0x12722000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12722000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.596] CloseHandle (hObject=0x340) returned 1
	[0130.596] CloseHandle (hObject=0x33c) returned 1
	[0130.597] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\sv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.603] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.611] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.620] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.627] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.647] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.658] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.674] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x867288b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86727140, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1
	[0130.675] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0130.675] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410040 | out: pbBuffer=0x12410040) returned 1
	[0130.675] ReadFile (in: hFile=0x338, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x1242bd1c*=0x2b56, lpOverlapped=0x0) returned 1
	[0130.678] GetFileType (hFile=0x338) returned 0x1
	[0130.678] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.678] WriteFile (in: hFile=0x338, lpBuffer=0x12616000*, nNumberOfBytesToWrite=0x2b56, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12616000*, lpNumberOfBytesWritten=0x1242bd00*=0x2b56, lpOverlapped=0x1242bd0c) returned 1
	[0130.681] GetFileType (hFile=0x338) returned 0x1
	[0130.681] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x2b56, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.681] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0130.681] SetEvent (hEvent=0x2e4) returned 1
	[0130.682] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0130.682] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0130.682] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0130.682] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c8 | out: pbBuffer=0x124103c8) returned 1
	[0130.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0130.682] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0130.682] WriteFile (in: hFile=0x340, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.684] CloseHandle (hObject=0x340) returned 1
	[0130.684] SwitchToThread () returned 1
	[0130.685] CloseHandle (hObject=0x338) returned 1
	[0130.687] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_metadata\\verified_contents.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.694] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.695] SetEvent (hEvent=0x68) returned 1
	[0130.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0130.696] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5b)) returned 1
	[0130.696] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0130.696] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124100f0 | out: pbBuffer=0x124100f0) returned 1
	[0130.696] ReadFile (in: hFile=0x338, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f3d1c*=0x5b, lpOverlapped=0x0) returned 1
	[0130.697] GetFileType (hFile=0x338) returned 0x1
	[0130.697] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.697] WriteFile (in: hFile=0x338, lpBuffer=0x124d6240*, nNumberOfBytesToWrite=0x5b, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124d6240*, lpNumberOfBytesWritten=0x124f3d00*=0x5b, lpOverlapped=0x124f3d0c) returned 1
	[0130.697] GetFileType (hFile=0x338) returned 0x1
	[0130.697] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x5b, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.697] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0130.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0130.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0130.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410488 | out: pbBuffer=0x12410488) returned 1
	[0130.698] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0130.698] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.698] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.698] CloseHandle (hObject=0x33c) returned 1
	[0130.699] CloseHandle (hObject=0x338) returned 1
	[0130.700] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.854] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.864] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.875] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.887] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.898] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.942] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.952] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.967] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.978] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0130.991] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.000] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.004] SetEvent (hEvent=0x70) returned 1
	[0131.004] SetEvent (hEvent=0x320) returned 1
	[0131.004] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0131.007] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.007] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0131.008] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0131.008] SetEvent (hEvent=0x70) returned 1
	[0131.008] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0131.009] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.009] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.132] SetEvent (hEvent=0x2e8) returned 1
	[0131.132] SetEvent (hEvent=0x68) returned 1
	[0131.132] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.310] SetEvent (hEvent=0x80) returned 1
	[0131.311] SetEvent (hEvent=0x320) returned 1
	[0131.311] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0131.313] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0131.314] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0131.314] SetEvent (hEvent=0x70) returned 1
	[0131.314] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0131.315] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.332] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.345] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.355] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.369] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.423] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.437] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x12605ad0 | out: lpFileInformation=0x12605ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86e26950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x87016300, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8716c790, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ec)) returned 1
	[0131.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0131.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0131.437] ReadFile (in: hFile=0x338, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12605d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12605d1c*=0x3ec, lpOverlapped=0x0) returned 1
	[0131.440] GetFileType (hFile=0x338) returned 0x1
	[0131.440] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.440] WriteFile (in: hFile=0x338, lpBuffer=0x12462000*, nNumberOfBytesToWrite=0x3ec, lpNumberOfBytesWritten=0x12605d00, lpOverlapped=0x12605d0c | out: lpBuffer=0x12462000*, lpNumberOfBytesWritten=0x12605d00*=0x3ec, lpOverlapped=0x12605d0c) returned 1
	[0131.443] GetFileType (hFile=0x338) returned 0x1
	[0131.443] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x3ec, lpNewFilePointer=0x0, dwMoveMethod=0x12605ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0131.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0131.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0131.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0131.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.444] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x12605d0c | out: lpMode=0x12605d0c) returned 0
	[0131.444] WriteFile (in: hFile=0x328, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12605d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x12605d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.447] CloseHandle (hObject=0x328) returned 1
	[0131.447] CloseHandle (hObject=0x338) returned 1
	[0131.459] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\apdfllckaahabafndbhieahigkjlhalf\\14.1_0\\manifest.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.465] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.468] SetEvent (hEvent=0x68) returned 1
	[0131.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.478] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85639950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd4e)) returned 1
	[0131.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0131.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0131.478] ReadFile (in: hFile=0x2fc, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f1d1c*=0xd4e, lpOverlapped=0x0) returned 1
	[0131.495] GetFileType (hFile=0x2fc) returned 0x1
	[0131.495] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.495] WriteFile (in: hFile=0x2fc, lpBuffer=0x12636000*, nNumberOfBytesToWrite=0xd4e, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12636000*, lpNumberOfBytesWritten=0x124f1d00*=0xd4e, lpOverlapped=0x124f1d0c) returned 1
	[0131.496] GetFileType (hFile=0x2fc) returned 0x1
	[0131.496] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xd4e, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.497] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0131.497] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0131.497] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0131.497] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0131.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.497] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.497] WriteFile (in: hFile=0x328, lpBuffer=0x12628500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.498] CloseHandle (hObject=0x328) returned 1
	[0131.498] CloseHandle (hObject=0x2fc) returned 1
	[0131.500] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\128.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.504] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.506] SetEvent (hEvent=0x68) returned 1
	[0131.506] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.506] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.506] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0131.506] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0131.507] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0131.508] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.508] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0131.508] SetEvent (hEvent=0xa0) returned 1
	[0131.508] SetEvent (hEvent=0x68) returned 1
	[0131.508] ReadFile (in: hFile=0x328, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.510] GetFileType (hFile=0x328) returned 0x1
	[0131.510] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.510] WriteFile (in: hFile=0x328, lpBuffer=0x125f4180*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125f4180*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0131.510] GetFileType (hFile=0x328) returned 0x1
	[0131.510] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.510] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0131.511] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0131.511] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0131.511] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445f0 | out: pbBuffer=0x127445f0) returned 1
	[0131.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.511] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.511] WriteFile (in: hFile=0x2fc, lpBuffer=0x12628a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12628a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.511] CloseHandle (hObject=0x2fc) returned 1
	[0131.512] CloseHandle (hObject=0x328) returned 1
	[0131.512] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ar\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.514] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0131.514] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0131.515] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0131.515] SetEvent (hEvent=0x70) returned 1
	[0131.515] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0131.523] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.523] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.524] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.524] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.524] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0131.524] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0131.524] ReadFile (in: hFile=0x328, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.525] GetFileType (hFile=0x328) returned 0x1
	[0131.525] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.525] WriteFile (in: hFile=0x328, lpBuffer=0x125f4000*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125f4000*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0131.526] GetFileType (hFile=0x328) returned 0x1
	[0131.526] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.526] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400401 | out: pbBuffer=0x12400401) returned 1
	[0131.526] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0131.526] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0131.526] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0131.526] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.527] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.527] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.527] CloseHandle (hObject=0x2fc) returned 1
	[0131.527] CloseHandle (hObject=0x328) returned 1
	[0131.527] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\bg\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.528] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0131.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x851f1e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x851f1e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.528] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0131.529] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0131.529] ReadFile (in: hFile=0x328, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12429d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.530] GetFileType (hFile=0x328) returned 0x1
	[0131.530] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.530] WriteFile (in: hFile=0x328, lpBuffer=0x125f4300*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125f4300*, lpNumberOfBytesWritten=0x12429d00*=0xb3, lpOverlapped=0x12429d0c) returned 1
	[0131.531] GetFileType (hFile=0x328) returned 0x1
	[0131.531] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.531] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0131.531] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0131.531] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0131.531] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0131.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.532] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0131.532] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.532] CloseHandle (hObject=0x2fc) returned 1
	[0131.532] CloseHandle (hObject=0x328) returned 1
	[0131.532] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ca\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.533] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.566] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0131.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0131.566] ReadFile (in: hFile=0x2fc, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.578] GetFileType (hFile=0x2fc) returned 0x1
	[0131.578] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.578] WriteFile (in: hFile=0x2fc, lpBuffer=0x125f4480*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125f4480*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0131.578] GetFileType (hFile=0x2fc) returned 0x1
	[0131.578] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0131.579] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0131.579] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0131.579] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0131.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.584] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.584] WriteFile (in: hFile=0x338, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.585] CloseHandle (hObject=0x338) returned 1
	[0131.585] CloseHandle (hObject=0x2fc) returned 1
	[0131.585] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\de\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.586] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.586] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.586] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0131.587] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788288 | out: pbBuffer=0x12788288) returned 1
	[0131.587] ReadFile (in: hFile=0x2fc, lpBuffer=0x1292a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1292a000*, lpNumberOfBytesRead=0x124f3d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.588] GetFileType (hFile=0x2fc) returned 0x1
	[0131.588] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.588] WriteFile (in: hFile=0x2fc, lpBuffer=0x125f4600*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125f4600*, lpNumberOfBytesWritten=0x124f3d00*=0xb3, lpOverlapped=0x124f3d0c) returned 1
	[0131.588] GetFileType (hFile=0x2fc) returned 0x1
	[0131.589] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0131.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0131.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0131.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0131.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.589] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.589] WriteFile (in: hFile=0x338, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.590] CloseHandle (hObject=0x338) returned 1
	[0131.590] CloseHandle (hObject=0x2fc) returned 1
	[0131.590] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\en\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.591] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.591] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.591] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4a0 | out: pbBuffer=0x1240f4a0) returned 1
	[0131.591] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788378 | out: pbBuffer=0x12788378) returned 1
	[0131.592] ReadFile (in: hFile=0x2fc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f5d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.593] GetFileType (hFile=0x2fc) returned 0x1
	[0131.593] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.593] WriteFile (in: hFile=0x2fc, lpBuffer=0x125f4780*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125f4780*, lpNumberOfBytesWritten=0x124f5d00*=0xb3, lpOverlapped=0x124f5d0c) returned 1
	[0131.593] GetFileType (hFile=0x2fc) returned 0x1
	[0131.593] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.593] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0131.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0131.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401481 | out: pbBuffer=0x12401481) returned 1
	[0131.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788430 | out: pbBuffer=0x12788430) returned 1
	[0131.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.594] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.594] WriteFile (in: hFile=0x338, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.594] CloseHandle (hObject=0x338) returned 1
	[0131.595] CloseHandle (hObject=0x2fc) returned 1
	[0131.595] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\es\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.596] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.616] SetEvent (hEvent=0x320) returned 1
	[0131.616] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0131.623] SetEvent (hEvent=0x2f4) returned 1
	[0131.624] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fad4, ulCount=0x10, ulNumEntriesRemoved=0x33e7fab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fad4, ulNumEntriesRemoved=0x33e7fab8) returned 0
	[0131.624] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fad4, ulCount=0x10, ulNumEntriesRemoved=0x33e7fab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fad4, ulNumEntriesRemoved=0x33e7fab8) returned 1
	[0142.207] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x33e7fab4, fWait=0, lpdwFlags=0x33e7fac4 | out: lpcbTransfer=0x33e7fab4, lpdwFlags=0x33e7fac4) returned 1
	[0142.207] SetEvent (hEvent=0x2f4) returned 1
	[0142.208] SetEvent (hEvent=0xa0) returned 1
	[0142.208] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x46b, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0142.209] SetEvent (hEvent=0x308) returned 1
	[0142.209] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fad4, ulCount=0x10, ulNumEntriesRemoved=0x33e7fab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fad4, ulNumEntriesRemoved=0x33e7fab8) returned 0
	[0142.210] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fad4, ulCount=0x10, ulNumEntriesRemoved=0x33e7fab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fad4, ulNumEntriesRemoved=0x33e7fab8) returned 1
	[0153.057] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x33e7fab4, fWait=0, lpdwFlags=0x33e7fac4 | out: lpcbTransfer=0x33e7fab4, lpdwFlags=0x33e7fac4) returned 1
	[0153.057] SetEvent (hEvent=0x30c) returned 1
	[0153.057] SetEvent (hEvent=0xa0) returned 1
	[0153.058] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x46b, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0153.058] SetEvent (hEvent=0x308) returned 1
	[0153.059] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fad4, ulCount=0x10, ulNumEntriesRemoved=0x33e7fab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fad4, ulNumEntriesRemoved=0x33e7fab8) returned 0
	[0153.059] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fad4, ulCount=0x10, ulNumEntriesRemoved=0x33e7fab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fad4, ulNumEntriesRemoved=0x33e7fab8) returned 1
	[0165.023] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x33e7fab4, fWait=0, lpdwFlags=0x33e7fac4 | out: lpcbTransfer=0x33e7fab4, lpdwFlags=0x33e7fac4) returned 1
	[0165.024] SetEvent (hEvent=0x80) returned 1
	[0165.024] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0165.081] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0165.081] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0165.115] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0165.115] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0165.115] SetEvent (hEvent=0x30c) returned 1
	[0165.115] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0165.151] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0165.152] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x46c, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0165.152] SetEvent (hEvent=0x308) returned 1
	[0165.152] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0165.629] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0166.568] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.027] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.028] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.048] SetEvent (hEvent=0x30c) returned 1
	[0167.048] SwitchToThread () returned 1
	[0167.064] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.093] SetEvent (hEvent=0x2e8) returned 1
	[0167.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.094] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0167.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1
	[0167.095] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0167.095] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0167.095] ReadFile (in: hFile=0x34c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1245bd1c*=0x10c, lpOverlapped=0x0) returned 1
	[0167.097] GetFileType (hFile=0x34c) returned 0x1
	[0167.097] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.098] WriteFile (in: hFile=0x34c, lpBuffer=0x125ec480*, nNumberOfBytesToWrite=0x10c, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x125ec480*, lpNumberOfBytesWritten=0x1245bd00*=0x10c, lpOverlapped=0x1245bd0c) returned 1
	[0167.098] GetFileType (hFile=0x34c) returned 0x1
	[0167.098] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x10c, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.098] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0167.098] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0167.098] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0167.099] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0167.099] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.099] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0167.099] WriteFile (in: hFile=0x350, lpBuffer=0x12620000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12620000*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.099] CloseHandle (hObject=0x350) returned 1
	[0167.101] CloseHandle (hObject=0x34c) returned 1
	[0167.102] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1daf2884ec4dfa96ba4a58d4dbc9c406.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.198] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.278] SetEvent (hEvent=0x2e8) returned 1
	[0167.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.279] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a)) returned 1
	[0167.280] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0167.280] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744378 | out: pbBuffer=0x12744378) returned 1
	[0167.280] ReadFile (in: hFile=0x344, lpBuffer=0x1259c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259c000*, lpNumberOfBytesRead=0x124f5d1c*=0x18a, lpOverlapped=0x0) returned 1
	[0167.289] GetFileType (hFile=0x344) returned 0x1
	[0167.289] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.289] WriteFile (in: hFile=0x344, lpBuffer=0x12461520*, nNumberOfBytesToWrite=0x18a, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12461520*, lpNumberOfBytesWritten=0x124f5d00*=0x18a, lpOverlapped=0x124f5d0c) returned 1
	[0167.290] GetFileType (hFile=0x344) returned 0x1
	[0167.290] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x18a, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0167.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0167.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0167.291] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744460 | out: pbBuffer=0x12744460) returned 1
	[0167.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.291] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.291] WriteFile (in: hFile=0x350, lpBuffer=0x125dca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125dca00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.291] CloseHandle (hObject=0x350) returned 1
	[0167.301] CloseHandle (hObject=0x344) returned 1
	[0167.302] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3388ecc3f7bc4a9271c10ed8621e5a65_f55c512047947b70f94de5dec6d6838d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.553] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.557] SetEvent (hEvent=0x2e8) returned 1
	[0167.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.559] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0167.559] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c760 | out: pbBuffer=0x1244c760) returned 1
	[0167.559] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882a8 | out: pbBuffer=0x127882a8) returned 1
	[0167.559] ReadFile (in: hFile=0x344, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x12429d1c*=0x194, lpOverlapped=0x0) returned 1
	[0167.561] GetFileType (hFile=0x344) returned 0x1
	[0167.561] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.561] WriteFile (in: hFile=0x344, lpBuffer=0x12770b60*, nNumberOfBytesToWrite=0x194, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12770b60*, lpNumberOfBytesWritten=0x12429d00*=0x194, lpOverlapped=0x12429d0c) returned 1
	[0167.561] GetFileType (hFile=0x344) returned 0x1
	[0167.561] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x194, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0167.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e81 | out: pbBuffer=0x127e8e81) returned 1
	[0167.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8f81 | out: pbBuffer=0x127e8f81) returned 1
	[0167.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788370 | out: pbBuffer=0x12788370) returned 1
	[0167.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.562] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.562] WriteFile (in: hFile=0x350, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.563] CloseHandle (hObject=0x350) returned 1
	[0167.569] CloseHandle (hObject=0x344) returned 1
	[0167.573] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4dd39726d4b55ac3b4119b35a893323c_46cccfb940a93f39a734f69efcdd76e9.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.619] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.622] SetEvent (hEvent=0x68) returned 1
	[0167.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.624] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0167.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1
	[0167.624] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0167.624] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0167.624] ReadFile (in: hFile=0x344, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f1d1c*=0x18e, lpOverlapped=0x0) returned 1
	[0167.626] GetFileType (hFile=0x344) returned 0x1
	[0167.626] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.626] WriteFile (in: hFile=0x344, lpBuffer=0x1260e000*, nNumberOfBytesToWrite=0x18e, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1260e000*, lpNumberOfBytesWritten=0x124f1d00*=0x18e, lpOverlapped=0x124f1d0c) returned 1
	[0167.626] GetFileType (hFile=0x344) returned 0x1
	[0167.626] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x18e, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.626] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0167.627] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0167.627] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0167.639] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0167.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.640] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0167.640] WriteFile (in: hFile=0x350, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.641] CloseHandle (hObject=0x350) returned 1
	[0167.644] CloseHandle (hObject=0x344) returned 1
	[0167.647] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5457a8ce4b2a7499f8299a013b6e1c7c_ce50f893881d43dc0c815e4d80faf2b4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.706] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.710] SetEvent (hEvent=0x68) returned 1
	[0167.710] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7396c420a8e1bc1da97f1af0d10bad21"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.711] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0167.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7396c420a8e1bc1da97f1af0d10bad21"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1
	[0167.711] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0167.711] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0167.711] ReadFile (in: hFile=0x344, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1245bd1c*=0x100, lpOverlapped=0x0) returned 1
	[0167.715] GetFileType (hFile=0x344) returned 0x1
	[0167.715] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.715] WriteFile (in: hFile=0x344, lpBuffer=0x12464200*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x12464200*, lpNumberOfBytesWritten=0x1245bd00*=0x100, lpOverlapped=0x1245bd0c) returned 1
	[0167.715] GetFileType (hFile=0x344) returned 0x1
	[0167.715] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.715] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0167.716] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0167.716] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0167.716] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5e0 | out: pbBuffer=0x1251e5e0) returned 1
	[0167.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7396c420a8e1bc1da97f1af0d10bad21"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.716] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0167.716] WriteFile (in: hFile=0x350, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.717] CloseHandle (hObject=0x350) returned 1
	[0167.718] CloseHandle (hObject=0x344) returned 1
	[0167.719] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7396c420a8e1bc1da97f1af0d10bad21"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7396c420a8e1bc1da97f1af0d10bad21.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.760] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.764] SetEvent (hEvent=0x68) returned 1
	[0167.764] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.765] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0167.765] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127326a0 | out: pbBuffer=0x127326a0) returned 1
	[0167.765] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e758 | out: pbBuffer=0x1251e758) returned 1
	[0167.765] ReadFile (in: hFile=0x344, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f5d1c*=0x194, lpOverlapped=0x0) returned 1
	[0167.767] GetFileType (hFile=0x344) returned 0x1
	[0167.767] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.768] WriteFile (in: hFile=0x344, lpBuffer=0x12878820*, nNumberOfBytesToWrite=0x194, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12878820*, lpNumberOfBytesWritten=0x124f5d00*=0x194, lpOverlapped=0x124f5d0c) returned 1
	[0167.768] GetFileType (hFile=0x344) returned 0x1
	[0167.768] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x194, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.768] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0167.768] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e81 | out: pbBuffer=0x127e8e81) returned 1
	[0167.768] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8f81 | out: pbBuffer=0x127e8f81) returned 1
	[0167.768] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e870 | out: pbBuffer=0x1251e870) returned 1
	[0167.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.769] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.769] WriteFile (in: hFile=0x350, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.769] CloseHandle (hObject=0x350) returned 1
	[0167.771] CloseHandle (hObject=0x344) returned 1
	[0167.772] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b8944ba8ad0efdf0e01a43ef62becd0_b2db1cc4b5f2d2a802d56aaed525802d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.815] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.819] SetEvent (hEvent=0x68) returned 1
	[0167.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.821] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0167.821] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0167.821] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0167.821] ReadFile (in: hFile=0x344, lpBuffer=0x128a6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128a6000*, lpNumberOfBytesRead=0x12429d1c*=0x182, lpOverlapped=0x0) returned 1
	[0167.823] GetFileType (hFile=0x344) returned 0x1
	[0167.823] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.823] WriteFile (in: hFile=0x344, lpBuffer=0x125e4b60*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125e4b60*, lpNumberOfBytesWritten=0x12429d00*=0x182, lpOverlapped=0x12429d0c) returned 1
	[0167.823] GetFileType (hFile=0x344) returned 0x1
	[0167.823] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x182, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.823] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0167.823] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0167.823] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0167.824] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0167.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.824] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.824] WriteFile (in: hFile=0x350, lpBuffer=0x12780500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12780500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.824] CloseHandle (hObject=0x350) returned 1
	[0167.825] CloseHandle (hObject=0x344) returned 1
	[0167.826] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_234cb5d64705d4dbb4da839716359af0.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.860] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.863] SetEvent (hEvent=0x80) returned 1
	[0167.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.864] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0167.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0167.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0167.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0167.865] ReadFile (in: hFile=0x34c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f1d1c*=0x182, lpOverlapped=0x0) returned 1
	[0167.867] GetFileType (hFile=0x34c) returned 0x1
	[0167.867] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.867] WriteFile (in: hFile=0x34c, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x124f1d00*=0x182, lpOverlapped=0x124f1d0c) returned 1
	[0167.867] GetFileType (hFile=0x34c) returned 0x1
	[0167.867] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x182, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0167.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0167.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0167.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0167.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.868] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0167.868] WriteFile (in: hFile=0x350, lpBuffer=0x127d4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d4500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.868] CloseHandle (hObject=0x350) returned 1
	[0167.869] CloseHandle (hObject=0x34c) returned 1
	[0167.871] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.901] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.905] SetEvent (hEvent=0x80) returned 1
	[0167.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.906] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0167.906] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0167.906] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0167.907] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0167.907] ReadFile (in: hFile=0x34c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f3d1c*=0x186, lpOverlapped=0x0) returned 1
	[0167.908] GetFileType (hFile=0x34c) returned 0x1
	[0167.909] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.909] WriteFile (in: hFile=0x34c, lpBuffer=0x124b0b60*, nNumberOfBytesToWrite=0x186, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124b0b60*, lpNumberOfBytesWritten=0x124f3d00*=0x186, lpOverlapped=0x124f3d0c) returned 1
	[0167.909] GetFileType (hFile=0x34c) returned 0x1
	[0167.909] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x186, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.909] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0167.909] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0167.909] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0167.910] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0167.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.910] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0167.910] WriteFile (in: hFile=0x350, lpBuffer=0x127d4a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d4a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.910] CloseHandle (hObject=0x350) returned 1
	[0167.911] CloseHandle (hObject=0x34c) returned 1
	[0167.914] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_c080da2ae431c1a7f3b0c147eeb043ed.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.957] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0167.971] SetEvent (hEvent=0x80) returned 1
	[0167.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.972] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0167.972] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0167.972] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0167.973] ReadFile (in: hFile=0x34c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f5d1c*=0x186, lpOverlapped=0x0) returned 1
	[0167.974] GetFileType (hFile=0x34c) returned 0x1
	[0167.974] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.974] WriteFile (in: hFile=0x34c, lpBuffer=0x124b8b60*, nNumberOfBytesToWrite=0x186, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124b8b60*, lpNumberOfBytesWritten=0x124f5d00*=0x186, lpOverlapped=0x124f5d0c) returned 1
	[0167.974] GetFileType (hFile=0x34c) returned 0x1
	[0167.974] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x186, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0167.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0167.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0167.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0167.975] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.975] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.975] WriteFile (in: hFile=0x350, lpBuffer=0x12784500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12784500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.976] CloseHandle (hObject=0x350) returned 1
	[0167.977] CloseHandle (hObject=0x34c) returned 1
	[0167.978] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f6e15778dc8e326895c606fbfa0392eb.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.032] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.035] SetEvent (hEvent=0x80) returned 1
	[0168.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.036] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188)) returned 1
	[0168.037] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0168.037] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0168.037] ReadFile (in: hFile=0x34c, lpBuffer=0x128c6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128c6000*, lpNumberOfBytesRead=0x12429d1c*=0x188, lpOverlapped=0x0) returned 1
	[0168.038] GetFileType (hFile=0x34c) returned 0x1
	[0168.038] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.039] WriteFile (in: hFile=0x34c, lpBuffer=0x124b96c0*, nNumberOfBytesToWrite=0x188, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124b96c0*, lpNumberOfBytesWritten=0x12429d00*=0x188, lpOverlapped=0x12429d0c) returned 1
	[0168.039] GetFileType (hFile=0x34c) returned 0x1
	[0168.039] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0168.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0168.039] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0168.040] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0168.040] SetEvent (hEvent=0xa0) returned 1
	[0168.040] SetEvent (hEvent=0x80) returned 1
	[0168.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0168.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127882a0 | out: pbBuffer=0x127882a0) returned 1
	[0168.041] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.041] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.042] WriteFile (in: hFile=0x350, lpBuffer=0x12784a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12784a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.042] CloseHandle (hObject=0x350) returned 1
	[0168.051] CloseHandle (hObject=0x34c) returned 1
	[0168.053] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_c6ef73e4482b2588b1252d1a64b99416.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.097] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.104] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.104] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0168.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0168.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0168.104] ReadFile (in: hFile=0x34c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f1d1c*=0x194, lpOverlapped=0x0) returned 1
	[0168.106] GetFileType (hFile=0x34c) returned 0x1
	[0168.106] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.106] WriteFile (in: hFile=0x34c, lpBuffer=0x12606000*, nNumberOfBytesToWrite=0x194, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12606000*, lpNumberOfBytesWritten=0x124f1d00*=0x194, lpOverlapped=0x124f1d0c) returned 1
	[0168.106] GetFileType (hFile=0x34c) returned 0x1
	[0168.106] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x194, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.106] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0168.106] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0168.107] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0168.107] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103e0 | out: pbBuffer=0x124103e0) returned 1
	[0168.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.107] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.107] WriteFile (in: hFile=0x350, lpBuffer=0x124b2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b2000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.107] CloseHandle (hObject=0x350) returned 1
	[0168.109] CloseHandle (hObject=0x34c) returned 1
	[0168.110] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\955cab6ff6a24d5820d50b5ba1cf79c7_ad9e7615297a3a83320aace5801a04f9.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.149] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.159] SetEvent (hEvent=0x2e8) returned 1
	[0168.159] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.160] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0168.160] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0168.160] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410408 | out: pbBuffer=0x12410408) returned 1
	[0168.160] ReadFile (in: hFile=0x34c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0x182, lpOverlapped=0x0) returned 1
	[0168.162] GetFileType (hFile=0x34c) returned 0x1
	[0168.162] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.162] WriteFile (in: hFile=0x34c, lpBuffer=0x12606b60*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12606b60*, lpNumberOfBytesWritten=0x124f3d00*=0x182, lpOverlapped=0x124f3d0c) returned 1
	[0168.163] GetFileType (hFile=0x34c) returned 0x1
	[0168.163] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x182, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.163] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0168.163] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0168.163] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0168.163] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104e0 | out: pbBuffer=0x124104e0) returned 1
	[0168.163] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.163] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.163] WriteFile (in: hFile=0x350, lpBuffer=0x124b2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x124b2500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.164] CloseHandle (hObject=0x350) returned 1
	[0168.165] CloseHandle (hObject=0x34c) returned 1
	[0168.166] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_ebc75728c6119a77e4da8559dd10f061.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.242] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.250] SetEvent (hEvent=0x2e8) returned 1
	[0168.250] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.251] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1
	[0168.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c7e0 | out: pbBuffer=0x1244c7e0) returned 1
	[0168.252] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882d8 | out: pbBuffer=0x127882d8) returned 1
	[0168.252] ReadFile (in: hFile=0x34c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f5d1c*=0x1a0, lpOverlapped=0x0) returned 1
	[0168.254] GetFileType (hFile=0x34c) returned 0x1
	[0168.254] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.254] WriteFile (in: hFile=0x34c, lpBuffer=0x125de340*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125de340*, lpNumberOfBytesWritten=0x124f5d00*=0x1a0, lpOverlapped=0x124f5d0c) returned 1
	[0168.254] GetFileType (hFile=0x34c) returned 0x1
	[0168.254] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0168.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0168.255] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0168.255] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127883a0 | out: pbBuffer=0x127883a0) returned 1
	[0168.255] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.255] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.255] WriteFile (in: hFile=0x350, lpBuffer=0x12785400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12785400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.255] CloseHandle (hObject=0x350) returned 1
	[0168.257] CloseHandle (hObject=0x34c) returned 1
	[0168.259] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\b3bb9c1ba2d19e090ae305b2683903a0_6f0a84ce2ba99bd19d42c92610275852.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.293] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.294] SetEvent (hEvent=0x2e8) returned 1
	[0168.294] SetEvent (hEvent=0x80) returned 1
	[0168.294] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.299] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.303] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.327] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.343] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.357] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.373] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.399] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.419] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.438] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.474] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.485] SetEvent (hEvent=0x80) returned 1
	[0168.485] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.490] SetEvent (hEvent=0x2e8) returned 1
	[0168.490] SetEvent (hEvent=0x70) returned 1
	[0168.490] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.492] SetEvent (hEvent=0x68) returned 1
	[0168.492] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.493] SetEvent (hEvent=0x68) returned 1
	[0168.493] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.495] SetEvent (hEvent=0x68) returned 1
	[0168.495] SwitchToThread () returned 1
	[0168.495] SetEvent (hEvent=0x68) returned 1
	[0168.495] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.499] SetEvent (hEvent=0x68) returned 1
	[0168.499] SetEvent (hEvent=0x80) returned 1
	[0168.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\ime12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.500] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.500] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.500] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.500] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\ime12\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\ime12\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\ime12\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.502] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0168.502] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0168.503] CloseHandle (hObject=0x34c) returned 1
	[0168.503] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp12"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.508] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.508] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.508] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.508] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp12\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp12\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp12\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.510] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0168.510] WriteFile (in: hFile=0x34c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0168.511] CloseHandle (hObject=0x34c) returned 1
	[0168.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp8_1"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp8_1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.515] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.515] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp8_1\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp8_1\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.516] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp8_1\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.518] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0168.518] WriteFile (in: hFile=0x34c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0168.519] CloseHandle (hObject=0x34c) returned 1
	[0168.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp9_0"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp9_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.520] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.520] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.520] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.520] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp9_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp9_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\imjp9_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.524] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0168.524] WriteFile (in: hFile=0x34c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0168.525] CloseHandle (hObject=0x34c) returned 1
	[0168.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.528] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.528] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.528] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1
	[0168.528] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0168.528] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.528] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.531] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0168.531] WriteFile (in: hFile=0x34c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0168.532] CloseHandle (hObject=0x34c) returned 1
	[0168.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.627] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.628] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="36USA68T", cAlternateFileName="")) returned 1
	[0168.628] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3O75JDME", cAlternateFileName="")) returned 1
	[0168.628] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0168.628] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UV0DUWVB", cAlternateFileName="")) returned 1
	[0168.628] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 1
	[0168.628] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.628] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.633] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0168.633] WriteFile (in: hFile=0x34c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0168.635] CloseHandle (hObject=0x34c) returned 1
	[0168.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.639] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.639] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.639] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 1
	[0168.639] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.639] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.639] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.639] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.641] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0168.641] WriteFile (in: hFile=0x34c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0168.642] CloseHandle (hObject=0x34c) returned 1
	[0168.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1
	[0168.645] SetEvent (hEvent=0x30c) returned 1
	[0168.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.655] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.655] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1
	[0168.655] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.655] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.655] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.655] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.657] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0168.657] WriteFile (in: hFile=0x34c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0168.658] CloseHandle (hObject=0x34c) returned 1
	[0168.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1
	[0168.662] SetEvent (hEvent=0x80) returned 1
	[0168.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.663] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.663] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.663] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.663] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.664] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\uv0duwvb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0168.665] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0168.665] WriteFile (in: hFile=0x1e4, lpBuffer=0x12458000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12458000*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0168.668] CloseHandle (hObject=0x1e4) returned 1
	[0168.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.670] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.670] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 1
	[0168.670] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.670] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0168.682] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0168.682] WriteFile (in: hFile=0x1e4, lpBuffer=0x12459300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12459300*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0168.684] CloseHandle (hObject=0x1e4) returned 1
	[0168.685] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344)) returned 1
	[0168.703] SetEvent (hEvent=0x30c) returned 1
	[0168.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0168.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.705] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.705] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.705] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.706] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.706] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\services\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0168.707] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0168.707] WriteFile (in: hFile=0x1e4, lpBuffer=0x1245a600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x1245a600*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0168.709] CloseHandle (hObject=0x1e4) returned 1
	[0168.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.715] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.716] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0168.716] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.716] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.718] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0168.718] WriteFile (in: hFile=0x2dc, lpBuffer=0x1245b900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x1245b900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0168.719] CloseHandle (hObject=0x2dc) returned 1
	[0168.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.736] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.736] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1
	[0168.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1
	[0168.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1
	[0168.736] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.736] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.742] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0168.742] WriteFile (in: hFile=0x2dc, lpBuffer=0x1245cc00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1245cc00*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0168.743] CloseHandle (hObject=0x2dc) returned 1
	[0168.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.746] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.746] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.746] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1
	[0168.746] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0x0, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1
	[0168.746] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.746] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.748] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0168.748] WriteFile (in: hFile=0x2dc, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0168.750] CloseHandle (hObject=0x2dc) returned 1
	[0168.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062)) returned 1
	[0168.754] SetEvent (hEvent=0x80) returned 1
	[0168.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400)) returned 1
	[0168.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.755] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.755] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1
	[0168.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1
	[0168.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1
	[0168.755] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.756] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0168.764] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0168.764] WriteFile (in: hFile=0x1e4, lpBuffer=0x124b1300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x124b1300*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0168.765] CloseHandle (hObject=0x1e4) returned 1
	[0168.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf)) returned 1
	[0168.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.785] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.785] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.785] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.785] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\security\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0168.801] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0168.801] WriteFile (in: hFile=0x344, lpBuffer=0x124b2600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x124b2600*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0168.803] CloseHandle (hObject=0x344) returned 1
	[0168.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.804] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1
	[0168.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.804] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0168.806] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0168.806] WriteFile (in: hFile=0x344, lpBuffer=0x124b3900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x124b3900*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0168.807] CloseHandle (hObject=0x344) returned 1
	[0168.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfeca8830, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.817] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.817] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.817] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.818] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.818] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.820] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0168.820] WriteFile (in: hFile=0x2dc, lpBuffer=0x124b4c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x124b4c00*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0168.822] CloseHandle (hObject=0x2dc) returned 1
	[0168.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.823] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1
	[0168.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1
	[0168.823] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.823] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.828] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0168.828] WriteFile (in: hFile=0x2dc, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0168.834] CloseHandle (hObject=0x2dc) returned 1
	[0168.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a)) returned 1
	[0168.840] SetEvent (hEvent=0x80) returned 1
	[0168.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600)) returned 1
	[0168.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda4706c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda4706c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1
	[0168.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.843] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda4706c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda4706c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.843] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xda4706c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xda4706c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.849] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.859] SetEvent (hEvent=0x70) returned 1
	[0168.859] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0168.869] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0168.869] SetEvent (hEvent=0x70) returned 1
	[0168.869] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0168.874] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0168.874] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0168.874] SetEvent (hEvent=0x80) returned 1
	[0168.874] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0168.879] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac69a110, ftCreationTime.dwHighDateTime=0x1d5dba8, ftLastAccessTime.dwLowDateTime=0xcbc22320, ftLastAccessTime.dwHighDateTime=0x1d5e68e, ftLastWriteTime.dwLowDateTime=0xcbc22320, ftLastWriteTime.dwHighDateTime=0x1d5e68e, nFileSizeHigh=0x0, nFileSizeLow=0x14f10, dwReserved0=0x0, dwReserved1=0x0, cFileName="0LGKqF.xls", cAlternateFileName="")) returned 1
	[0168.879] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2c4347b0, ftCreationTime.dwHighDateTime=0x1d5d99c, ftLastAccessTime.dwLowDateTime=0x197be200, ftLastAccessTime.dwHighDateTime=0x1d5e765, ftLastWriteTime.dwLowDateTime=0x197be200, ftLastWriteTime.dwHighDateTime=0x1d5e765, nFileSizeHigh=0x0, nFileSizeLow=0x7f6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="2hKdHlkqz6G.mkv", cAlternateFileName="2HKDHL~1.MKV")) returned 1
	[0168.879] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9449fb40, ftCreationTime.dwHighDateTime=0x1d5de3f, ftLastAccessTime.dwLowDateTime=0x781e32e0, ftLastAccessTime.dwHighDateTime=0x1d5dc7f, ftLastWriteTime.dwLowDateTime=0x781e32e0, ftLastWriteTime.dwHighDateTime=0x1d5dc7f, nFileSizeHigh=0x0, nFileSizeLow=0xfee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="6PH8i1rvyGGEIvXR9pz7.mp3", cAlternateFileName="6PH8I1~1.MP3")) returned 1
	[0168.879] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0168.879] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc6b4b80, ftCreationTime.dwHighDateTime=0x1d5e20d, ftLastAccessTime.dwLowDateTime=0xc1d618e0, ftLastAccessTime.dwHighDateTime=0x1d5e0d4, ftLastWriteTime.dwLowDateTime=0xc1d618e0, ftLastWriteTime.dwHighDateTime=0x1d5e0d4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AqfA87t.mkv", cAlternateFileName="")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95513410, ftCreationTime.dwHighDateTime=0x1d5e30b, ftLastAccessTime.dwLowDateTime=0x235395e0, ftLastAccessTime.dwHighDateTime=0x1d5e498, ftLastWriteTime.dwLowDateTime=0x235395e0, ftLastWriteTime.dwHighDateTime=0x1d5e498, nFileSizeHigh=0x0, nFileSizeLow=0x117aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="b ltgosvw.bmp", cAlternateFileName="BLTGOS~1.BMP")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a207870, ftCreationTime.dwHighDateTime=0x1d5e196, ftLastAccessTime.dwLowDateTime=0x8a241550, ftLastAccessTime.dwHighDateTime=0x1d5d8d2, ftLastWriteTime.dwLowDateTime=0x8a241550, ftLastWriteTime.dwHighDateTime=0x1d5d8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8171, dwReserved0=0x0, dwReserved1=0x0, cFileName="bhRzEornXmKqjzhPRV2K.flv", cAlternateFileName="BHRZEO~1.FLV")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54422790, ftCreationTime.dwHighDateTime=0x1d5df5a, ftLastAccessTime.dwLowDateTime=0xee358400, ftLastAccessTime.dwHighDateTime=0x1d5df50, ftLastWriteTime.dwLowDateTime=0xee358400, ftLastWriteTime.dwHighDateTime=0x1d5df50, nFileSizeHigh=0x0, nFileSizeLow=0x12d31, dwReserved0=0x0, dwReserved1=0x0, cFileName="cDuUfzDckOk7.png", cAlternateFileName="CDUUFZ~1.PNG")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x21222300, ftCreationTime.dwHighDateTime=0x1d5dd5d, ftLastAccessTime.dwLowDateTime=0xbccf2580, ftLastAccessTime.dwHighDateTime=0x1d5dcd3, ftLastWriteTime.dwLowDateTime=0xbccf2580, ftLastWriteTime.dwHighDateTime=0x1d5dcd3, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cNLzJTE.xlsx", cAlternateFileName="CNLZJT~1.XLS")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x331a4020, ftCreationTime.dwHighDateTime=0x1d5e4f0, ftLastAccessTime.dwLowDateTime=0xa5283530, ftLastAccessTime.dwHighDateTime=0x1d5e367, ftLastWriteTime.dwLowDateTime=0xa5283530, ftLastWriteTime.dwHighDateTime=0x1d5e367, nFileSizeHigh=0x0, nFileSizeLow=0xcfb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cu8ax12kkwm6Q0AqX.wav", cAlternateFileName="CU8AX1~1.WAV")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb4e3e40, ftCreationTime.dwHighDateTime=0x1d5e0b8, ftLastAccessTime.dwLowDateTime=0xfb32b230, ftLastAccessTime.dwHighDateTime=0x1d5d84e, ftLastWriteTime.dwLowDateTime=0xfb32b230, ftLastWriteTime.dwHighDateTime=0x1d5d84e, nFileSizeHigh=0x0, nFileSizeLow=0x90bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="EjIJrM4 O-I.jpg", cAlternateFileName="EJIJRM~1.JPG")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xefea4a50, ftCreationTime.dwHighDateTime=0x1d5e2fd, ftLastAccessTime.dwLowDateTime=0x83411b20, ftLastAccessTime.dwHighDateTime=0x1d5e589, ftLastWriteTime.dwLowDateTime=0x83411b20, ftLastWriteTime.dwHighDateTime=0x1d5e589, nFileSizeHigh=0x0, nFileSizeLow=0x11956, dwReserved0=0x0, dwReserved1=0x0, cFileName="ER2i7.mp3", cAlternateFileName="")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x819cb1a0, ftCreationTime.dwHighDateTime=0x1d5db0f, ftLastAccessTime.dwLowDateTime=0xb13544e0, ftLastAccessTime.dwHighDateTime=0x1d5e4a6, ftLastWriteTime.dwLowDateTime=0xb13544e0, ftLastWriteTime.dwHighDateTime=0x1d5e4a6, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fin_H7FRydfc.m4a", cAlternateFileName="FIN_H7~1.M4A")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf964be0, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x7bc33960, ftLastAccessTime.dwHighDateTime=0x1d5e2fe, ftLastWriteTime.dwLowDateTime=0x7bc33960, ftLastWriteTime.dwHighDateTime=0x1d5e2fe, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="HjU-b.gif", cAlternateFileName="")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec712040, ftCreationTime.dwHighDateTime=0x1d5e449, ftLastAccessTime.dwLowDateTime=0x78bb2410, ftLastAccessTime.dwHighDateTime=0x1d5decd, ftLastWriteTime.dwLowDateTime=0x78bb2410, ftLastWriteTime.dwHighDateTime=0x1d5decd, nFileSizeHigh=0x0, nFileSizeLow=0xc1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="hpbZOlXks.m4a", cAlternateFileName="HPBZOL~1.M4A")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49545f40, ftCreationTime.dwHighDateTime=0x1d5e268, ftLastAccessTime.dwLowDateTime=0x8c430090, ftLastAccessTime.dwHighDateTime=0x1d5da39, ftLastWriteTime.dwLowDateTime=0x8c430090, ftLastWriteTime.dwHighDateTime=0x1d5da39, nFileSizeHigh=0x0, nFileSizeLow=0x16d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ifhk7kVsEoMt3.png", cAlternateFileName="IFHK7K~1.PNG")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0920490, ftCreationTime.dwHighDateTime=0x1d5e4c2, ftLastAccessTime.dwLowDateTime=0xd0145530, ftLastAccessTime.dwHighDateTime=0x1d5e0ba, ftLastWriteTime.dwLowDateTime=0xd0145530, ftLastWriteTime.dwHighDateTime=0x1d5e0ba, nFileSizeHigh=0x0, nFileSizeLow=0x16c32, dwReserved0=0x0, dwReserved1=0x0, cFileName="kTbIlLkus7FGmtvx2K.swf", cAlternateFileName="KTBILL~1.SWF")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cb44f0, ftCreationTime.dwHighDateTime=0x1d5e7c6, ftLastAccessTime.dwLowDateTime=0x23c8a350, ftLastAccessTime.dwHighDateTime=0x1d5e0bd, ftLastWriteTime.dwLowDateTime=0x23c8a350, ftLastWriteTime.dwHighDateTime=0x1d5e0bd, nFileSizeHigh=0x0, nFileSizeLow=0x8ecf, dwReserved0=0x0, dwReserved1=0x0, cFileName="lCNCVSn nhy PV-rE.jpg", cAlternateFileName="LCNCVS~1.JPG")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x47820280, ftCreationTime.dwHighDateTime=0x1d5dff2, ftLastAccessTime.dwLowDateTime=0x55f09370, ftLastAccessTime.dwHighDateTime=0x1d5e021, ftLastWriteTime.dwLowDateTime=0x55f09370, ftLastWriteTime.dwHighDateTime=0x1d5e021, nFileSizeHigh=0x0, nFileSizeLow=0x7c3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="lV2thUy TpXUKyZ.rtf", cAlternateFileName="LV2THU~1.RTF")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x307bd0d0, ftCreationTime.dwHighDateTime=0x1d5de48, ftLastAccessTime.dwLowDateTime=0x56decb50, ftLastAccessTime.dwHighDateTime=0x1d5de71, ftLastWriteTime.dwLowDateTime=0x56decb50, ftLastWriteTime.dwHighDateTime=0x1d5de71, nFileSizeHigh=0x0, nFileSizeLow=0x17523, dwReserved0=0x0, dwReserved1=0x0, cFileName="M2jB8tCN3ll_f-8nD6.odp", cAlternateFileName="M2JB8T~1.ODP")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6b695060, ftCreationTime.dwHighDateTime=0x1d2dda5, ftLastAccessTime.dwLowDateTime=0x6b695060, ftLastAccessTime.dwHighDateTime=0x1d2dda5, ftLastWriteTime.dwLowDateTime=0x6b695060, ftLastWriteTime.dwHighDateTime=0x1d2dda5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb458e750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb458e750, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb4db940, ftCreationTime.dwHighDateTime=0x1d5e3b0, ftLastAccessTime.dwLowDateTime=0x3e4e0e80, ftLastAccessTime.dwHighDateTime=0x1d5dfe7, ftLastWriteTime.dwLowDateTime=0x3e4e0e80, ftLastWriteTime.dwHighDateTime=0x1d5dfe7, nFileSizeHigh=0x0, nFileSizeLow=0x18a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="pNgT-T.mp4", cAlternateFileName="")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a448370, ftCreationTime.dwHighDateTime=0x1d5d925, ftLastAccessTime.dwLowDateTime=0x82f23e70, ftLastAccessTime.dwHighDateTime=0x1d5e4f2, ftLastWriteTime.dwLowDateTime=0x82f23e70, ftLastWriteTime.dwHighDateTime=0x1d5e4f2, nFileSizeHigh=0x0, nFileSizeLow=0x2f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="qHdUzmME2Yg T2z.swf", cAlternateFileName="QHDUZM~1.SWF")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda169d70, ftCreationTime.dwHighDateTime=0x1d5e10c, ftLastAccessTime.dwLowDateTime=0x7bb717d0, ftLastAccessTime.dwHighDateTime=0x1d5da60, ftLastWriteTime.dwLowDateTime=0x7bb717d0, ftLastWriteTime.dwHighDateTime=0x1d5da60, nFileSizeHigh=0x0, nFileSizeLow=0x175e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sytZskr.wav", cAlternateFileName="")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x631dd9f0, ftCreationTime.dwHighDateTime=0x1d5dfd0, ftLastAccessTime.dwLowDateTime=0xfc601d00, ftLastAccessTime.dwHighDateTime=0x1d5dce0, ftLastWriteTime.dwLowDateTime=0xfc601d00, ftLastWriteTime.dwHighDateTime=0x1d5dce0, nFileSizeHigh=0x0, nFileSizeLow=0x165ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="T8obwBHfBO.jpg", cAlternateFileName="T8OBWB~1.JPG")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc2a98d0, ftCreationTime.dwHighDateTime=0x1d5dd2e, ftLastAccessTime.dwLowDateTime=0x8832ceb0, ftLastAccessTime.dwHighDateTime=0x1d5e1bc, ftLastWriteTime.dwLowDateTime=0x8832ceb0, ftLastWriteTime.dwHighDateTime=0x1d5e1bc, nFileSizeHigh=0x0, nFileSizeLow=0x6a07, dwReserved0=0x0, dwReserved1=0x0, cFileName="TBVaCYAehfAbrB.gif", cAlternateFileName="TBVACY~1.GIF")) returned 1
	[0168.880] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xddbab690, ftCreationTime.dwHighDateTime=0x1d5db77, ftLastAccessTime.dwLowDateTime=0xd46a9330, ftLastAccessTime.dwHighDateTime=0x1d5e74d, ftLastWriteTime.dwLowDateTime=0xd46a9330, ftLastWriteTime.dwHighDateTime=0x1d5e74d, nFileSizeHigh=0x0, nFileSizeLow=0x10b44, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uq mHRas8RtOvUqDx.m4a", cAlternateFileName="UQMHRA~1.M4A")) returned 1
	[0168.881] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef81d40, ftCreationTime.dwHighDateTime=0x1d5dd19, ftLastAccessTime.dwLowDateTime=0xae474a00, ftLastAccessTime.dwHighDateTime=0x1d5d9a0, ftLastWriteTime.dwLowDateTime=0xae474a00, ftLastWriteTime.dwHighDateTime=0x1d5d9a0, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0x0, dwReserved1=0x0, cFileName="uQs_GiNMl.mp4", cAlternateFileName="UQS_GI~1.MP4")) returned 1
	[0168.881] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec53d510, ftCreationTime.dwHighDateTime=0x1d5e1a8, ftLastAccessTime.dwLowDateTime=0x1f75a50, ftLastAccessTime.dwHighDateTime=0x1d5dc80, ftLastWriteTime.dwLowDateTime=0x1f75a50, ftLastWriteTime.dwHighDateTime=0x1d5dc80, nFileSizeHigh=0x0, nFileSizeLow=0xb902, dwReserved0=0x0, dwReserved1=0x0, cFileName="w00llA4enJ.wav", cAlternateFileName="W00LLA~1.WAV")) returned 1
	[0168.881] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1470e70, ftCreationTime.dwHighDateTime=0x1d5ddbd, ftLastAccessTime.dwLowDateTime=0x8a082e40, ftLastAccessTime.dwHighDateTime=0x1d5e038, ftLastWriteTime.dwLowDateTime=0x8a082e40, ftLastWriteTime.dwHighDateTime=0x1d5e038, nFileSizeHigh=0x0, nFileSizeLow=0x12a70, dwReserved0=0x0, dwReserved1=0x0, cFileName="yiWBAP8BT.ods", cAlternateFileName="YIWBAP~1.ODS")) returned 1
	[0168.881] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9ef0ce90, ftCreationTime.dwHighDateTime=0x1d5e1cb, ftLastAccessTime.dwLowDateTime=0xc0e4b3d0, ftLastAccessTime.dwHighDateTime=0x1d5de3e, ftLastWriteTime.dwLowDateTime=0xc0e4b3d0, ftLastWriteTime.dwHighDateTime=0x1d5de3e, nFileSizeHigh=0x0, nFileSizeLow=0x18edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="zBhNx8pere.mkv", cAlternateFileName="ZBHNX8~1.MKV")) returned 1
	[0168.881] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.881] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.886] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0168.886] WriteFile (in: hFile=0x2dc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0168.888] CloseHandle (hObject=0x2dc) returned 1
	[0168.888] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\0LGKqF.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\0lgkqf.xls"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac69a110, ftCreationTime.dwHighDateTime=0x1d5dba8, ftLastAccessTime.dwLowDateTime=0xcbc22320, ftLastAccessTime.dwHighDateTime=0x1d5e68e, ftLastWriteTime.dwLowDateTime=0xcbc22320, ftLastWriteTime.dwHighDateTime=0x1d5e68e, nFileSizeHigh=0x0, nFileSizeLow=0x14f10)) returned 1
	[0168.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\2hKdHlkqz6G.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\2hkdhlkqz6g.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2c4347b0, ftCreationTime.dwHighDateTime=0x1d5d99c, ftLastAccessTime.dwLowDateTime=0x197be200, ftLastAccessTime.dwHighDateTime=0x1d5e765, ftLastWriteTime.dwLowDateTime=0x197be200, ftLastWriteTime.dwHighDateTime=0x1d5e765, nFileSizeHigh=0x0, nFileSizeLow=0x7f6a)) returned 1
	[0168.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6PH8i1rvyGGEIvXR9pz7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\6ph8i1rvyggeivxr9pz7.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9449fb40, ftCreationTime.dwHighDateTime=0x1d5de3f, ftLastAccessTime.dwLowDateTime=0x781e32e0, ftLastAccessTime.dwHighDateTime=0x1d5dc7f, ftLastWriteTime.dwLowDateTime=0x781e32e0, ftLastWriteTime.dwHighDateTime=0x1d5dc7f, nFileSizeHigh=0x0, nFileSizeLow=0xfee4)) returned 1
	[0168.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.903] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.916] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.916] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0168.916] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1
	[0168.916] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1
	[0168.916] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
	[0168.916] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1
	[0168.916] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.916] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.919] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0168.919] WriteFile (in: hFile=0x2dc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0168.920] CloseHandle (hObject=0x2dc) returned 1
	[0168.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.921] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.922] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.922] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1
	[0168.922] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.922] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.938] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0168.938] WriteFile (in: hFile=0x2dc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0168.939] CloseHandle (hObject=0x2dc) returned 1
	[0168.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.941] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.941] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1
	[0168.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1
	[0168.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1
	[0168.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xda28e240, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8cdc00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1
	[0168.941] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.942] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.942] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0168.946] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0168.946] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0168.948] CloseHandle (hObject=0x33c) returned 1
	[0168.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.949] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.949] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9f48400, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9f48400, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9f48400, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.949] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.949] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\collab\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0168.950] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0168.950] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0168.952] CloseHandle (hObject=0x33c) returned 1
	[0168.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.953] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.953] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xd9df17a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9df17a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9df17a0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.953] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.953] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\forms\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0168.955] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0168.955] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0168.957] CloseHandle (hObject=0x33c) returned 1
	[0168.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0168.957] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0168.958] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec7c9cd0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0168.958] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.js", cAlternateFileName="")) returned 1
	[0168.958] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1
	[0168.958] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0168.958] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0168.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0168.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0168.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0168.960] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0168.960] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0168.961] CloseHandle (hObject=0x33c) returned 1
	[0168.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.968] SetEvent (hEvent=0x68) returned 1
	[0168.968] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa)) returned 1
	[0168.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0168.969] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0168.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.js"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0168.969] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e560 | out: pbBuffer=0x1252e560) returned 1
	[0168.969] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127445f8 | out: pbBuffer=0x127445f8) returned 1
	[0168.969] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1276dd1c*=0x0, lpOverlapped=0x0) returned 1
	[0168.969] CloseHandle (hObject=0x33c) returned 1
	[0168.970] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0168.970] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0168.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec7c9cd0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec7c9cd0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xedc00b50, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0xa)) returned 1
	[0168.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e580 | out: pbBuffer=0x1252e580) returned 1
	[0168.970] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744608 | out: pbBuffer=0x12744608) returned 1
	[0168.970] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x1276dd1c*=0xa, lpOverlapped=0x0) returned 1
	[0169.002] GetFileType (hFile=0x33c) returned 0x1
	[0169.002] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.002] WriteFile (in: hFile=0x33c, lpBuffer=0x12744610*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12744610*, lpNumberOfBytesWritten=0x1276dd00*=0xa, lpOverlapped=0x1276dd0c) returned 1
	[0169.002] GetFileType (hFile=0x33c) returned 0x1
	[0169.002] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xa, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8301 | out: pbBuffer=0x127e8301) returned 1
	[0169.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0169.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8801 | out: pbBuffer=0x127e8801) returned 1
	[0169.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446d0 | out: pbBuffer=0x127446d0) returned 1
	[0169.003] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.003] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.003] WriteFile (in: hFile=0x2dc, lpBuffer=0x124f0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x124f0000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.003] CloseHandle (hObject=0x2dc) returned 1
	[0169.003] CloseHandle (hObject=0x33c) returned 1
	[0169.003] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\glob.settings.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\javascripts\\glob.settings.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.126] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0169.178] SetEvent (hEvent=0x2e8) returned 1
	[0169.178] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0169.193] SetEvent (hEvent=0x2e8) returned 1
	[0169.194] SetEvent (hEvent=0x68) returned 1
	[0169.194] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0169.195] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0169.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda8cdc00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xda8cdc00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xda8f3d60, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x1517)) returned 1
	[0169.195] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0169.195] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0169.195] ReadFile (in: hFile=0x34c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12769d1c*=0x1517, lpOverlapped=0x0) returned 1
	[0169.261] GetFileType (hFile=0x34c) returned 0x1
	[0169.261] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.262] WriteFile (in: hFile=0x34c, lpBuffer=0x12507800*, nNumberOfBytesToWrite=0x1517, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12507800*, lpNumberOfBytesWritten=0x12769d00*=0x1517, lpOverlapped=0x12769d0c) returned 1
	[0169.262] GetFileType (hFile=0x34c) returned 0x1
	[0169.262] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1517, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0169.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400601 | out: pbBuffer=0x12400601) returned 1
	[0169.262] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400801 | out: pbBuffer=0x12400801) returned 1
	[0169.263] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410450 | out: pbBuffer=0x12410450) returned 1
	[0169.263] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0169.263] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0169.263] WriteFile (in: hFile=0x33c, lpBuffer=0x12526000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12526000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.263] CloseHandle (hObject=0x33c) returned 1
	[0169.263] CloseHandle (hObject=0x34c) returned 1
	[0169.263] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\addressbook.acrodata.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\adobe\\acrobat\\10.0\\security\\addressbook.acrodata.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Cu8ax12kkwm6Q0AqX.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cu8ax12kkwm6q0aqx.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0169.306] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0169.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Cu8ax12kkwm6Q0AqX.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cu8ax12kkwm6q0aqx.wav"), fInfoLevelId=0x0, lpFileInformation=0x12613ad0 | out: lpFileInformation=0x12613ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x331a4020, ftCreationTime.dwHighDateTime=0x1d5e4f0, ftLastAccessTime.dwLowDateTime=0xa5283530, ftLastAccessTime.dwHighDateTime=0x1d5e367, ftLastWriteTime.dwLowDateTime=0xa5283530, ftLastWriteTime.dwHighDateTime=0x1d5e367, nFileSizeHigh=0x0, nFileSizeLow=0xcfb7)) returned 1
	[0169.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0169.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410600 | out: pbBuffer=0x12410600) returned 1
	[0169.306] ReadFile (in: hFile=0x34c, lpBuffer=0x12966000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12613d1c, lpOverlapped=0x0 | out: lpBuffer=0x12966000*, lpNumberOfBytesRead=0x12613d1c*=0xcfb7, lpOverlapped=0x0) returned 1
	[0169.337] GetFileType (hFile=0x34c) returned 0x1
	[0169.337] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.337] WriteFile (in: hFile=0x34c, lpBuffer=0x128a4000*, nNumberOfBytesToWrite=0xcfb7, lpNumberOfBytesWritten=0x12613d00, lpOverlapped=0x12613d0c | out: lpBuffer=0x128a4000*, lpNumberOfBytesWritten=0x12613d00*=0xcfb7, lpOverlapped=0x12613d0c) returned 1
	[0169.337] GetFileType (hFile=0x34c) returned 0x1
	[0169.337] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xcfb7, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.338] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0169.338] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0169.338] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f01 | out: pbBuffer=0x12400f01) returned 1
	[0169.338] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410728 | out: pbBuffer=0x12410728) returned 1
	[0169.338] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Cu8ax12kkwm6Q0AqX.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cu8ax12kkwm6q0aqx.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.338] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0169.338] WriteFile (in: hFile=0x2dc, lpBuffer=0x12526500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12613d0c, lpOverlapped=0x0 | out: lpBuffer=0x12526500*, lpNumberOfBytesWritten=0x12613d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.339] CloseHandle (hObject=0x2dc) returned 1
	[0169.339] CloseHandle (hObject=0x34c) returned 1
	[0169.339] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Cu8ax12kkwm6Q0AqX.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cu8ax12kkwm6q0aqx.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Cu8ax12kkwm6Q0AqX.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cu8ax12kkwm6q0aqx.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HjU-b.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hju-b.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0169.395] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0169.395] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HjU-b.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hju-b.gif"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf964be0, ftCreationTime.dwHighDateTime=0x1d5dd83, ftLastAccessTime.dwLowDateTime=0x7bc33960, ftLastAccessTime.dwHighDateTime=0x1d5e2fe, ftLastWriteTime.dwLowDateTime=0x7bc33960, ftLastWriteTime.dwHighDateTime=0x1d5e2fe, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1
	[0169.395] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f100 | out: pbBuffer=0x1240f100) returned 1
	[0169.395] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410920 | out: pbBuffer=0x12410920) returned 1
	[0169.395] ReadFile (in: hFile=0x34c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12769d1c*=0x7400, lpOverlapped=0x0) returned 1
	[0169.428] GetFileType (hFile=0x34c) returned 0x1
	[0169.428] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.428] WriteFile (in: hFile=0x34c, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x7400, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x12769d00*=0x7400, lpOverlapped=0x12769d0c) returned 1
	[0169.428] GetFileType (hFile=0x34c) returned 0x1
	[0169.429] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x7400, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401901 | out: pbBuffer=0x12401901) returned 1
	[0169.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401a01 | out: pbBuffer=0x12401a01) returned 1
	[0169.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401b01 | out: pbBuffer=0x12401b01) returned 1
	[0169.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410ae0 | out: pbBuffer=0x12410ae0) returned 1
	[0169.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HjU-b.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hju-b.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.429] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0169.429] WriteFile (in: hFile=0x344, lpBuffer=0x12526f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12526f00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.430] CloseHandle (hObject=0x344) returned 1
	[0169.430] CloseHandle (hObject=0x34c) returned 1
	[0169.430] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HjU-b.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hju-b.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\HjU-b.gif.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\hju-b.gif.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.434] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\M2jB8tCN3ll_f-8nD6.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\m2jb8tcn3ll_f-8nd6.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0169.435] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0169.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\M2jB8tCN3ll_f-8nD6.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\m2jb8tcn3ll_f-8nd6.odp"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x307bd0d0, ftCreationTime.dwHighDateTime=0x1d5de48, ftLastAccessTime.dwLowDateTime=0x56decb50, ftLastAccessTime.dwHighDateTime=0x1d5de71, ftLastWriteTime.dwLowDateTime=0x56decb50, ftLastWriteTime.dwHighDateTime=0x1d5de71, nFileSizeHigh=0x0, nFileSizeLow=0x17523)) returned 1
	[0169.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f500 | out: pbBuffer=0x1240f500) returned 1
	[0169.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410af8 | out: pbBuffer=0x12410af8) returned 1
	[0169.436] ReadFile (in: hFile=0x34c, lpBuffer=0x128c4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128c4000*, lpNumberOfBytesRead=0x12429d1c*=0x17523, lpOverlapped=0x0) returned 1
	[0169.448] GetFileType (hFile=0x34c) returned 0x1
	[0169.449] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.449] WriteFile (in: hFile=0x34c, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x17523, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x12429d00*=0x17523, lpOverlapped=0x12429d0c) returned 1
	[0169.449] GetFileType (hFile=0x34c) returned 0x1
	[0169.449] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x17523, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401d01 | out: pbBuffer=0x12401d01) returned 1
	[0169.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401e01 | out: pbBuffer=0x12401e01) returned 1
	[0169.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401f01 | out: pbBuffer=0x12401f01) returned 1
	[0169.451] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0169.455] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0169.455] SetEvent (hEvent=0xa0) returned 1
	[0169.455] SetEvent (hEvent=0x80) returned 1
	[0169.455] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410bc0 | out: pbBuffer=0x12410bc0) returned 1
	[0169.455] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\M2jB8tCN3ll_f-8nD6.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\m2jb8tcn3ll_f-8nd6.odp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.456] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0169.456] WriteFile (in: hFile=0x2dc, lpBuffer=0x12527400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12527400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.456] CloseHandle (hObject=0x2dc) returned 1
	[0169.456] CloseHandle (hObject=0x34c) returned 1
	[0169.456] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\M2jB8tCN3ll_f-8nD6.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\m2jb8tcn3ll_f-8nd6.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\M2jB8tCN3ll_f-8nD6.odp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\m2jb8tcn3ll_f-8nd6.odp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.463] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0169.464] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0169.469] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0169.469] SetEvent (hEvent=0x68) returned 1
	[0169.469] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0169.472] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0169.593] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0169.776] SetEvent (hEvent=0x68) returned 1
	[0169.777] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.778] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0169.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xa1e34990, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e34990, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e34990, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d)) returned 1
	[0169.778] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0169.778] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0169.778] ReadFile (in: hFile=0x344, lpBuffer=0x12924000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12924000*, lpNumberOfBytesRead=0x12429d1c*=0x2d, lpOverlapped=0x0) returned 1
	[0169.780] GetFileType (hFile=0x344) returned 0x1
	[0169.780] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.780] WriteFile (in: hFile=0x344, lpBuffer=0x1240a210*, nNumberOfBytesToWrite=0x2d, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1240a210*, lpNumberOfBytesWritten=0x12429d00*=0x2d, lpOverlapped=0x12429d0c) returned 1
	[0169.780] GetFileType (hFile=0x344) returned 0x1
	[0169.780] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x2d, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0169.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0169.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0169.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0169.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0169.781] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0169.781] WriteFile (in: hFile=0x34c, lpBuffer=0x12526000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12526000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.782] CloseHandle (hObject=0x34c) returned 1
	[0169.782] CloseHandle (hObject=0x344) returned 1
	[0169.782] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\83aa4cc77f591dfc2374580bbd95f6ba_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.798] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0169.798] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x12613ad0 | out: lpFileInformation=0x12613ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xb0aa1fc0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0aa1fc0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0aa1fc0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d)) returned 1
	[0169.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0169.799] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0169.799] ReadFile (in: hFile=0x344, lpBuffer=0x126c4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12613d1c, lpOverlapped=0x0 | out: lpBuffer=0x126c4000*, lpNumberOfBytesRead=0x12613d1c*=0x3d, lpOverlapped=0x0) returned 1
	[0169.803] GetFileType (hFile=0x344) returned 0x1
	[0169.803] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.803] WriteFile (in: hFile=0x344, lpBuffer=0x12438000*, nNumberOfBytesToWrite=0x3d, lpNumberOfBytesWritten=0x12613d00, lpOverlapped=0x12613d0c | out: lpBuffer=0x12438000*, lpNumberOfBytesWritten=0x12613d00*=0x3d, lpOverlapped=0x12613d0c) returned 1
	[0169.804] GetFileType (hFile=0x344) returned 0x1
	[0169.804] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x3d, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0169.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0169.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0169.805] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744340 | out: pbBuffer=0x12744340) returned 1
	[0169.805] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.805] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0169.805] WriteFile (in: hFile=0x2dc, lpBuffer=0x127d4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12613d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d4000*, lpNumberOfBytesWritten=0x12613d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.806] CloseHandle (hObject=0x2dc) returned 1
	[0169.848] CloseHandle (hObject=0x344) returned 1
	[0169.899] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), lpNewFileName="\\\\?\\C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fda992c8d564f97e48410a19a2e459f6_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122)) returned 1
	[0169.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0169.959] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0169.960] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0169.960] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0169.960] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1
	[0169.960] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskBar", cAlternateFileName="")) returned 1
	[0169.960] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0169.960] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0169.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0169.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0169.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.003] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0170.003] WriteFile (in: hFile=0x34c, lpBuffer=0x12726000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12726000*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0170.004] CloseHandle (hObject=0x34c) returned 1
	[0170.009] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.030] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.031] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.031] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.031] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\implicitappshortcuts\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.035] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0170.035] WriteFile (in: hFile=0x34c, lpBuffer=0x12727300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x12727300*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0170.036] CloseHandle (hObject=0x34c) returned 1
	[0170.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1
	[0170.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.038] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.039] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.039] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dc4b320, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0170.039] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0170.039] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1
	[0170.039] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1
	[0170.039] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1
	[0170.039] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1
	[0170.039] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1
	[0170.039] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc4b320, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc4b320, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1
	[0170.039] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1
	[0170.039] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.039] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.041] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.041] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.050] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0170.050] WriteFile (in: hFile=0x34c, lpBuffer=0x12728600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x12728600*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0170.052] CloseHandle (hObject=0x34c) returned 1
	[0170.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e02c640, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7e02c640, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df47e00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8dd)) returned 1
	[0170.059] SetEvent (hEvent=0x2e8) returned 1
	[0170.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer (2).lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc251c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2dc251c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d7ae880, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x5ad)) returned 1
	[0170.073] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0170.086] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0170.086] SetEvent (hEvent=0x70) returned 1
	[0170.086] SetEvent (hEvent=0x68) returned 1
	[0170.089] GetFileType (hFile=0x344) returned 0x1
	[0170.089] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.089] WriteFile (in: hFile=0x344, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x1276dd00*=0x20000, lpOverlapped=0x1276dd0c) returned 1
	[0170.089] GetFileType (hFile=0x344) returned 0x1
	[0170.089] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0170.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0170.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0170.090] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0170.090] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.090] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0170.090] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.109] CloseHandle (hObject=0x34c) returned 1
	[0170.109] CloseHandle (hObject=0x344) returned 1
	[0170.109] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0170.115] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0170.115] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9)) returned 1
	[0170.115] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0170.116] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0170.116] ReadFile (in: hFile=0x344, lpBuffer=0x12668000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12668000*, lpNumberOfBytesRead=0x12769d1c*=0x5a9, lpOverlapped=0x0) returned 1
	[0170.126] GetFileType (hFile=0x344) returned 0x1
	[0170.126] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.126] WriteFile (in: hFile=0x344, lpBuffer=0x1265e000*, nNumberOfBytesToWrite=0x5a9, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1265e000*, lpNumberOfBytesWritten=0x12769d00*=0x5a9, lpOverlapped=0x12769d0c) returned 1
	[0170.126] GetFileType (hFile=0x344) returned 0x1
	[0170.127] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x5a9, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0170.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0170.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0170.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0170.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.127] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0170.127] WriteFile (in: hFile=0x34c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.127] CloseHandle (hObject=0x34c) returned 1
	[0170.129] CloseHandle (hObject=0x344) returned 1
	[0170.139] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.189] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0170.205] SetEvent (hEvent=0x2e8) returned 1
	[0170.205] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0170.206] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0170.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1
	[0170.207] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c060 | out: pbBuffer=0x1244c060) returned 1
	[0170.207] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788038 | out: pbBuffer=0x12788038) returned 1
	[0170.207] ReadFile (in: hFile=0x344, lpBuffer=0x12708000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x12708000*, lpNumberOfBytesRead=0x12611d1c*=0x4cc, lpOverlapped=0x0) returned 1
	[0170.412] GetFileType (hFile=0x344) returned 0x1
	[0170.412] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.412] WriteFile (in: hFile=0x344, lpBuffer=0x12819400*, nNumberOfBytesToWrite=0x4cc, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x12819400*, lpNumberOfBytesWritten=0x12611d00*=0x4cc, lpOverlapped=0x12611d0c) returned 1
	[0170.412] GetFileType (hFile=0x344) returned 0x1
	[0170.412] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x4cc, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0170.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0170.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0170.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445a0 | out: pbBuffer=0x127445a0) returned 1
	[0170.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.414] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0170.414] WriteFile (in: hFile=0x2dc, lpBuffer=0x12819900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x12819900*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.414] CloseHandle (hObject=0x2dc) returned 1
	[0170.415] CloseHandle (hObject=0x344) returned 1
	[0170.417] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.426] SwitchToThread () returned 1
	[0170.427] SetEvent (hEvent=0x68) returned 1
	[0170.427] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0170.427] SetEvent (hEvent=0x68) returned 1
	[0170.427] SetEvent (hEvent=0x2e8) returned 1
	[0170.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4eb35ad0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1
	[0170.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.435] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.435] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b77470, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b77470, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.435] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1
	[0170.435] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.435] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0170.437] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0170.437] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0170.439] CloseHandle (hObject=0x344) returned 1
	[0170.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.439] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.440] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b77470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.440] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="65UX3YG0", cAlternateFileName="")) returned 1
	[0170.440] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AY721QDR", cAlternateFileName="")) returned 1
	[0170.440] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DZBKZBIC", cAlternateFileName="")) returned 1
	[0170.440] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0170.440] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VRLZOZ0E", cAlternateFileName="")) returned 1
	[0170.440] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.440] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.537] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0170.537] WriteFile (in: hFile=0x2dc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0170.538] CloseHandle (hObject=0x2dc) returned 1
	[0170.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.539] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.539] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.540] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.540] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\65UX3YG0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\65ux3yg0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.541] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0170.541] WriteFile (in: hFile=0x2dc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0170.543] CloseHandle (hObject=0x2dc) returned 1
	[0170.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.545] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.545] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.545] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.545] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.545] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\AY721QDR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\ay721qdr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.547] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0170.547] WriteFile (in: hFile=0x2dc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0170.548] CloseHandle (hObject=0x2dc) returned 1
	[0170.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.549] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.549] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.549] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.549] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.550] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\DZBKZBIC\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\dzbkzbic\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.551] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0170.551] WriteFile (in: hFile=0x2dc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0170.552] CloseHandle (hObject=0x2dc) returned 1
	[0170.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.553] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.553] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b9d5d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.553] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.553] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.553] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.554] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\VRLZOZ0E\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\vrlzoz0e\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.557] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0170.557] WriteFile (in: hFile=0x2dc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0170.559] CloseHandle (hObject=0x2dc) returned 1
	[0170.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0170.560] SetEvent (hEvent=0x30c) returned 1
	[0170.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.569] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.569] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f5d6350, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x2f5d6350, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x2f5d6350, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.569] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.569] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.569] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MMC\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\mmc\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.572] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0170.572] WriteFile (in: hFile=0x34c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0170.573] CloseHandle (hObject=0x34c) returned 1
	[0170.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.578] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.578] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.578] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="14", cAlternateFileName="")) returned 1
	[0170.578] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.578] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.581] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0170.581] WriteFile (in: hFile=0x34c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0170.582] CloseHandle (hObject=0x34c) returned 1
	[0170.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.584] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.584] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.584] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8d940a0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8d940a0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.584] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0170.584] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.584] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.587] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0170.587] WriteFile (in: hFile=0x34c, lpBuffer=0x12626000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12626000*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0170.588] CloseHandle (hObject=0x34c) returned 1
	[0170.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.591] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.591] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.591] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8d940a0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x8e064c0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.591] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1
	[0170.591] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.591] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.591] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.593] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0170.593] WriteFile (in: hFile=0x34c, lpBuffer=0x12627300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x12627300*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0170.595] CloseHandle (hObject=0x34c) returned 1
	[0170.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\MS Project\\14\\1033\\Global.MPT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\ms project\\14\\1033\\global.mpt"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8e064c0, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x8e064c0, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0xfee79d60, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x5f600)) returned 1
	[0170.599] SetEvent (hEvent=0x68) returned 1
	[0170.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.601] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.601] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.601] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0170.602] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.602] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.603] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0170.603] WriteFile (in: hFile=0x34c, lpBuffer=0x12628600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12628600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0170.605] CloseHandle (hObject=0x34c) returned 1
	[0170.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.606] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1
	[0170.606] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.606] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.608] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0170.608] WriteFile (in: hFile=0x34c, lpBuffer=0x12629900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12629900*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0170.609] CloseHandle (hObject=0x34c) returned 1
	[0170.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.615] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.615] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1
	[0170.615] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.615] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.615] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0170.617] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0170.617] WriteFile (in: hFile=0x344, lpBuffer=0x1262ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x1262ac00*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0170.618] CloseHandle (hObject=0x344) returned 1
	[0170.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0170.619] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0170.619] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0170.620] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1
	[0170.620] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0170.620] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0170.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0170.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0170.620] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0170.621] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0170.621] WriteFile (in: hFile=0x344, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0170.622] CloseHandle (hObject=0x344) returned 1
	[0170.622] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x31a325d0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x31a325d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x31a325d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0170.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.072] SetEvent (hEvent=0xa0) returned 1
	[0171.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.072] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.073] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43c8ae30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dae0390, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dae0390, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.073] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1
	[0171.073] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0171.073] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.073] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0171.075] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.075] WriteFile (in: hFile=0x34c, lpBuffer=0x125c6000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x125c6000*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.076] CloseHandle (hObject=0x34c) returned 1
	[0171.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\MSO1033.acl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\mso1033.acl"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ce7b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f6ce7b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4f6ce7b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x9382)) returned 1
	[0171.122] SetEvent (hEvent=0xa0) returned 1
	[0171.122] SetEvent (hEvent=0x68) returned 1
	[0171.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.126] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.126] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.126] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5dae0390, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90b3d80, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.128] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1
	[0171.128] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0171.128] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1
	[0171.128] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.128] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.130] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0171.130] WriteFile (in: hFile=0x2dc, lpBuffer=0x125c7300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x125c7300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0171.131] CloseHandle (hObject=0x2dc) returned 1
	[0171.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a)) returned 1
	[0171.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Templates.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\templates.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5dc5d150, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x472)) returned 1
	[0171.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34)) returned 1
	[0171.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0171.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0171.147] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0171.148] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5c734300, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0171.148] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1
	[0171.148] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6215c440, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x6215c440, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6215c440, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1
	[0171.148] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0171.148] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0171.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0171.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0171.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.150] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0171.150] WriteFile (in: hFile=0x33c, lpBuffer=0x125c8600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x125c8600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0171.151] CloseHandle (hObject=0x33c) returned 1
	[0171.151] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5de69980, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5de69980, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5e0c9040, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1
	[0171.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.156] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0171.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x5dc5d150, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5dc5d150, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x34)) returned 1
	[0171.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4a0 | out: pbBuffer=0x1240f4a0) returned 1
	[0171.157] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410830 | out: pbBuffer=0x12410830) returned 1
	[0171.157] ReadFile (in: hFile=0x33c, lpBuffer=0x126e8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x126e8000*, lpNumberOfBytesRead=0x12769d1c*=0x34, lpOverlapped=0x0) returned 1
	[0171.158] GetFileType (hFile=0x33c) returned 0x1
	[0171.158] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.158] WriteFile (in: hFile=0x33c, lpBuffer=0x1240c740*, nNumberOfBytesToWrite=0x34, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1240c740*, lpNumberOfBytesWritten=0x12769d00*=0x34, lpOverlapped=0x12769d0c) returned 1
	[0171.158] GetFileType (hFile=0x33c) returned 0x1
	[0171.158] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x34, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.158] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e01 | out: pbBuffer=0x127e8e01) returned 1
	[0171.158] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8f01 | out: pbBuffer=0x127e8f01) returned 1
	[0171.158] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9001 | out: pbBuffer=0x127e9001) returned 1
	[0171.158] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410978 | out: pbBuffer=0x12410978) returned 1
	[0171.159] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0171.159] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0171.159] WriteFile (in: hFile=0x1e4, lpBuffer=0x12634000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12634000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.159] CloseHandle (hObject=0x1e4) returned 1
	[0171.159] CloseHandle (hObject=0x33c) returned 1
	[0171.159] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\index.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.346] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0171.656] SetEvent (hEvent=0x30c) returned 1
	[0171.656] SetEvent (hEvent=0x68) returned 1
	[0171.656] SetEvent (hEvent=0x80) returned 1
	[0171.656] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0171.675] SetEvent (hEvent=0x30c) returned 1
	[0171.675] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0171.681] SetEvent (hEvent=0x30c) returned 1
	[0171.681] SetEvent (hEvent=0x80) returned 1
	[0171.681] SetEvent (hEvent=0x68) returned 1
	[0171.681] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0171.699] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0171.857] SetEvent (hEvent=0x30c) returned 1
	[0171.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.859] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0171.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bb4c1b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4bb4c1b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbec39d0, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1
	[0171.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0171.859] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0171.859] ReadFile (in: hFile=0x2dc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0xa8, lpOverlapped=0x0) returned 1
	[0171.890] GetFileType (hFile=0x2dc) returned 0x1
	[0171.890] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.890] WriteFile (in: hFile=0x2dc, lpBuffer=0x1277c210*, nNumberOfBytesToWrite=0xa8, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1277c210*, lpNumberOfBytesWritten=0x12429d00*=0xa8, lpOverlapped=0x12429d0c) returned 1
	[0171.890] GetFileType (hFile=0x2dc) returned 0x1
	[0171.890] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0xa8, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.890] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0171.890] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0171.891] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0171.891] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0171.891] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.891] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0171.891] WriteFile (in: hFile=0x344, lpBuffer=0x125e2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e2500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.891] CloseHandle (hObject=0x344) returned 1
	[0171.891] CloseHandle (hObject=0x2dc) returned 1
	[0171.891] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.901] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0171.911] SetEvent (hEvent=0x30c) returned 1
	[0171.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.912] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0171.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5db2c650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x5db2c650, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x5db78910, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x509b)) returned 1
	[0171.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0171.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0171.912] ReadFile (in: hFile=0x344, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1260fd1c*=0x509b, lpOverlapped=0x0) returned 1
	[0171.940] GetFileType (hFile=0x344) returned 0x1
	[0171.940] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.940] WriteFile (in: hFile=0x344, lpBuffer=0x124a1500*, nNumberOfBytesToWrite=0x509b, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x124a1500*, lpNumberOfBytesWritten=0x1260fd00*=0x509b, lpOverlapped=0x1260fd0c) returned 1
	[0171.940] GetFileType (hFile=0x344) returned 0x1
	[0171.940] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x509b, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0171.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0171.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0171.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0171.941] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.941] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0171.941] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x125e2a00*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.941] CloseHandle (hObject=0x33c) returned 1
	[0171.941] CloseHandle (hObject=0x344) returned 1
	[0171.941] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\templates\\normal.dotm.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.958] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.002] SetEvent (hEvent=0x30c) returned 1
	[0172.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20131025151332" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20131025151332"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.004] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20131025151332" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20131025151332"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb264df80, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb264df80, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb264df80, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa)) returned 1
	[0172.004] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0172.004] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0172.004] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12767d1c*=0xa, lpOverlapped=0x0) returned 1
	[0172.006] GetFileType (hFile=0x33c) returned 0x1
	[0172.006] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.006] WriteFile (in: hFile=0x33c, lpBuffer=0x124104d0*, nNumberOfBytesToWrite=0xa, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x124104d0*, lpNumberOfBytesWritten=0x12767d00*=0xa, lpOverlapped=0x12767d0c) returned 1
	[0172.007] GetFileType (hFile=0x33c) returned 0x1
	[0172.007] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xa, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0172.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0172.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0172.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410590 | out: pbBuffer=0x12410590) returned 1
	[0172.007] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20131025151332" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20131025151332"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.007] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.008] WriteFile (in: hFile=0x344, lpBuffer=0x125e2f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e2f00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.008] CloseHandle (hObject=0x344) returned 1
	[0172.008] CloseHandle (hObject=0x33c) returned 1
	[0172.008] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20131025151332" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20131025151332"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20131025151332.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20131025151332.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.019] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.042] SetEvent (hEvent=0x30c) returned 1
	[0172.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\addons.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\addons.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.043] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\addons.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\addons.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb76a6d10, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb76a6d10, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb76a6d10, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0172.043] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0172.043] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105a8 | out: pbBuffer=0x124105a8) returned 1
	[0172.043] ReadFile (in: hFile=0x344, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x12429d1c*=0x18, lpOverlapped=0x0) returned 1
	[0172.047] GetFileType (hFile=0x344) returned 0x1
	[0172.047] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.047] WriteFile (in: hFile=0x344, lpBuffer=0x1240f100*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1240f100*, lpNumberOfBytesWritten=0x12429d00*=0x18, lpOverlapped=0x12429d0c) returned 1
	[0172.047] GetFileType (hFile=0x344) returned 0x1
	[0172.047] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.047] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0172.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0172.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0172.048] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106b0 | out: pbBuffer=0x124106b0) returned 1
	[0172.048] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\addons.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\addons.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.048] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.048] WriteFile (in: hFile=0x33c, lpBuffer=0x125e3400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e3400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.049] CloseHandle (hObject=0x33c) returned 1
	[0172.049] CloseHandle (hObject=0x344) returned 1
	[0172.049] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\addons.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\addons.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\addons.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\addons.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.058] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.066] SetEvent (hEvent=0x30c) returned 1
	[0172.067] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.068] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0172.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc37c9330, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc37c9330, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc37df2c0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xbdb)) returned 1
	[0172.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4c0 | out: pbBuffer=0x1240f4c0) returned 1
	[0172.068] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106d8 | out: pbBuffer=0x124106d8) returned 1
	[0172.068] ReadFile (in: hFile=0x33c, lpBuffer=0x12918000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x12918000*, lpNumberOfBytesRead=0x12611d1c*=0xbdb, lpOverlapped=0x0) returned 1
	[0172.074] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.085] SetEvent (hEvent=0x30c) returned 1
	[0172.085] GetFileType (hFile=0x33c) returned 0x1
	[0172.085] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.085] WriteFile (in: hFile=0x33c, lpBuffer=0x12978000*, nNumberOfBytesToWrite=0xbdb, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x12978000*, lpNumberOfBytesWritten=0x12611d00*=0xbdb, lpOverlapped=0x12611d0c) returned 1
	[0172.086] GetFileType (hFile=0x33c) returned 0x1
	[0172.086] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xbdb, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0172.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0172.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0172.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0172.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.087] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0172.087] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.087] CloseHandle (hObject=0x344) returned 1
	[0172.087] CloseHandle (hObject=0x33c) returned 1
	[0172.087] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-05_5.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.090] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.108] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb47c9bf0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb47c9bf0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1
	[0172.108] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0172.108] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0172.109] ReadFile (in: hFile=0x2dc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1260fd1c*=0x10000, lpOverlapped=0x0) returned 1
	[0172.119] GetFileType (hFile=0x2dc) returned 0x1
	[0172.119] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.119] WriteFile (in: hFile=0x2dc, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x1260fd00*=0x10000, lpOverlapped=0x1260fd0c) returned 1
	[0172.119] GetFileType (hFile=0x2dc) returned 0x1
	[0172.119] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x10000, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.119] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0172.119] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0172.120] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0172.120] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0172.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.120] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.120] WriteFile (in: hFile=0x344, lpBuffer=0x125f6000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x125f6000*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.120] CloseHandle (hObject=0x344) returned 1
	[0172.124] CloseHandle (hObject=0x2dc) returned 1
	[0172.157] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\cert8.db.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\cert8.db.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.209] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.222] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.225] SetEvent (hEvent=0x68) returned 1
	[0172.225] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.227] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb45b48b0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb45b48b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb4b0fa30, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x70000)) returned 1
	[0172.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4a0 | out: pbBuffer=0x1252e4a0) returned 1
	[0172.227] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744358 | out: pbBuffer=0x12744358) returned 1
	[0172.227] ReadFile (in: hFile=0x1e4, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1260fd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0172.236] GetFileType (hFile=0x1e4) returned 0x1
	[0172.236] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.236] WriteFile (in: hFile=0x1e4, lpBuffer=0x12858000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x12858000*, lpNumberOfBytesWritten=0x1260fd00*=0x20000, lpOverlapped=0x1260fd0c) returned 1
	[0172.237] GetFileType (hFile=0x1e4) returned 0x1
	[0172.237] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0172.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0172.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0172.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744480 | out: pbBuffer=0x12744480) returned 1
	[0172.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.237] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.237] WriteFile (in: hFile=0x2dc, lpBuffer=0x125de500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x125de500*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.238] CloseHandle (hObject=0x2dc) returned 1
	[0172.240] CloseHandle (hObject=0x1e4) returned 1
	[0172.242] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\extensions.sqlite.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\extensions.sqlite.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.282] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.296] SetEvent (hEvent=0x30c) returned 1
	[0172.296] SwitchToThread () returned 1
	[0172.297] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.300] SetEvent (hEvent=0x30c) returned 1
	[0172.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.301] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb81a92d0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa0000)) returned 1
	[0172.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0172.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0172.301] ReadFile (in: hFile=0x1e4, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12767d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0172.313] GetFileType (hFile=0x1e4) returned 0x1
	[0172.313] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.313] WriteFile (in: hFile=0x1e4, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x12767d00*=0x20000, lpOverlapped=0x12767d0c) returned 1
	[0172.314] GetFileType (hFile=0x1e4) returned 0x1
	[0172.314] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0172.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0172.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0172.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0172.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.315] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.315] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.316] CloseHandle (hObject=0x2dc) returned 1
	[0172.316] CloseHandle (hObject=0x1e4) returned 1
	[0172.316] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\idb\\818200132aebmoouht.sqlite.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.321] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\localstore.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\localstore.rdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.322] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\localstore.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\localstore.rdf"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x850d63f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x850d63f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x850d63f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x501)) returned 1
	[0172.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0172.322] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788108 | out: pbBuffer=0x12788108) returned 1
	[0172.322] ReadFile (in: hFile=0x1e4, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12429d1c*=0x501, lpOverlapped=0x0) returned 1
	[0172.334] GetFileType (hFile=0x1e4) returned 0x1
	[0172.334] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.334] WriteFile (in: hFile=0x1e4, lpBuffer=0x124f4000*, nNumberOfBytesToWrite=0x501, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124f4000*, lpNumberOfBytesWritten=0x12429d00*=0x501, lpOverlapped=0x12429d0c) returned 1
	[0172.334] GetFileType (hFile=0x1e4) returned 0x1
	[0172.334] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x501, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.334] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0172.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0172.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0172.335] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0172.335] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\localstore.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\localstore.rdf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.335] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.335] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.335] CloseHandle (hObject=0x344) returned 1
	[0172.344] CloseHandle (hObject=0x1e4) returned 1
	[0172.352] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\localstore.rdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\localstore.rdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\localstore.rdf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\localstore.rdf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.397] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.406] SetEvent (hEvent=0x30c) returned 1
	[0172.406] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.407] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4c1a3d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4c1a3d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x82b58970, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xa00000)) returned 1
	[0172.407] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0172.407] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0172.407] ReadFile (in: hFile=0x33c, lpBuffer=0x126c0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x126c0000*, lpNumberOfBytesRead=0x12769d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0172.422] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0172.423] SetEvent (hEvent=0x2e8) returned 1
	[0172.423] SetEvent (hEvent=0x2f4) returned 1
	[0172.424] GetFileType (hFile=0x33c) returned 0x1
	[0172.424] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.424] WriteFile (in: hFile=0x33c, lpBuffer=0x128d8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x128d8000*, lpNumberOfBytesWritten=0x12769d00*=0x20000, lpOverlapped=0x12769d0c) returned 1
	[0172.424] GetFileType (hFile=0x33c) returned 0x1
	[0172.425] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.425] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0172.425] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0172.425] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0172.426] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0172.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.426] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.426] WriteFile (in: hFile=0x2dc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.555] SetEvent (hEvent=0xa0) returned 1
	[0172.555] CloseHandle (hObject=0x2dc) returned 1
	[0172.557] CloseHandle (hObject=0x33c) returned 1
	[0172.559] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\places.sqlite.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\places.sqlite.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.589] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.590] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5)) returned 1
	[0172.590] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0172.590] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0172.590] ReadFile (in: hFile=0x344, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x1260fd1c*=0xbc5, lpOverlapped=0x0) returned 1
	[0172.594] GetFileType (hFile=0x344) returned 0x1
	[0172.594] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.594] WriteFile (in: hFile=0x344, lpBuffer=0x12626000*, nNumberOfBytesToWrite=0xbc5, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x12626000*, lpNumberOfBytesWritten=0x1260fd00*=0xbc5, lpOverlapped=0x1260fd0c) returned 1
	[0172.594] GetFileType (hFile=0x344) returned 0x1
	[0172.594] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xbc5, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0172.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0172.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0172.595] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744340 | out: pbBuffer=0x12744340) returned 1
	[0172.595] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.595] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.595] WriteFile (in: hFile=0x34c, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.595] CloseHandle (hObject=0x34c) returned 1
	[0172.596] CloseHandle (hObject=0x344) returned 1
	[0172.597] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.634] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.644] SetEvent (hEvent=0x80) returned 1
	[0172.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\webapps.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\webapps.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.644] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\webapps.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\webapps.json"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2)) returned 1
	[0172.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0172.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127444b8 | out: pbBuffer=0x127444b8) returned 1
	[0172.645] ReadFile (in: hFile=0x1e4, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x12767d1c*=0x2, lpOverlapped=0x0) returned 1
	[0172.646] GetFileType (hFile=0x1e4) returned 0x1
	[0172.646] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.646] WriteFile (in: hFile=0x1e4, lpBuffer=0x127444c0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x127444c0*, lpNumberOfBytesWritten=0x12767d00*=0x2, lpOverlapped=0x12767d0c) returned 1
	[0172.646] GetFileType (hFile=0x1e4) returned 0x1
	[0172.646] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x2, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0172.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0172.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0172.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744570 | out: pbBuffer=0x12744570) returned 1
	[0172.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\webapps.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\webapps.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.647] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0172.647] WriteFile (in: hFile=0x344, lpBuffer=0x124f2a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x124f2a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.647] CloseHandle (hObject=0x344) returned 1
	[0172.647] CloseHandle (hObject=0x1e4) returned 1
	[0172.647] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\webapps.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\webapps.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\webapps.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\webapps.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.652] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.672] SetEvent (hEvent=0x2f4) returned 1
	[0172.673] SetEvent (hEvent=0x80) returned 1
	[0172.673] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0172.676] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.676] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0172.677] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.677] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0172.678] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0172.678] SetEvent (hEvent=0x80) returned 1
	[0172.678] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0172.682] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.682] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1
	[0172.683] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0172.683] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0172.683] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1260fd1c*=0x18000, lpOverlapped=0x0) returned 1
	[0172.720] GetFileType (hFile=0x33c) returned 0x1
	[0172.720] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.720] WriteFile (in: hFile=0x33c, lpBuffer=0x1257a000*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x1257a000*, lpNumberOfBytesWritten=0x1260fd00*=0x18000, lpOverlapped=0x1260fd0c) returned 1
	[0172.721] GetFileType (hFile=0x33c) returned 0x1
	[0172.721] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x18000, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0172.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0172.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0172.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0172.721] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.766] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.766] WriteFile (in: hFile=0x1e4, lpBuffer=0x12460000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12460000*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.767] CloseHandle (hObject=0x1e4) returned 1
	[0172.767] CloseHandle (hObject=0x33c) returned 1
	[0172.767] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.770] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.928] SetEvent (hEvent=0x30c) returned 1
	[0172.928] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lCNCVSn nhy PV-rE.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lcncvsn nhy pv-re.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb0cb44f0, ftCreationTime.dwHighDateTime=0x1d5e7c6, ftLastAccessTime.dwLowDateTime=0x23c8a350, ftLastAccessTime.dwHighDateTime=0x1d5e0bd, ftLastWriteTime.dwLowDateTime=0x23c8a350, ftLastWriteTime.dwHighDateTime=0x1d5e0bd, nFileSizeHigh=0x0, nFileSizeLow=0x8ecf)) returned 1
	[0172.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\lV2thUy TpXUKyZ.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\lv2thuy tpxukyz.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x47820280, ftCreationTime.dwHighDateTime=0x1d5dff2, ftLastAccessTime.dwLowDateTime=0x55f09370, ftLastAccessTime.dwHighDateTime=0x1d5e021, ftLastWriteTime.dwLowDateTime=0x55f09370, ftLastWriteTime.dwHighDateTime=0x1d5e021, nFileSizeHigh=0x0, nFileSizeLow=0x7c3d)) returned 1
	[0172.953] SetEvent (hEvent=0x68) returned 1
	[0172.954] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0172.967] SetEvent (hEvent=0x70) returned 1
	[0172.967] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0172.976] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.976] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0172.979] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0172.979] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0172.979] SetEvent (hEvent=0x30c) returned 1
	[0172.979] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0172.979] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kTbIlLkus7FGmtvx2K.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ktbillkus7fgmtvx2k.swf"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa0920490, ftCreationTime.dwHighDateTime=0x1d5e4c2, ftLastAccessTime.dwLowDateTime=0xd0145530, ftLastAccessTime.dwHighDateTime=0x1d5e0ba, ftLastWriteTime.dwLowDateTime=0xd0145530, ftLastWriteTime.dwHighDateTime=0x1d5e0ba, nFileSizeHigh=0x0, nFileSizeLow=0x16c32)) returned 1
	[0172.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0172.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0172.980] ReadFile (in: hFile=0x344, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12769d1c*=0x16c32, lpOverlapped=0x0) returned 1
	[0173.006] GetFileType (hFile=0x344) returned 0x1
	[0173.006] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.007] WriteFile (in: hFile=0x344, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0x16c32, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x12769d00*=0x16c32, lpOverlapped=0x12769d0c) returned 1
	[0173.007] GetFileType (hFile=0x344) returned 0x1
	[0173.007] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x16c32, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0173.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0173.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0173.008] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0173.008] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kTbIlLkus7FGmtvx2K.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ktbillkus7fgmtvx2k.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.008] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0173.008] WriteFile (in: hFile=0x1e4, lpBuffer=0x12742000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12742000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.008] CloseHandle (hObject=0x1e4) returned 1
	[0173.008] CloseHandle (hObject=0x344) returned 1
	[0173.009] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kTbIlLkus7FGmtvx2K.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ktbillkus7fgmtvx2k.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\kTbIlLkus7FGmtvx2K.swf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ktbillkus7fgmtvx2k.swf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.105] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0173.124] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0173.151] SetEvent (hEvent=0x30c) returned 1
	[0173.151] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0173.155] SetEvent (hEvent=0x80) returned 1
	[0173.155] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0173.163] SetEvent (hEvent=0x80) returned 1
	[0173.164] SwitchToThread () returned 1
	[0173.164] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0173.169] SetEvent (hEvent=0x80) returned 1
	[0173.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yiWBAP8BT.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yiwbap8bt.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.170] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.170] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yiWBAP8BT.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yiwbap8bt.ods"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1470e70, ftCreationTime.dwHighDateTime=0x1d5ddbd, ftLastAccessTime.dwLowDateTime=0x8a082e40, ftLastAccessTime.dwHighDateTime=0x1d5e038, ftLastWriteTime.dwLowDateTime=0x8a082e40, ftLastWriteTime.dwHighDateTime=0x1d5e038, nFileSizeHigh=0x0, nFileSizeLow=0x12a70)) returned 1
	[0173.171] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0173.171] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0173.171] ReadFile (in: hFile=0x1e4, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x12a70, lpOverlapped=0x0) returned 1
	[0173.176] GetFileType (hFile=0x1e4) returned 0x1
	[0173.176] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.176] WriteFile (in: hFile=0x1e4, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x12a70, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1242bd00*=0x12a70, lpOverlapped=0x1242bd0c) returned 1
	[0173.176] GetFileType (hFile=0x1e4) returned 0x1
	[0173.176] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x12a70, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.176] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0173.177] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0173.177] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0173.177] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0173.177] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yiWBAP8BT.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yiwbap8bt.ods"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.177] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.177] WriteFile (in: hFile=0x344, lpBuffer=0x12742000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12742000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.177] CloseHandle (hObject=0x344) returned 1
	[0173.178] CloseHandle (hObject=0x1e4) returned 1
	[0173.180] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yiWBAP8BT.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yiwbap8bt.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\yiWBAP8BT.ods.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\yiwbap8bt.ods.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4SxZKLC2m8bd.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4sxzklc2m8bd.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3912f70, ftCreationTime.dwHighDateTime=0x1d5dc18, ftLastAccessTime.dwLowDateTime=0xf7b2d870, ftLastAccessTime.dwHighDateTime=0x1d5d889, ftLastWriteTime.dwLowDateTime=0xf7b2d870, ftLastWriteTime.dwHighDateTime=0x1d5d889, nFileSizeHigh=0x0, nFileSizeLow=0x11e75)) returned 1
	[0173.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4wgcKnqzp.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4wgcknqzp.png"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6cd12a0, ftCreationTime.dwHighDateTime=0x1d5e2f2, ftLastAccessTime.dwLowDateTime=0xec21710, ftLastAccessTime.dwHighDateTime=0x1d5e546, ftLastWriteTime.dwLowDateTime=0xec21710, ftLastWriteTime.dwHighDateTime=0x1d5e546, nFileSizeHigh=0x0, nFileSizeLow=0xd5eb)) returned 1
	[0173.465] SetEvent (hEvent=0x2f4) returned 1
	[0173.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7slhwRd1I.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7slhwrd1i.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36baf5a0, ftCreationTime.dwHighDateTime=0x1d5e7a5, ftLastAccessTime.dwLowDateTime=0x27a15d0, ftLastAccessTime.dwHighDateTime=0x1d5db36, ftLastWriteTime.dwLowDateTime=0x27a15d0, ftLastWriteTime.dwHighDateTime=0x1d5db36, nFileSizeHigh=0x0, nFileSizeLow=0x506a)) returned 1
	[0173.587] SetEvent (hEvent=0xa0) returned 1
	[0173.587] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0173.603] SetEvent (hEvent=0x68) returned 1
	[0173.603] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\DUbL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\dubl.avi"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0de1f0, ftCreationTime.dwHighDateTime=0x1d5d800, ftLastAccessTime.dwLowDateTime=0xebc31290, ftLastAccessTime.dwHighDateTime=0x1d5e5e1, ftLastWriteTime.dwLowDateTime=0xebc31290, ftLastWriteTime.dwHighDateTime=0x1d5e5e1, nFileSizeHigh=0x0, nFileSizeLow=0x6d51)) returned 1
	[0173.621] SetEvent (hEvent=0x30c) returned 1
	[0173.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F_8mNJ7sy5JmvmrbmbdK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_8mnj7sy5jmvmrbmbdk.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f72230, ftCreationTime.dwHighDateTime=0x1d5dfb4, ftLastAccessTime.dwLowDateTime=0x29528b00, ftLastAccessTime.dwHighDateTime=0x1d5dbfa, ftLastWriteTime.dwLowDateTime=0x29528b00, ftLastWriteTime.dwHighDateTime=0x1d5dbfa, nFileSizeHigh=0x0, nFileSizeLow=0x215a)) returned 1
	[0173.645] SetEvent (hEvent=0x30c) returned 1
	[0173.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\LVZE.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\lvze.avi"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea26c520, ftCreationTime.dwHighDateTime=0x1d5e317, ftLastAccessTime.dwLowDateTime=0xdf9ab3b0, ftLastAccessTime.dwHighDateTime=0x1d5dd44, ftLastWriteTime.dwLowDateTime=0xdf9ab3b0, ftLastWriteTime.dwHighDateTime=0x1d5dd44, nFileSizeHigh=0x0, nFileSizeLow=0x156ed)) returned 1
	[0173.670] SetEvent (hEvent=0x70) returned 1
	[0173.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNvZpT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nnvzpt.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc980b300, ftCreationTime.dwHighDateTime=0x1d5d8b6, ftLastAccessTime.dwLowDateTime=0xf8599990, ftLastAccessTime.dwHighDateTime=0x1d5e4db, ftLastWriteTime.dwLowDateTime=0xf8599990, ftLastWriteTime.dwHighDateTime=0x1d5e4db, nFileSizeHigh=0x0, nFileSizeLow=0x97a9)) returned 1
	[0173.699] SetEvent (hEvent=0x30c) returned 1
	[0173.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OJqu0YWzgtSqMwrpo.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ojqu0ywzgtsqmwrpo.ods"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7a44da0, ftCreationTime.dwHighDateTime=0x1d5dba4, ftLastAccessTime.dwLowDateTime=0xb6cb4620, ftLastAccessTime.dwHighDateTime=0x1d5e3f7, ftLastWriteTime.dwLowDateTime=0xb6cb4620, ftLastWriteTime.dwHighDateTime=0x1d5e3f7, nFileSizeHigh=0x0, nFileSizeLow=0x123db)) returned 1
	[0173.715] SetEvent (hEvent=0x2f4) returned 1
	[0173.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P4QbcwAnG.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p4qbcwang.png"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd8086d0, ftCreationTime.dwHighDateTime=0x1d5e024, ftLastAccessTime.dwLowDateTime=0xcb11bb00, ftLastAccessTime.dwHighDateTime=0x1d5e2c1, ftLastWriteTime.dwLowDateTime=0xcb11bb00, ftLastWriteTime.dwHighDateTime=0x1d5e2c1, nFileSizeHigh=0x0, nFileSizeLow=0x13ec5)) returned 1
	[0173.740] SetEvent (hEvent=0x70) returned 1
	[0173.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RIrTIY.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rirtiy.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76b4e10, ftCreationTime.dwHighDateTime=0x1d5df9b, ftLastAccessTime.dwLowDateTime=0x50c6bc30, ftLastAccessTime.dwHighDateTime=0x1d5dd88, ftLastWriteTime.dwLowDateTime=0x50c6bc30, ftLastWriteTime.dwHighDateTime=0x1d5dd88, nFileSizeHigh=0x0, nFileSizeLow=0xc94e)) returned 1
	[0173.766] SetEvent (hEvent=0x30c) returned 1
	[0173.766] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3160420, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0x6e8fc800, ftLastAccessTime.dwHighDateTime=0x1d5e3b5, ftLastWriteTime.dwLowDateTime=0x6e8fc800, ftLastWriteTime.dwHighDateTime=0x1d5e3b5, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0173.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0173.800] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3160420, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0x6e8fc800, ftLastAccessTime.dwHighDateTime=0x1d5e3b5, ftLastWriteTime.dwLowDateTime=0x6e8fc800, ftLastWriteTime.dwHighDateTime=0x1d5e3b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0173.803] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3160420, ftCreationTime.dwHighDateTime=0x1d5e19e, ftLastAccessTime.dwLowDateTime=0x6e8fc800, ftLastAccessTime.dwHighDateTime=0x1d5e3b5, ftLastWriteTime.dwLowDateTime=0x6e8fc800, ftLastWriteTime.dwHighDateTime=0x1d5e3b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd38380, ftCreationTime.dwHighDateTime=0x1d5e011, ftLastAccessTime.dwLowDateTime=0x86defdb0, ftLastAccessTime.dwHighDateTime=0x1d5e1ec, ftLastWriteTime.dwLowDateTime=0x86defdb0, ftLastWriteTime.dwHighDateTime=0x1d5e1ec, nFileSizeHigh=0x0, nFileSizeLow=0xaddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="50aZNtE50d7uJ8et.jpg", cAlternateFileName="50AZNT~1.JPG")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c43fc0, ftCreationTime.dwHighDateTime=0x1d5e066, ftLastAccessTime.dwLowDateTime=0x5ae91c20, ftLastAccessTime.dwHighDateTime=0x1d5db54, ftLastWriteTime.dwLowDateTime=0x5ae91c20, ftLastWriteTime.dwHighDateTime=0x1d5db54, nFileSizeHigh=0x0, nFileSizeLow=0x15dfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="6I6Hbtlpt5FG.rtf", cAlternateFileName="6I6HBT~1.RTF")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe97708a0, ftCreationTime.dwHighDateTime=0x1d5e3d1, ftLastAccessTime.dwLowDateTime=0x63b1a020, ftLastAccessTime.dwHighDateTime=0x1d5e06d, ftLastWriteTime.dwLowDateTime=0x63b1a020, ftLastWriteTime.dwHighDateTime=0x1d5e06d, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="6ZX6_am.jpg", cAlternateFileName="")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e057c20, ftCreationTime.dwHighDateTime=0x1d5dd42, ftLastAccessTime.dwLowDateTime=0x139a49c0, ftLastAccessTime.dwHighDateTime=0x1d5dad7, ftLastWriteTime.dwLowDateTime=0x139a49c0, ftLastWriteTime.dwHighDateTime=0x1d5dad7, nFileSizeHigh=0x0, nFileSizeLow=0x18a75, dwReserved0=0x0, dwReserved1=0x0, cFileName="A0BnHGSvqBhO.mkv", cAlternateFileName="A0BNHG~1.MKV")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5fd2e0, ftCreationTime.dwHighDateTime=0x1d5e1ec, ftLastAccessTime.dwLowDateTime=0xa2aedf30, ftLastAccessTime.dwHighDateTime=0x1d5dd71, ftLastWriteTime.dwLowDateTime=0xa2aedf30, ftLastWriteTime.dwHighDateTime=0x1d5dd71, nFileSizeHigh=0x0, nFileSizeLow=0xd692, dwReserved0=0x0, dwReserved1=0x0, cFileName="aLO21WMGRgzPBFjr.mp3", cAlternateFileName="ALO21W~1.MP3")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1534c580, ftCreationTime.dwHighDateTime=0x1d5dcbc, ftLastAccessTime.dwLowDateTime=0x29ebe420, ftLastAccessTime.dwHighDateTime=0x1d5daa2, ftLastWriteTime.dwLowDateTime=0x29ebe420, ftLastWriteTime.dwHighDateTime=0x1d5daa2, nFileSizeHigh=0x0, nFileSizeLow=0x4f6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="bCxV.gif", cAlternateFileName="")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83531620, ftCreationTime.dwHighDateTime=0x1d5e581, ftLastAccessTime.dwLowDateTime=0x80fb2700, ftLastAccessTime.dwHighDateTime=0x1d5e72f, ftLastWriteTime.dwLowDateTime=0x80fb2700, ftLastWriteTime.dwHighDateTime=0x1d5e72f, nFileSizeHigh=0x0, nFileSizeLow=0x18c9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cvybTulqZbp.bmp", cAlternateFileName="CVYBTU~1.BMP")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6befea60, ftCreationTime.dwHighDateTime=0x1d5e6d7, ftLastAccessTime.dwLowDateTime=0x98aad6f0, ftLastAccessTime.dwHighDateTime=0x1d5dcd7, ftLastWriteTime.dwLowDateTime=0x98aad6f0, ftLastWriteTime.dwHighDateTime=0x1d5dcd7, nFileSizeHigh=0x0, nFileSizeLow=0x8159, dwReserved0=0x0, dwReserved1=0x0, cFileName="D9TMeEzKV.ppt", cAlternateFileName="D9TMEE~1.PPT")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfbc0, ftCreationTime.dwHighDateTime=0x1d5df67, ftLastAccessTime.dwLowDateTime=0x977ce750, ftLastAccessTime.dwHighDateTime=0x1d5dbb0, ftLastWriteTime.dwLowDateTime=0x977ce750, ftLastWriteTime.dwHighDateTime=0x1d5dbb0, nFileSizeHigh=0x0, nFileSizeLow=0x2057, dwReserved0=0x0, dwReserved1=0x0, cFileName="fkidES4GNCj_7WaDF.jpg", cAlternateFileName="FKIDES~1.JPG")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe75df30, ftCreationTime.dwHighDateTime=0x1d5d862, ftLastAccessTime.dwLowDateTime=0xec0d53a0, ftLastAccessTime.dwHighDateTime=0x1d5e3c0, ftLastWriteTime.dwLowDateTime=0xec0d53a0, ftLastWriteTime.dwHighDateTime=0x1d5e3c0, nFileSizeHigh=0x0, nFileSizeLow=0x18509, dwReserved0=0x0, dwReserved1=0x0, cFileName="gOredi507MvcX.mp3", cAlternateFileName="GOREDI~1.MP3")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcc11f0, ftCreationTime.dwHighDateTime=0x1d5dea2, ftLastAccessTime.dwLowDateTime=0x84501ca0, ftLastAccessTime.dwHighDateTime=0x1d5e6a6, ftLastWriteTime.dwLowDateTime=0x84501ca0, ftLastWriteTime.dwHighDateTime=0x1d5e6a6, nFileSizeHigh=0x0, nFileSizeLow=0x155b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HesqnET.gif", cAlternateFileName="")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3de2e0, ftCreationTime.dwHighDateTime=0x1d5d9bf, ftLastAccessTime.dwLowDateTime=0x9e5f3160, ftLastAccessTime.dwHighDateTime=0x1d5da82, ftLastWriteTime.dwLowDateTime=0x9e5f3160, ftLastWriteTime.dwHighDateTime=0x1d5da82, nFileSizeHigh=0x0, nFileSizeLow=0x7f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="I_1KbfM.csv", cAlternateFileName="")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80ffdb0, ftCreationTime.dwHighDateTime=0x1d5e00a, ftLastAccessTime.dwLowDateTime=0x622d2c30, ftLastAccessTime.dwHighDateTime=0x1d5e782, ftLastWriteTime.dwLowDateTime=0x622d2c30, ftLastWriteTime.dwHighDateTime=0x1d5e782, nFileSizeHigh=0x0, nFileSizeLow=0xd90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="l-BJBqQ.png", cAlternateFileName="")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefefc5e0, ftCreationTime.dwHighDateTime=0x1d5dcd9, ftLastAccessTime.dwLowDateTime=0x11465900, ftLastAccessTime.dwHighDateTime=0x1d5da66, ftLastWriteTime.dwLowDateTime=0x11465900, ftLastWriteTime.dwHighDateTime=0x1d5da66, nFileSizeHigh=0x0, nFileSizeLow=0x130c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="QlkcGNLJsj2.csv", cAlternateFileName="QLKCGN~1.CSV")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cb429a0, ftCreationTime.dwHighDateTime=0x1d5db7e, ftLastAccessTime.dwLowDateTime=0x8ef4fac0, ftLastAccessTime.dwHighDateTime=0x1d5e72a, ftLastWriteTime.dwLowDateTime=0x8ef4fac0, ftLastWriteTime.dwHighDateTime=0x1d5e72a, nFileSizeHigh=0x0, nFileSizeLow=0x2622, dwReserved0=0x0, dwReserved1=0x0, cFileName="tAUX3Ev9ahyZ.jpg", cAlternateFileName="TAUX3E~1.JPG")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fcbf0, ftCreationTime.dwHighDateTime=0x1d5da33, ftLastAccessTime.dwLowDateTime=0x1b129490, ftLastAccessTime.dwHighDateTime=0x1d5dd12, ftLastWriteTime.dwLowDateTime=0x1b129490, ftLastWriteTime.dwHighDateTime=0x1d5dd12, nFileSizeHigh=0x0, nFileSizeLow=0x18a73, dwReserved0=0x0, dwReserved1=0x0, cFileName="tPIzGgvgvVnR SD5f.ppt", cAlternateFileName="TPIZGG~1.PPT")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1afad570, ftCreationTime.dwHighDateTime=0x1d5dc23, ftLastAccessTime.dwLowDateTime=0x9d607520, ftLastAccessTime.dwHighDateTime=0x1d5df5b, ftLastWriteTime.dwLowDateTime=0x9d607520, ftLastWriteTime.dwHighDateTime=0x1d5df5b, nFileSizeHigh=0x0, nFileSizeLow=0xfa14, dwReserved0=0x0, dwReserved1=0x0, cFileName="uXl8j0BM.pptx", cAlternateFileName="UXL8J0~1.PPT")) returned 1
	[0173.804] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0173.805] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0173.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0173.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0173.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.811] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0173.811] WriteFile (in: hFile=0x344, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0173.812] CloseHandle (hObject=0x344) returned 1
	[0173.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\50aZNtE50d7uJ8et.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\50aznte50d7uj8et.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd38380, ftCreationTime.dwHighDateTime=0x1d5e011, ftLastAccessTime.dwLowDateTime=0x86defdb0, ftLastAccessTime.dwHighDateTime=0x1d5e1ec, ftLastWriteTime.dwLowDateTime=0x86defdb0, ftLastWriteTime.dwHighDateTime=0x1d5e1ec, nFileSizeHigh=0x0, nFileSizeLow=0xaddc)) returned 1
	[0173.813] SetEvent (hEvent=0x2f4) returned 1
	[0173.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6I6Hbtlpt5FG.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6i6hbtlpt5fg.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c43fc0, ftCreationTime.dwHighDateTime=0x1d5e066, ftLastAccessTime.dwLowDateTime=0x5ae91c20, ftLastAccessTime.dwHighDateTime=0x1d5db54, ftLastWriteTime.dwLowDateTime=0x5ae91c20, ftLastWriteTime.dwHighDateTime=0x1d5db54, nFileSizeHigh=0x0, nFileSizeLow=0x15dfb)) returned 1
	[0173.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6ZX6_am.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6zx6_am.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe97708a0, ftCreationTime.dwHighDateTime=0x1d5e3d1, ftLastAccessTime.dwLowDateTime=0x63b1a020, ftLastAccessTime.dwHighDateTime=0x1d5e06d, ftLastWriteTime.dwLowDateTime=0x63b1a020, ftLastWriteTime.dwHighDateTime=0x1d5e06d, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1
	[0173.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6I6Hbtlpt5FG.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6i6hbtlpt5fg.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.816] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0173.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6I6Hbtlpt5FG.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6i6hbtlpt5fg.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c43fc0, ftCreationTime.dwHighDateTime=0x1d5e066, ftLastAccessTime.dwLowDateTime=0x5ae91c20, ftLastAccessTime.dwHighDateTime=0x1d5db54, ftLastWriteTime.dwLowDateTime=0x5ae91c20, ftLastWriteTime.dwHighDateTime=0x1d5db54, nFileSizeHigh=0x0, nFileSizeLow=0x15dfb)) returned 1
	[0173.816] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e1c0 | out: pbBuffer=0x1252e1c0) returned 1
	[0173.817] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0173.817] ReadFile (in: hFile=0x344, lpBuffer=0x126a2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x126a2000*, lpNumberOfBytesRead=0x1260fd1c*=0x15dfb, lpOverlapped=0x0) returned 1
	[0173.845] GetFileType (hFile=0x344) returned 0x1
	[0173.845] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.845] WriteFile (in: hFile=0x344, lpBuffer=0x125bc000*, nNumberOfBytesToWrite=0x15dfb, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x125bc000*, lpNumberOfBytesWritten=0x1260fd00*=0x15dfb, lpOverlapped=0x1260fd0c) returned 1
	[0173.845] GetFileType (hFile=0x344) returned 0x1
	[0173.845] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x15dfb, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0173.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0173.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0173.846] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104a8 | out: pbBuffer=0x124104a8) returned 1
	[0173.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6I6Hbtlpt5FG.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6i6hbtlpt5fg.rtf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.846] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0173.846] WriteFile (in: hFile=0x33c, lpBuffer=0x125d6000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x125d6000*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.846] CloseHandle (hObject=0x33c) returned 1
	[0173.848] CloseHandle (hObject=0x344) returned 1
	[0173.849] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0173.849] SetEvent (hEvent=0x2e8) returned 1
	[0173.849] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6I6Hbtlpt5FG.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6i6hbtlpt5fg.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\6I6Hbtlpt5FG.rtf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\6i6hbtlpt5fg.rtf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.038] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0174.048] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0174.062] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0174.212] SetEvent (hEvent=0x2f4) returned 1
	[0174.212] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\QlkcGNLJsj2.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\qlkcgnljsj2.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.213] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\QlkcGNLJsj2.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\qlkcgnljsj2.csv"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefefc5e0, ftCreationTime.dwHighDateTime=0x1d5dcd9, ftLastAccessTime.dwLowDateTime=0x11465900, ftLastAccessTime.dwHighDateTime=0x1d5da66, ftLastWriteTime.dwLowDateTime=0x11465900, ftLastWriteTime.dwHighDateTime=0x1d5da66, nFileSizeHigh=0x0, nFileSizeLow=0x130c1)) returned 1
	[0174.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0174.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0174.214] ReadFile (in: hFile=0x33c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x12767d1c*=0x130c1, lpOverlapped=0x0) returned 1
	[0174.218] GetFileType (hFile=0x33c) returned 0x1
	[0174.218] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.218] WriteFile (in: hFile=0x33c, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0x130c1, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x12767d00*=0x130c1, lpOverlapped=0x12767d0c) returned 1
	[0174.218] GetFileType (hFile=0x33c) returned 0x1
	[0174.218] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x130c1, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.219] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0174.219] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0174.219] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0174.219] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0174.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\QlkcGNLJsj2.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\qlkcgnljsj2.csv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.219] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0174.219] WriteFile (in: hFile=0x344, lpBuffer=0x1263c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.219] CloseHandle (hObject=0x344) returned 1
	[0174.224] CloseHandle (hObject=0x33c) returned 1
	[0174.226] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\QlkcGNLJsj2.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\qlkcgnljsj2.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\QlkcGNLJsj2.csv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\qlkcgnljsj2.csv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.290] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0174.294] SetEvent (hEvent=0x2f4) returned 1
	[0174.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\cvybTulqZbp.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\cvybtulqzbp.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0174.296] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.296] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\cvybTulqZbp.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\cvybtulqzbp.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83531620, ftCreationTime.dwHighDateTime=0x1d5e581, ftLastAccessTime.dwLowDateTime=0x80fb2700, ftLastAccessTime.dwHighDateTime=0x1d5e72f, ftLastWriteTime.dwLowDateTime=0x80fb2700, ftLastWriteTime.dwHighDateTime=0x1d5e72f, nFileSizeHigh=0x0, nFileSizeLow=0x18c9c)) returned 1
	[0174.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0174.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f0 | out: pbBuffer=0x127440f0) returned 1
	[0174.296] ReadFile (in: hFile=0x1e4, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1260fd1c*=0x18c9c, lpOverlapped=0x0) returned 1
	[0174.301] GetFileType (hFile=0x1e4) returned 0x1
	[0174.301] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.301] WriteFile (in: hFile=0x1e4, lpBuffer=0x12858000*, nNumberOfBytesToWrite=0x18c9c, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x12858000*, lpNumberOfBytesWritten=0x1260fd00*=0x18c9c, lpOverlapped=0x1260fd0c) returned 1
	[0174.302] GetFileType (hFile=0x1e4) returned 0x1
	[0174.302] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x18c9c, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.302] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0174.302] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434901 | out: pbBuffer=0x12434901) returned 1
	[0174.302] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0174.302] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744358 | out: pbBuffer=0x12744358) returned 1
	[0174.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\cvybTulqZbp.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\cvybtulqzbp.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.302] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0174.303] WriteFile (in: hFile=0x34c, lpBuffer=0x12722500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x12722500*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.303] CloseHandle (hObject=0x34c) returned 1
	[0174.303] CloseHandle (hObject=0x1e4) returned 1
	[0174.305] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\cvybTulqZbp.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\cvybtulqzbp.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\cvybTulqZbp.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\cvybtulqzbp.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.351] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0174.355] SetEvent (hEvent=0x2f4) returned 1
	[0174.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\l-BJBqQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\l-bjbqq.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.356] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\l-BJBqQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\l-bjbqq.png"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80ffdb0, ftCreationTime.dwHighDateTime=0x1d5e00a, ftLastAccessTime.dwLowDateTime=0x622d2c30, ftLastAccessTime.dwHighDateTime=0x1d5e782, ftLastWriteTime.dwLowDateTime=0x622d2c30, ftLastWriteTime.dwHighDateTime=0x1d5e782, nFileSizeHigh=0x0, nFileSizeLow=0xd90a)) returned 1
	[0174.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e3a0 | out: pbBuffer=0x1252e3a0) returned 1
	[0174.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410468 | out: pbBuffer=0x12410468) returned 1
	[0174.357] ReadFile (in: hFile=0x344, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1276dd1c*=0xd90a, lpOverlapped=0x0) returned 1
	[0174.361] GetFileType (hFile=0x344) returned 0x1
	[0174.361] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.361] WriteFile (in: hFile=0x344, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0xd90a, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x1276dd00*=0xd90a, lpOverlapped=0x1276dd0c) returned 1
	[0174.362] GetFileType (hFile=0x344) returned 0x1
	[0174.362] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xd90a, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0174.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0174.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0174.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410530 | out: pbBuffer=0x12410530) returned 1
	[0174.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\l-BJBqQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\l-bjbqq.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.365] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.365] WriteFile (in: hFile=0x34c, lpBuffer=0x1263c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1263c500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.365] CloseHandle (hObject=0x34c) returned 1
	[0174.366] CloseHandle (hObject=0x344) returned 1
	[0174.367] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\l-BJBqQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\l-bjbqq.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\l-BJBqQ.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\l-bjbqq.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.410] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0174.418] SetEvent (hEvent=0x2f4) returned 1
	[0174.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\uXl8j0BM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\uxl8j0bm.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.419] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\uXl8j0BM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\uxl8j0bm.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1afad570, ftCreationTime.dwHighDateTime=0x1d5dc23, ftLastAccessTime.dwLowDateTime=0x9d607520, ftLastAccessTime.dwHighDateTime=0x1d5df5b, ftLastWriteTime.dwLowDateTime=0x9d607520, ftLastWriteTime.dwHighDateTime=0x1d5df5b, nFileSizeHigh=0x0, nFileSizeLow=0xfa14)) returned 1
	[0174.419] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e640 | out: pbBuffer=0x1240e640) returned 1
	[0174.419] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f0 | out: pbBuffer=0x127880f0) returned 1
	[0174.419] ReadFile (in: hFile=0x344, lpBuffer=0x12852000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12852000*, lpNumberOfBytesRead=0x1242bd1c*=0xfa14, lpOverlapped=0x0) returned 1
	[0174.434] GetFileType (hFile=0x344) returned 0x1
	[0174.434] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.434] WriteFile (in: hFile=0x344, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0xfa14, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x1242bd00*=0xfa14, lpOverlapped=0x1242bd0c) returned 1
	[0174.435] GetFileType (hFile=0x344) returned 0x1
	[0174.435] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xfa14, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0174.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0174.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0174.436] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a8 | out: pbBuffer=0x127881a8) returned 1
	[0174.436] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\uXl8j0BM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\uxl8j0bm.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0174.437] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0174.437] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.437] CloseHandle (hObject=0x2dc) returned 1
	[0174.454] CloseHandle (hObject=0x344) returned 1
	[0174.472] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\uXl8j0BM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\uxl8j0bm.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\uXl8j0BM.pptx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\uxl8j0bm.pptx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mor.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mor.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0174.602] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mor.exe\\*", lpFindFileData=0x1242ba44 | out: lpFindFileData=0x1242ba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0174.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\nBrrxIz_IBZc4HR3prv.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nbrrxiz_ibzc4hr3prv.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cfb140, ftCreationTime.dwHighDateTime=0x1d5e69b, ftLastAccessTime.dwLowDateTime=0x64c49000, ftLastAccessTime.dwHighDateTime=0x1d5e01b, ftLastWriteTime.dwLowDateTime=0x64c49000, ftLastWriteTime.dwHighDateTime=0x1d5e01b, nFileSizeHigh=0x0, nFileSizeLow=0x22fc)) returned 1
	[0174.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uqpR.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uqpr.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x939d79d0, ftCreationTime.dwHighDateTime=0x1d5e1bc, ftLastAccessTime.dwLowDateTime=0x5134e280, ftLastAccessTime.dwHighDateTime=0x1d5db73, ftLastWriteTime.dwLowDateTime=0x5134e280, ftLastWriteTime.dwHighDateTime=0x1d5db73, nFileSizeHigh=0x0, nFileSizeLow=0x10be6)) returned 1
	[0174.632] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0174.653] SetEvent (hEvent=0x30c) returned 1
	[0174.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\zupETiL.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\zupetil.pps"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87a28740, ftCreationTime.dwHighDateTime=0x1d5dfe8, ftLastAccessTime.dwLowDateTime=0x27ac29c0, ftLastAccessTime.dwHighDateTime=0x1d5e689, ftLastWriteTime.dwLowDateTime=0x27ac29c0, ftLastWriteTime.dwHighDateTime=0x1d5e689, nFileSizeHigh=0x0, nFileSizeLow=0x11acd)) returned 1
	[0174.667] SetEvent (hEvent=0x68) returned 1
	[0174.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9c1b9c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9c1b9c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0174.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0174.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9c1b9c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9c1b9c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0174.678] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd9c1b9c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0xd9c1b9c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0174.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f960400, ftCreationTime.dwHighDateTime=0x1d5e04b, ftLastAccessTime.dwLowDateTime=0xa8f8a0e0, ftLastAccessTime.dwHighDateTime=0x1d5e3e5, ftLastWriteTime.dwLowDateTime=0xa8f8a0e0, ftLastWriteTime.dwHighDateTime=0x1d5e3e5, nFileSizeHigh=0x0, nFileSizeLow=0x16c23, dwReserved0=0x0, dwReserved1=0x0, cFileName="1iQ5eZl-8 jZV2Rg.doc", cAlternateFileName="1IQ5EZ~1.DOC")) returned 1
	[0174.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118abb00, ftCreationTime.dwHighDateTime=0x1d5e659, ftLastAccessTime.dwLowDateTime=0x5539c1b0, ftLastAccessTime.dwHighDateTime=0x1d5dc5f, ftLastWriteTime.dwLowDateTime=0x5539c1b0, ftLastWriteTime.dwHighDateTime=0x1d5dc5f, nFileSizeHigh=0x0, nFileSizeLow=0xa750, dwReserved0=0x0, dwReserved1=0x0, cFileName="2kcD2Y9.odt", cAlternateFileName="")) returned 1
	[0174.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1297650, ftCreationTime.dwHighDateTime=0x1d55c90, ftLastAccessTime.dwLowDateTime=0x84fb0b60, ftLastAccessTime.dwHighDateTime=0x1d5630c, ftLastWriteTime.dwLowDateTime=0x84fb0b60, ftLastWriteTime.dwHighDateTime=0x1d5630c, nFileSizeHigh=0x0, nFileSizeLow=0x10bef, dwReserved0=0x0, dwReserved1=0x0, cFileName="2lopYLbbft5.xlsx", cAlternateFileName="2LOPYL~1.XLS")) returned 1
	[0174.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1cce750, ftCreationTime.dwHighDateTime=0x1d5e1b5, ftLastAccessTime.dwLowDateTime=0x646a6b10, ftLastAccessTime.dwHighDateTime=0x1d5e70b, ftLastWriteTime.dwLowDateTime=0x646a6b10, ftLastWriteTime.dwHighDateTime=0x1d5e70b, nFileSizeHigh=0x0, nFileSizeLow=0x5a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="2TkKqc395uI.ods", cAlternateFileName="2TKKQC~1.ODS")) returned 1
	[0174.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b0fddb0, ftCreationTime.dwHighDateTime=0x1d5e395, ftLastAccessTime.dwLowDateTime=0x65160340, ftLastAccessTime.dwHighDateTime=0x1d5df8a, ftLastWriteTime.dwLowDateTime=0x65160340, ftLastWriteTime.dwHighDateTime=0x1d5df8a, nFileSizeHigh=0x0, nFileSizeLow=0x7d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3q52z1IG2f.doc", cAlternateFileName="3Q52Z1~1.DOC")) returned 1
	[0174.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4b9600, ftCreationTime.dwHighDateTime=0x1d5dae0, ftLastAccessTime.dwLowDateTime=0x46d24030, ftLastAccessTime.dwHighDateTime=0x1d5d9c0, ftLastWriteTime.dwLowDateTime=0x46d24030, ftLastWriteTime.dwHighDateTime=0x1d5d9c0, nFileSizeHigh=0x0, nFileSizeLow=0x10e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="48zhrX ioKlU.xls", cAlternateFileName="48ZHRX~1.XLS")) returned 1
	[0174.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x832e2670, ftCreationTime.dwHighDateTime=0x1d5ddd5, ftLastAccessTime.dwLowDateTime=0x3ed28eb0, ftLastAccessTime.dwHighDateTime=0x1d5e011, ftLastWriteTime.dwLowDateTime=0x3ed28eb0, ftLastWriteTime.dwHighDateTime=0x1d5e011, nFileSizeHigh=0x0, nFileSizeLow=0x36b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="4AV0W2vHFFyiKq.ods", cAlternateFileName="4AV0W2~1.ODS")) returned 1
	[0174.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394012c0, ftCreationTime.dwHighDateTime=0x1d5d863, ftLastAccessTime.dwLowDateTime=0xc6585940, ftLastAccessTime.dwHighDateTime=0x1d5dfae, ftLastWriteTime.dwLowDateTime=0xc6585940, ftLastWriteTime.dwHighDateTime=0x1d5dfae, nFileSizeHigh=0x0, nFileSizeLow=0x1867c, dwReserved0=0x0, dwReserved1=0x0, cFileName="4dJk4wXbRHmGV.xlsx", cAlternateFileName="4DJK4W~1.XLS")) returned 1
	[0174.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aee7710, ftCreationTime.dwHighDateTime=0x1d5e11e, ftLastAccessTime.dwLowDateTime=0x9dbb1fe0, ftLastAccessTime.dwHighDateTime=0x1d5d9d7, ftLastWriteTime.dwLowDateTime=0x9dbb1fe0, ftLastWriteTime.dwHighDateTime=0x1d5d9d7, nFileSizeHigh=0x0, nFileSizeLow=0xa55f, dwReserved0=0x0, dwReserved1=0x0, cFileName="8PUh8WY_5dKhCbfa.ots", cAlternateFileName="8PUH8W~1.OTS")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18d0a070, ftCreationTime.dwHighDateTime=0x1d5dc39, ftLastAccessTime.dwLowDateTime=0xd6ba8010, ftLastAccessTime.dwHighDateTime=0x1d5e3ff, ftLastWriteTime.dwLowDateTime=0xd6ba8010, ftLastWriteTime.dwHighDateTime=0x1d5e3ff, nFileSizeHigh=0x0, nFileSizeLow=0x15626, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Ku0amEFC.pdf", cAlternateFileName="9KU0AM~1.PDF")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbabc97f0, ftCreationTime.dwHighDateTime=0x1d55c18, ftLastAccessTime.dwLowDateTime=0x3f6767e0, ftLastAccessTime.dwHighDateTime=0x1d5648f, ftLastWriteTime.dwLowDateTime=0x3f6767e0, ftLastWriteTime.dwHighDateTime=0x1d5648f, nFileSizeHigh=0x0, nFileSizeLow=0x25b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="A umHqwbP.xlsx", cAlternateFileName="AUMHQW~1.XLS")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba42f770, ftCreationTime.dwHighDateTime=0x1d5bc89, ftLastAccessTime.dwLowDateTime=0xa64a6c60, ftLastAccessTime.dwHighDateTime=0x1d59b4d, ftLastWriteTime.dwLowDateTime=0xa64a6c60, ftLastWriteTime.dwHighDateTime=0x1d59b4d, nFileSizeHigh=0x0, nFileSizeLow=0x195e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AHAdZE.docx", cAlternateFileName="AHADZE~1.DOC")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x126db2d0, ftCreationTime.dwHighDateTime=0x1d57baf, ftLastAccessTime.dwLowDateTime=0x515e7f00, ftLastAccessTime.dwHighDateTime=0x1d57282, ftLastWriteTime.dwLowDateTime=0x515e7f00, ftLastWriteTime.dwHighDateTime=0x1d57282, nFileSizeHigh=0x0, nFileSizeLow=0xcd4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bRrkEpHO.xlsx", cAlternateFileName="BRRKEP~1.XLS")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa25983c0, ftCreationTime.dwHighDateTime=0x1d58770, ftLastAccessTime.dwLowDateTime=0x875f1830, ftLastAccessTime.dwHighDateTime=0x1d568a0, ftLastWriteTime.dwLowDateTime=0x875f1830, ftLastWriteTime.dwHighDateTime=0x1d568a0, nFileSizeHigh=0x0, nFileSizeLow=0xfdb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCFtleBnIxF2X_m.xlsx", cAlternateFileName="DCFTLE~1.XLS")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9558e7c0, ftCreationTime.dwHighDateTime=0x1d5db61, ftLastAccessTime.dwLowDateTime=0x1dfc9860, ftLastAccessTime.dwHighDateTime=0x1d5e134, ftLastWriteTime.dwLowDateTime=0x1dfc9860, ftLastWriteTime.dwHighDateTime=0x1d5e134, nFileSizeHigh=0x0, nFileSizeLow=0x7f3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXLRch2eyG1i8c.pps", cAlternateFileName="FXLRCH~1.PPS")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1dcd650, ftCreationTime.dwHighDateTime=0x1d5dd56, ftLastAccessTime.dwLowDateTime=0x212b7b20, ftLastAccessTime.dwHighDateTime=0x1d5e079, ftLastWriteTime.dwLowDateTime=0x212b7b20, ftLastWriteTime.dwHighDateTime=0x1d5e079, nFileSizeHigh=0x0, nFileSizeLow=0x4304, dwReserved0=0x0, dwReserved1=0x0, cFileName="HFb0VzgrvhmDy7R.doc", cAlternateFileName="HFB0VZ~1.DOC")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e83d090, ftCreationTime.dwHighDateTime=0x1d5b0b1, ftLastAccessTime.dwLowDateTime=0xa366f3c0, ftLastAccessTime.dwHighDateTime=0x1d5dcf1, ftLastWriteTime.dwLowDateTime=0xa366f3c0, ftLastWriteTime.dwHighDateTime=0x1d5dcf1, nFileSizeHigh=0x0, nFileSizeLow=0x1ba9, dwReserved0=0x0, dwReserved1=0x0, cFileName="hJ p0fOGQhB3TSky.xlsx", cAlternateFileName="HJP0FO~1.XLS")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77674a40, ftCreationTime.dwHighDateTime=0x1d5e467, ftLastAccessTime.dwLowDateTime=0xf9b12750, ftLastAccessTime.dwHighDateTime=0x1d5d977, ftLastWriteTime.dwLowDateTime=0xf9b12750, ftLastWriteTime.dwHighDateTime=0x1d5d977, nFileSizeHigh=0x0, nFileSizeLow=0x14a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="i1NGxT_2.pps", cAlternateFileName="")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa11c6c30, ftCreationTime.dwHighDateTime=0x1d5aad8, ftLastAccessTime.dwLowDateTime=0x99d94530, ftLastAccessTime.dwHighDateTime=0x1d56cd3, ftLastWriteTime.dwLowDateTime=0x99d94530, ftLastWriteTime.dwHighDateTime=0x1d56cd3, nFileSizeHigh=0x0, nFileSizeLow=0x16ab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="IG2NoYwlJvOGpIXh6.docx", cAlternateFileName="IG2NOY~1.DOC")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb57a0400, ftCreationTime.dwHighDateTime=0x1d5e6d6, ftLastAccessTime.dwLowDateTime=0x823b6e0, ftLastAccessTime.dwHighDateTime=0x1d5e0ad, ftLastWriteTime.dwLowDateTime=0x823b6e0, ftLastWriteTime.dwHighDateTime=0x1d5e0ad, nFileSizeHigh=0x0, nFileSizeLow=0x18c1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="irr KLGMy_iO-2aIa0 3.doc", cAlternateFileName="IRRKLG~1.DOC")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cc1b440, ftCreationTime.dwHighDateTime=0x1d5e736, ftLastAccessTime.dwLowDateTime=0x7aba7d70, ftLastAccessTime.dwHighDateTime=0x1d5dcd3, ftLastWriteTime.dwLowDateTime=0x7aba7d70, ftLastWriteTime.dwHighDateTime=0x1d5dcd3, nFileSizeHigh=0x0, nFileSizeLow=0x5cb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="iybTstxuOpsD-92nBh4r.xls", cAlternateFileName="IYBTST~1.XLS")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x257509c0, ftCreationTime.dwHighDateTime=0x1d5d878, ftLastAccessTime.dwLowDateTime=0xd878d80, ftLastAccessTime.dwHighDateTime=0x1d5e2d0, ftLastWriteTime.dwLowDateTime=0xd878d80, ftLastWriteTime.dwHighDateTime=0x1d5e2d0, nFileSizeHigh=0x0, nFileSizeLow=0x18d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ja3F.doc", cAlternateFileName="")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55b32bc0, ftCreationTime.dwHighDateTime=0x1d5e2d3, ftLastAccessTime.dwLowDateTime=0x7bd431d0, ftLastAccessTime.dwHighDateTime=0x1d5da15, ftLastWriteTime.dwLowDateTime=0x7bd431d0, ftLastWriteTime.dwHighDateTime=0x1d5da15, nFileSizeHigh=0x0, nFileSizeLow=0x11cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="jeFFyoPYYV1p-.docx", cAlternateFileName="JEFFYO~1.DOC")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e42e0, ftCreationTime.dwHighDateTime=0x1d5e164, ftLastAccessTime.dwLowDateTime=0x97664c60, ftLastAccessTime.dwHighDateTime=0x1d5e6c4, ftLastWriteTime.dwLowDateTime=0x97664c60, ftLastWriteTime.dwHighDateTime=0x1d5e6c4, nFileSizeHigh=0x0, nFileSizeLow=0x8a93, dwReserved0=0x0, dwReserved1=0x0, cFileName="kEdzyToSMHzfQHo4.doc", cAlternateFileName="KEDZYT~1.DOC")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865ed790, ftCreationTime.dwHighDateTime=0x1d5b873, ftLastAccessTime.dwLowDateTime=0x13bff150, ftLastAccessTime.dwHighDateTime=0x1d570b7, ftLastWriteTime.dwLowDateTime=0x13bff150, ftLastWriteTime.dwHighDateTime=0x1d570b7, nFileSizeHigh=0x0, nFileSizeLow=0x12576, dwReserved0=0x0, dwReserved1=0x0, cFileName="KGTu5.pptx", cAlternateFileName="KGTU5~1.PPT")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8b76870, ftCreationTime.dwHighDateTime=0x1d5df46, ftLastAccessTime.dwLowDateTime=0xc541bc40, ftLastAccessTime.dwHighDateTime=0x1d5e076, ftLastWriteTime.dwLowDateTime=0xc541bc40, ftLastWriteTime.dwHighDateTime=0x1d5e076, nFileSizeHigh=0x0, nFileSizeLow=0x182ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="kWogcIjH5ya_.doc", cAlternateFileName="KWOGCI~1.DOC")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82575890, ftCreationTime.dwHighDateTime=0x1d5de50, ftLastAccessTime.dwLowDateTime=0x2dcd59f0, ftLastAccessTime.dwHighDateTime=0x1d5d7b6, ftLastWriteTime.dwLowDateTime=0x2dcd59f0, ftLastWriteTime.dwHighDateTime=0x1d5d7b6, nFileSizeHigh=0x0, nFileSizeLow=0xb55c, dwReserved0=0x0, dwReserved1=0x0, cFileName="lZDPaudj3O QTkuAu.doc", cAlternateFileName="LZDPAU~1.DOC")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3d6b60, ftCreationTime.dwHighDateTime=0x1d5dbfe, ftLastAccessTime.dwLowDateTime=0xad719e40, ftLastAccessTime.dwHighDateTime=0x1d5e6f8, ftLastWriteTime.dwLowDateTime=0xad719e40, ftLastWriteTime.dwHighDateTime=0x1d5e6f8, nFileSizeHigh=0x0, nFileSizeLow=0x1a2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="mJO_zUfqpG.ppt", cAlternateFileName="MJO_ZU~1.PPT")) returned 1
	[0174.694] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0174.695] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0174.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1
	[0174.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0174.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc9210, ftCreationTime.dwHighDateTime=0x1d5953a, ftLastAccessTime.dwLowDateTime=0x639ef420, ftLastAccessTime.dwHighDateTime=0x1d5643a, ftLastWriteTime.dwLowDateTime=0x639ef420, ftLastWriteTime.dwHighDateTime=0x1d5643a, nFileSizeHigh=0x0, nFileSizeLow=0x12575, dwReserved0=0x0, dwReserved1=0x0, cFileName="m_HVk0JMlZKCohb.docx", cAlternateFileName="M_HVK0~1.DOC")) returned 1
	[0174.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacd23fb0, ftCreationTime.dwHighDateTime=0x1d5d7ff, ftLastAccessTime.dwLowDateTime=0x8837a0, ftLastAccessTime.dwHighDateTime=0x1d5db88, ftLastWriteTime.dwLowDateTime=0x8837a0, ftLastWriteTime.dwHighDateTime=0x1d5db88, nFileSizeHigh=0x0, nFileSizeLow=0x13a7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="n5qCmJE8IyM7pwIxOV5H.rtf", cAlternateFileName="N5QCMJ~1.RTF")) returned 1
	[0174.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1
	[0174.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c9b9a0, ftCreationTime.dwHighDateTime=0x1d5d6e8, ftLastAccessTime.dwLowDateTime=0x25e1f930, ftLastAccessTime.dwHighDateTime=0x1d5a2be, ftLastWriteTime.dwLowDateTime=0x25e1f930, ftLastWriteTime.dwHighDateTime=0x1d5a2be, nFileSizeHigh=0x0, nFileSizeLow=0x18c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="Q86AHZhS.docx", cAlternateFileName="Q86AHZ~1.DOC")) returned 1
	[0174.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca14c5b0, ftCreationTime.dwHighDateTime=0x1d5e106, ftLastAccessTime.dwLowDateTime=0x8b399a00, ftLastAccessTime.dwHighDateTime=0x1d5e304, ftLastWriteTime.dwLowDateTime=0x8b399a00, ftLastWriteTime.dwHighDateTime=0x1d5e304, nFileSizeHigh=0x0, nFileSizeLow=0xa655, dwReserved0=0x0, dwReserved1=0x0, cFileName="szmk5T.csv", cAlternateFileName="")) returned 1
	[0174.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25edb50, ftCreationTime.dwHighDateTime=0x1d5e061, ftLastAccessTime.dwLowDateTime=0x2b323ac0, ftLastAccessTime.dwHighDateTime=0x1d5d979, ftLastWriteTime.dwLowDateTime=0x2b323ac0, ftLastWriteTime.dwHighDateTime=0x1d5d979, nFileSizeHigh=0x0, nFileSizeLow=0x8eff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TGOFHW8t2ZIbPsvWYke.ots", cAlternateFileName="TGOFHW~1.OTS")) returned 1
	[0174.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf076be60, ftCreationTime.dwHighDateTime=0x1d5e788, ftLastAccessTime.dwLowDateTime=0x965ba000, ftLastAccessTime.dwHighDateTime=0x1d5e2db, ftLastWriteTime.dwLowDateTime=0x965ba000, ftLastWriteTime.dwHighDateTime=0x1d5e2db, nFileSizeHigh=0x0, nFileSizeLow=0xa48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="W7dsiQ0457.pptx", cAlternateFileName="W7DSIQ~1.PPT")) returned 1
	[0174.700] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ec1530, ftCreationTime.dwHighDateTime=0x1d5d7fd, ftLastAccessTime.dwLowDateTime=0xf558cd30, ftLastAccessTime.dwHighDateTime=0x1d5d818, ftLastWriteTime.dwLowDateTime=0xf558cd30, ftLastWriteTime.dwHighDateTime=0x1d5d818, nFileSizeHigh=0x0, nFileSizeLow=0xf826, dwReserved0=0x0, dwReserved1=0x0, cFileName="WaKhJ6h4jGauFr7uwjsd.pps", cAlternateFileName="WAKHJ6~1.PPS")) returned 1
	[0174.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3564d820, ftCreationTime.dwHighDateTime=0x1d5db47, ftLastAccessTime.dwLowDateTime=0xac4191e0, ftLastAccessTime.dwHighDateTime=0x1d58e94, ftLastWriteTime.dwLowDateTime=0xac4191e0, ftLastWriteTime.dwHighDateTime=0x1d58e94, nFileSizeHigh=0x0, nFileSizeLow=0xeff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="x2Ywzp6f.pptx", cAlternateFileName="X2YWZP~1.PPT")) returned 1
	[0174.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68516b70, ftCreationTime.dwHighDateTime=0x1d59ddc, ftLastAccessTime.dwLowDateTime=0xb53d0670, ftLastAccessTime.dwHighDateTime=0x1d5bed3, ftLastWriteTime.dwLowDateTime=0xb53d0670, ftLastWriteTime.dwHighDateTime=0x1d5bed3, nFileSizeHigh=0x0, nFileSizeLow=0x14cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xi5_KGPIcF9.pptx", cAlternateFileName="XI5_KG~1.PPT")) returned 1
	[0174.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9029fd60, ftCreationTime.dwHighDateTime=0x1d57ac3, ftLastAccessTime.dwLowDateTime=0x16ddf530, ftLastAccessTime.dwHighDateTime=0x1d5bc9d, ftLastWriteTime.dwLowDateTime=0x16ddf530, ftLastWriteTime.dwHighDateTime=0x1d5bc9d, nFileSizeHigh=0x0, nFileSizeLow=0xa759, dwReserved0=0x0, dwReserved1=0x0, cFileName="YtI7_FGncRuMw7mgwRkV.docx", cAlternateFileName="YTI7_F~1.DOC")) returned 1
	[0174.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ed9faf0, ftCreationTime.dwHighDateTime=0x1d5da40, ftLastAccessTime.dwLowDateTime=0x2ffa06c0, ftLastAccessTime.dwHighDateTime=0x1d5e0f2, ftLastWriteTime.dwLowDateTime=0x2ffa06c0, ftLastWriteTime.dwHighDateTime=0x1d5e0f2, nFileSizeHigh=0x0, nFileSizeLow=0xb6e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="yWe19NnqLCh.ppt", cAlternateFileName="YWE19N~1.PPT")) returned 1
	[0174.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe598a90, ftCreationTime.dwHighDateTime=0x1d5a663, ftLastAccessTime.dwLowDateTime=0xa1b17860, ftLastAccessTime.dwHighDateTime=0x1d56c9f, ftLastWriteTime.dwLowDateTime=0xa1b17860, ftLastWriteTime.dwHighDateTime=0x1d56c9f, nFileSizeHigh=0x0, nFileSizeLow=0x7e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZRae5xMKGljR.pptx", cAlternateFileName="ZRAE5X~1.PPT")) returned 1
	[0174.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c218a0, ftCreationTime.dwHighDateTime=0x1d576e7, ftLastAccessTime.dwLowDateTime=0x7fc550e0, ftLastAccessTime.dwHighDateTime=0x1d5d04b, ftLastWriteTime.dwLowDateTime=0x7fc550e0, ftLastWriteTime.dwHighDateTime=0x1d5d04b, nFileSizeHigh=0x0, nFileSizeLow=0xdb38, dwReserved0=0x0, dwReserved1=0x0, cFileName="_5fZW-MXhsqnxQT.pptx", cAlternateFileName="_5FZW-~1.PPT")) returned 1
	[0174.701] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0174.701] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0174.703] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0174.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0174.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.710] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0174.710] WriteFile (in: hFile=0x344, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0174.711] CloseHandle (hObject=0x344) returned 1
	[0174.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\1iQ5eZl-8 jZV2Rg.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\1iq5ezl-8 jzv2rg.doc"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f960400, ftCreationTime.dwHighDateTime=0x1d5e04b, ftLastAccessTime.dwLowDateTime=0xa8f8a0e0, ftLastAccessTime.dwHighDateTime=0x1d5e3e5, ftLastWriteTime.dwLowDateTime=0xa8f8a0e0, ftLastWriteTime.dwHighDateTime=0x1d5e3e5, nFileSizeHigh=0x0, nFileSizeLow=0x16c23)) returned 1
	[0174.714] SetEvent (hEvent=0x2e8) returned 1
	[0174.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2TkKqc395uI.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2tkkqc395ui.ods"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1cce750, ftCreationTime.dwHighDateTime=0x1d5e1b5, ftLastAccessTime.dwLowDateTime=0x646a6b10, ftLastAccessTime.dwHighDateTime=0x1d5e70b, ftLastWriteTime.dwLowDateTime=0x646a6b10, ftLastWriteTime.dwHighDateTime=0x1d5e70b, nFileSizeHigh=0x0, nFileSizeLow=0x5a80)) returned 1
	[0174.718] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0174.732] SetEvent (hEvent=0x80) returned 1
	[0174.733] SetEvent (hEvent=0x2e8) returned 1
	[0174.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2kcD2Y9.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2kcd2y9.odt"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x118abb00, ftCreationTime.dwHighDateTime=0x1d5e659, ftLastAccessTime.dwLowDateTime=0x5539c1b0, ftLastAccessTime.dwHighDateTime=0x1d5dc5f, ftLastWriteTime.dwLowDateTime=0x5539c1b0, ftLastWriteTime.dwHighDateTime=0x1d5dc5f, nFileSizeHigh=0x0, nFileSizeLow=0xa750)) returned 1
	[0174.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2lopYLbbft5.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2lopylbbft5.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1297650, ftCreationTime.dwHighDateTime=0x1d55c90, ftLastAccessTime.dwLowDateTime=0x84fb0b60, ftLastAccessTime.dwHighDateTime=0x1d5630c, ftLastWriteTime.dwLowDateTime=0x84fb0b60, ftLastWriteTime.dwHighDateTime=0x1d5630c, nFileSizeHigh=0x0, nFileSizeLow=0x10bef)) returned 1
	[0174.738] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0174.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3q52z1IG2f.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3q52z1ig2f.doc"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b0fddb0, ftCreationTime.dwHighDateTime=0x1d5e395, ftLastAccessTime.dwLowDateTime=0x65160340, ftLastAccessTime.dwHighDateTime=0x1d5df8a, ftLastWriteTime.dwLowDateTime=0x65160340, ftLastWriteTime.dwHighDateTime=0x1d5df8a, nFileSizeHigh=0x0, nFileSizeLow=0x7d4b)) returned 1
	[0174.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\48zhrX ioKlU.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\48zhrx ioklu.xls"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d4b9600, ftCreationTime.dwHighDateTime=0x1d5dae0, ftLastAccessTime.dwLowDateTime=0x46d24030, ftLastAccessTime.dwHighDateTime=0x1d5d9c0, ftLastWriteTime.dwLowDateTime=0x46d24030, ftLastWriteTime.dwHighDateTime=0x1d5d9c0, nFileSizeHigh=0x0, nFileSizeLow=0x10e95)) returned 1
	[0174.795] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0174.808] SetEvent (hEvent=0x30c) returned 1
	[0174.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4AV0W2vHFFyiKq.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4av0w2vhffyikq.ods"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x832e2670, ftCreationTime.dwHighDateTime=0x1d5ddd5, ftLastAccessTime.dwLowDateTime=0x3ed28eb0, ftLastAccessTime.dwHighDateTime=0x1d5e011, ftLastWriteTime.dwLowDateTime=0x3ed28eb0, ftLastWriteTime.dwHighDateTime=0x1d5e011, nFileSizeHigh=0x0, nFileSizeLow=0x36b1)) returned 1
	[0174.824] SetEvent (hEvent=0xa0) returned 1
	[0174.824] SetEvent (hEvent=0x2f4) returned 1
	[0174.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\4dJk4wXbRHmGV.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\4djk4wxbrhmgv.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x394012c0, ftCreationTime.dwHighDateTime=0x1d5d863, ftLastAccessTime.dwLowDateTime=0xc6585940, ftLastAccessTime.dwHighDateTime=0x1d5dfae, ftLastWriteTime.dwLowDateTime=0xc6585940, ftLastWriteTime.dwHighDateTime=0x1d5dfae, nFileSizeHigh=0x0, nFileSizeLow=0x1867c)) returned 1
	[0174.834] SetEvent (hEvent=0x68) returned 1
	[0174.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\8PUh8WY_5dKhCbfa.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\8puh8wy_5dkhcbfa.ots"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8aee7710, ftCreationTime.dwHighDateTime=0x1d5e11e, ftLastAccessTime.dwLowDateTime=0x9dbb1fe0, ftLastAccessTime.dwHighDateTime=0x1d5d9d7, ftLastWriteTime.dwLowDateTime=0x9dbb1fe0, ftLastWriteTime.dwHighDateTime=0x1d5d9d7, nFileSizeHigh=0x0, nFileSizeLow=0xa55f)) returned 1
	[0174.849] SetEvent (hEvent=0x2e8) returned 1
	[0174.849] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9Ku0amEFC.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9ku0amefc.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18d0a070, ftCreationTime.dwHighDateTime=0x1d5dc39, ftLastAccessTime.dwLowDateTime=0xd6ba8010, ftLastAccessTime.dwHighDateTime=0x1d5e3ff, ftLastWriteTime.dwLowDateTime=0xd6ba8010, ftLastWriteTime.dwHighDateTime=0x1d5e3ff, nFileSizeHigh=0x0, nFileSizeLow=0x15626)) returned 1
	[0174.868] SetEvent (hEvent=0x2f4) returned 1
	[0174.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\A umHqwbP.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\a umhqwbp.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbabc97f0, ftCreationTime.dwHighDateTime=0x1d55c18, ftLastAccessTime.dwLowDateTime=0x3f6767e0, ftLastAccessTime.dwHighDateTime=0x1d5648f, ftLastWriteTime.dwLowDateTime=0x3f6767e0, ftLastWriteTime.dwHighDateTime=0x1d5648f, nFileSizeHigh=0x0, nFileSizeLow=0x25b2)) returned 1
	[0174.885] SetEvent (hEvent=0x68) returned 1
	[0174.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\AHAdZE.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ahadze.docx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba42f770, ftCreationTime.dwHighDateTime=0x1d5bc89, ftLastAccessTime.dwLowDateTime=0xa64a6c60, ftLastAccessTime.dwHighDateTime=0x1d59b4d, ftLastWriteTime.dwLowDateTime=0xa64a6c60, ftLastWriteTime.dwHighDateTime=0x1d59b4d, nFileSizeHigh=0x0, nFileSizeLow=0x195e)) returned 1
	[0174.900] SetEvent (hEvent=0x2e8) returned 1
	[0174.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\DCFtleBnIxF2X_m.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dcftlebnixf2x_m.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa25983c0, ftCreationTime.dwHighDateTime=0x1d58770, ftLastAccessTime.dwLowDateTime=0x875f1830, ftLastAccessTime.dwHighDateTime=0x1d568a0, ftLastWriteTime.dwLowDateTime=0x875f1830, ftLastWriteTime.dwHighDateTime=0x1d568a0, nFileSizeHigh=0x0, nFileSizeLow=0xfdb3)) returned 1
	[0174.915] SetEvent (hEvent=0xa0) returned 1
	[0174.915] SetEvent (hEvent=0x2f4) returned 1
	[0174.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\FXLRch2eyG1i8c.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\fxlrch2eyg1i8c.pps"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9558e7c0, ftCreationTime.dwHighDateTime=0x1d5db61, ftLastAccessTime.dwLowDateTime=0x1dfc9860, ftLastAccessTime.dwHighDateTime=0x1d5e134, ftLastWriteTime.dwLowDateTime=0x1dfc9860, ftLastWriteTime.dwHighDateTime=0x1d5e134, nFileSizeHigh=0x0, nFileSizeLow=0x7f3e)) returned 1
	[0174.933] SetEvent (hEvent=0x68) returned 1
	[0174.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HFb0VzgrvhmDy7R.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hfb0vzgrvhmdy7r.doc"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1dcd650, ftCreationTime.dwHighDateTime=0x1d5dd56, ftLastAccessTime.dwLowDateTime=0x212b7b20, ftLastAccessTime.dwHighDateTime=0x1d5e079, ftLastWriteTime.dwLowDateTime=0x212b7b20, ftLastWriteTime.dwHighDateTime=0x1d5e079, nFileSizeHigh=0x0, nFileSizeLow=0x4304)) returned 1
	[0174.946] SetEvent (hEvent=0x2e8) returned 1
	[0174.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\IG2NoYwlJvOGpIXh6.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ig2noywljvogpixh6.docx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa11c6c30, ftCreationTime.dwHighDateTime=0x1d5aad8, ftLastAccessTime.dwLowDateTime=0x99d94530, ftLastAccessTime.dwHighDateTime=0x1d56cd3, ftLastWriteTime.dwLowDateTime=0x99d94530, ftLastWriteTime.dwHighDateTime=0x1d56cd3, nFileSizeHigh=0x0, nFileSizeLow=0x16ab5)) returned 1
	[0174.965] SetEvent (hEvent=0x2f4) returned 1
	[0174.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Ja3F.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ja3f.doc"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x257509c0, ftCreationTime.dwHighDateTime=0x1d5d878, ftLastAccessTime.dwLowDateTime=0xd878d80, ftLastAccessTime.dwHighDateTime=0x1d5e2d0, ftLastWriteTime.dwLowDateTime=0xd878d80, ftLastWriteTime.dwHighDateTime=0x1d5e2d0, nFileSizeHigh=0x0, nFileSizeLow=0x18d8c)) returned 1
	[0174.984] SetEvent (hEvent=0xa0) returned 1
	[0174.984] SetEvent (hEvent=0x68) returned 1
	[0174.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\KGTu5.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kgtu5.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865ed790, ftCreationTime.dwHighDateTime=0x1d5b873, ftLastAccessTime.dwLowDateTime=0x13bff150, ftLastAccessTime.dwHighDateTime=0x1d570b7, ftLastWriteTime.dwLowDateTime=0x13bff150, ftLastWriteTime.dwHighDateTime=0x1d570b7, nFileSizeHigh=0x0, nFileSizeLow=0x12576)) returned 1
	[0175.000] SetEvent (hEvent=0x2e8) returned 1
	[0175.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0175.016] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x1e4
	[0175.016] GetFileInformationByHandle (in: hFile=0x1e4, lpFileInformation=0x1276bae8 | out: lpFileInformation=0x1276bae8) returned 1
	[0175.016] GetFileInformationByHandleEx (in: hFile=0x1e4, FileInformationClass=0x9, lpFileInformation=0x1276bae0, dwBufferSize=0x8 | out: lpFileInformation=0x1276bae0) returned 1
	[0175.016] CloseHandle (hObject=0x1e4) returned 1
	[0175.016] SetEvent (hEvent=0x70) returned 1
	[0175.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0175.027] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x34c
	[0175.027] GetFileInformationByHandle (in: hFile=0x34c, lpFileInformation=0x1276bae8 | out: lpFileInformation=0x1276bae8) returned 1
	[0175.027] GetFileInformationByHandleEx (in: hFile=0x34c, FileInformationClass=0x9, lpFileInformation=0x1276bae0, dwBufferSize=0x8 | out: lpFileInformation=0x1276bae0) returned 1
	[0175.027] CloseHandle (hObject=0x34c) returned 1
	[0175.027] SetEvent (hEvent=0x68) returned 1
	[0175.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0175.031] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0175.031] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0175.031] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0175.032] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0175.032] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1
	[0175.032] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1
	[0175.032] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0175.032] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0175.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0175.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0175.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0175.039] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0175.039] WriteFile (in: hFile=0x344, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0175.042] CloseHandle (hObject=0x344) returned 1
	[0175.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0175.045] SetEvent (hEvent=0x2e8) returned 1
	[0175.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0175.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0175.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0175.052] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0175.052] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0175.052] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0175.052] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0175.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0175.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0175.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0175.057] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0175.057] WriteFile (in: hFile=0x344, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0175.062] CloseHandle (hObject=0x344) returned 1
	[0175.063] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1
	[0175.095] SetEvent (hEvent=0x30c) returned 1
	[0175.096] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0175.212] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0175.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x34c
	[0175.220] GetFileInformationByHandle (in: hFile=0x34c, lpFileInformation=0x1276bae8 | out: lpFileInformation=0x1276bae8) returned 1
	[0175.221] GetFileInformationByHandleEx (in: hFile=0x34c, FileInformationClass=0x9, lpFileInformation=0x1276bae0, dwBufferSize=0x8 | out: lpFileInformation=0x1276bae0) returned 1
	[0175.221] CloseHandle (hObject=0x34c) returned 1
	[0175.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0175.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0175.391] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0175.392] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x8a4af3c0, ftLastAccessTime.dwHighDateTime=0x1d5e82a, ftLastWriteTime.dwLowDateTime=0x8a4af3c0, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0175.392] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1
	[0175.392] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0175.392] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0175.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0175.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0175.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0175.396] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0175.396] WriteFile (in: hFile=0x344, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0175.397] CloseHandle (hObject=0x344) returned 1
	[0175.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1
	[0175.648] SetEvent (hEvent=0x68) returned 1
	[0175.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Q86AHZhS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\q86ahzhs.docx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22c9b9a0, ftCreationTime.dwHighDateTime=0x1d5d6e8, ftLastAccessTime.dwLowDateTime=0x25e1f930, ftLastAccessTime.dwHighDateTime=0x1d5a2be, ftLastWriteTime.dwLowDateTime=0x25e1f930, ftLastWriteTime.dwHighDateTime=0x1d5a2be, nFileSizeHigh=0x0, nFileSizeLow=0x18c96)) returned 1
	[0175.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TGOFHW8t2ZIbPsvWYke.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tgofhw8t2zibpsvwyke.ots"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf25edb50, ftCreationTime.dwHighDateTime=0x1d5e061, ftLastAccessTime.dwLowDateTime=0x2b323ac0, ftLastAccessTime.dwHighDateTime=0x1d5d979, ftLastWriteTime.dwLowDateTime=0x2b323ac0, ftLastWriteTime.dwHighDateTime=0x1d5d979, nFileSizeHigh=0x0, nFileSizeLow=0x8eff)) returned 1
	[0175.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\W7dsiQ0457.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\w7dsiq0457.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf076be60, ftCreationTime.dwHighDateTime=0x1d5e788, ftLastAccessTime.dwLowDateTime=0x965ba000, ftLastAccessTime.dwHighDateTime=0x1d5e2db, ftLastWriteTime.dwLowDateTime=0x965ba000, ftLastWriteTime.dwHighDateTime=0x1d5e2db, nFileSizeHigh=0x0, nFileSizeLow=0xa48c)) returned 1
	[0175.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WaKhJ6h4jGauFr7uwjsd.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wakhj6h4jgaufr7uwjsd.pps"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1ec1530, ftCreationTime.dwHighDateTime=0x1d5d7fd, ftLastAccessTime.dwLowDateTime=0xf558cd30, ftLastAccessTime.dwHighDateTime=0x1d5d818, ftLastWriteTime.dwLowDateTime=0xf558cd30, ftLastWriteTime.dwHighDateTime=0x1d5d818, nFileSizeHigh=0x0, nFileSizeLow=0xf826)) returned 1
	[0175.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\W7dsiQ0457.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\w7dsiq0457.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0175.654] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0175.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\W7dsiQ0457.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\w7dsiq0457.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf076be60, ftCreationTime.dwHighDateTime=0x1d5e788, ftLastAccessTime.dwLowDateTime=0x965ba000, ftLastAccessTime.dwHighDateTime=0x1d5e2db, ftLastWriteTime.dwLowDateTime=0x965ba000, ftLastWriteTime.dwHighDateTime=0x1d5e2db, nFileSizeHigh=0x0, nFileSizeLow=0xa48c)) returned 1
	[0175.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c060 | out: pbBuffer=0x1244c060) returned 1
	[0175.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410400 | out: pbBuffer=0x12410400) returned 1
	[0175.654] ReadFile (in: hFile=0x344, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12767d1c*=0xa48c, lpOverlapped=0x0) returned 1
	[0175.910] GetFileType (hFile=0x344) returned 0x1
	[0175.910] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.910] WriteFile (in: hFile=0x344, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0xa48c, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x12767d00*=0xa48c, lpOverlapped=0x12767d0c) returned 1
	[0175.911] GetFileType (hFile=0x344) returned 0x1
	[0175.911] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xa48c, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0175.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0175.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0175.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0175.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\W7dsiQ0457.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\w7dsiq0457.pptx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0175.912] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0175.912] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0175.912] CloseHandle (hObject=0x1e4) returned 1
	[0175.912] CloseHandle (hObject=0x344) returned 1
	[0175.912] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\W7dsiQ0457.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\w7dsiq0457.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\W7dsiQ0457.pptx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\w7dsiq0457.pptx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0175.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0175.916] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0175.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x8a4fb680, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1
	[0175.916] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0175.916] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0175.916] ReadFile (in: hFile=0x344, lpBuffer=0x127fe000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127fe000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0176.078] GetFileType (hFile=0x344) returned 0x1
	[0176.078] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.078] WriteFile (in: hFile=0x344, lpBuffer=0x128be000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x128be000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0176.079] GetFileType (hFile=0x344) returned 0x1
	[0176.079] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0176.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0176.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0176.080] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744478 | out: pbBuffer=0x12744478) returned 1
	[0176.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0176.080] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0176.080] WriteFile (in: hFile=0x33c, lpBuffer=0x1260c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1260c500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.287] CloseHandle (hObject=0x33c) returned 1
	[0176.288] CloseHandle (hObject=0x344) returned 1
	[0176.288] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.662] SetEvent (hEvent=0xa0) returned 1
	[0176.662] SetEvent (hEvent=0x80) returned 1
	[0176.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\bRrkEpHO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\brrkepho.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0176.663] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0176.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\bRrkEpHO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\brrkepho.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x126db2d0, ftCreationTime.dwHighDateTime=0x1d57baf, ftLastAccessTime.dwLowDateTime=0x515e7f00, ftLastAccessTime.dwHighDateTime=0x1d57282, ftLastWriteTime.dwLowDateTime=0x515e7f00, ftLastWriteTime.dwHighDateTime=0x1d57282, nFileSizeHigh=0x0, nFileSizeLow=0xcd4d)) returned 1
	[0176.663] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732460 | out: pbBuffer=0x12732460) returned 1
	[0176.664] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0176.664] ReadFile (in: hFile=0x344, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1242bd1c*=0xcd4d, lpOverlapped=0x0) returned 1
	[0176.807] GetFileType (hFile=0x344) returned 0x1
	[0176.807] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.807] WriteFile (in: hFile=0x344, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0xcd4d, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x1242bd00*=0xcd4d, lpOverlapped=0x1242bd0c) returned 1
	[0176.807] GetFileType (hFile=0x344) returned 0x1
	[0176.807] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xcd4d, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0176.808] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0176.808] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0176.808] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5f0 | out: pbBuffer=0x1251e5f0) returned 1
	[0176.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\bRrkEpHO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\brrkepho.xlsx"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0176.808] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0176.808] WriteFile (in: hFile=0x34c, lpBuffer=0x12612500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12612500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.808] CloseHandle (hObject=0x34c) returned 1
	[0176.829] CloseHandle (hObject=0x344) returned 1
	[0176.829] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\bRrkEpHO.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\brrkepho.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\bRrkEpHO.xlsx.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\brrkepho.xlsx.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.872] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0176.875] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0176.888] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0176.903] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0176.924] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0176.942] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0177.046] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0177.100] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0177.118] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0177.146] SetEvent (hEvent=0x2f4) returned 1
	[0177.146] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0177.152] SetEvent (hEvent=0x70) returned 1
	[0177.153] SetEvent (hEvent=0x2e8) returned 1
	[0177.153] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0177.157] SetEvent (hEvent=0x30c) returned 1
	[0177.157] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0177.159] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0177.159] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0177.160] SetEvent (hEvent=0x70) returned 1
	[0177.160] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0177.161] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0177.224] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0177.396] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0178.087] SetEvent (hEvent=0x2f4) returned 1
	[0178.087] SetEvent (hEvent=0x68) returned 1
	[0178.087] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0178.088] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0178.286] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0178.306] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0179.807] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0179.905] SetEvent (hEvent=0x2f4) returned 1
	[0179.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0179.906] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0180.791] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0182.551] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0182.749] SetEvent (hEvent=0x70) returned 1
	[0182.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\G2y8y37kBRwgiq-X-z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\g2y8y37kbrwgiq-x-z.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0182.751] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0182.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\G2y8y37kBRwgiq-X-z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\g2y8y37kbrwgiq-x-z.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec9a2f40, ftCreationTime.dwHighDateTime=0x1d5e6be, ftLastAccessTime.dwLowDateTime=0x108468d0, ftLastAccessTime.dwHighDateTime=0x1d5e38b, ftLastWriteTime.dwLowDateTime=0x108468d0, ftLastWriteTime.dwHighDateTime=0x1d5e38b, nFileSizeHigh=0x0, nFileSizeLow=0xd472)) returned 1
	[0182.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0182.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0182.751] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x1242bd1c*=0xd472, lpOverlapped=0x0) returned 1
	[0182.755] GetFileType (hFile=0x33c) returned 0x1
	[0182.755] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0182.755] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0xd472, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1242bd00*=0xd472, lpOverlapped=0x1242bd0c) returned 1
	[0182.756] GetFileType (hFile=0x33c) returned 0x1
	[0182.756] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd472, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0182.756] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0182.756] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0182.756] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e81 | out: pbBuffer=0x127e8e81) returned 1
	[0182.757] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0182.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\G2y8y37kBRwgiq-X-z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\g2y8y37kbrwgiq-x-z.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0182.757] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0182.757] WriteFile (in: hFile=0x1e4, lpBuffer=0x12770f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12770f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0182.757] CloseHandle (hObject=0x1e4) returned 1
	[0182.757] CloseHandle (hObject=0x33c) returned 1
	[0182.757] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\G2y8y37kBRwgiq-X-z.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\g2y8y37kbrwgiq-x-z.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\G2y8y37kBRwgiq-X-z.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\g2y8y37kbrwgiq-x-z.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.004] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0183.012] SetEvent (hEvent=0x2f4) returned 1
	[0183.012] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\UdmV2Oja.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\udmv2oja.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.013] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0183.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\UdmV2Oja.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\udmv2oja.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf82d80, ftCreationTime.dwHighDateTime=0x1d5e821, ftLastAccessTime.dwLowDateTime=0x1fe75af0, ftLastAccessTime.dwHighDateTime=0x1d5e622, ftLastWriteTime.dwLowDateTime=0x1fe75af0, ftLastWriteTime.dwHighDateTime=0x1d5e622, nFileSizeHigh=0x0, nFileSizeLow=0xb7c6)) returned 1
	[0183.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f480 | out: pbBuffer=0x1240f480) returned 1
	[0183.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788378 | out: pbBuffer=0x12788378) returned 1
	[0183.014] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12769d1c*=0xb7c6, lpOverlapped=0x0) returned 1
	[0183.017] GetFileType (hFile=0x33c) returned 0x1
	[0183.017] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.017] WriteFile (in: hFile=0x33c, lpBuffer=0x125f0000*, nNumberOfBytesToWrite=0xb7c6, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x125f0000*, lpNumberOfBytesWritten=0x12769d00*=0xb7c6, lpOverlapped=0x12769d0c) returned 1
	[0183.018] GetFileType (hFile=0x33c) returned 0x1
	[0183.018] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb7c6, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.018] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8f81 | out: pbBuffer=0x127e8f81) returned 1
	[0183.018] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9081 | out: pbBuffer=0x127e9081) returned 1
	[0183.018] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9181 | out: pbBuffer=0x127e9181) returned 1
	[0183.019] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788430 | out: pbBuffer=0x12788430) returned 1
	[0183.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\UdmV2Oja.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\udmv2oja.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.019] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0183.019] WriteFile (in: hFile=0x34c, lpBuffer=0x12771400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12771400*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.019] CloseHandle (hObject=0x34c) returned 1
	[0183.026] CloseHandle (hObject=0x33c) returned 1
	[0183.030] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\UdmV2Oja.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\udmv2oja.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\-z-zOTVuKU_-cgZEI\\UdmV2Oja.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\-z-zotvuku_-cgzei\\udmv2oja.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.106] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0183.116] SetEvent (hEvent=0x2f4) returned 1
	[0183.116] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0183.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\T0Uv3wpO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\t0uv3wpo.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.193] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0183.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\T0Uv3wpO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\t0uv3wpo.wav"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19cc2510, ftCreationTime.dwHighDateTime=0x1d5ddc6, ftLastAccessTime.dwLowDateTime=0x10e94780, ftLastAccessTime.dwHighDateTime=0x1d5dc6c, ftLastWriteTime.dwLowDateTime=0x10e94780, ftLastWriteTime.dwHighDateTime=0x1d5dc6c, nFileSizeHigh=0x0, nFileSizeLow=0x14f28)) returned 1
	[0183.193] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0183.193] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744018 | out: pbBuffer=0x12744018) returned 1
	[0183.193] ReadFile (in: hFile=0x344, lpBuffer=0x128e4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e4000*, lpNumberOfBytesRead=0x124f5d1c*=0x14f28, lpOverlapped=0x0) returned 1
	[0183.225] GetFileType (hFile=0x344) returned 0x1
	[0183.225] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.225] WriteFile (in: hFile=0x344, lpBuffer=0x126cc000*, nNumberOfBytesToWrite=0x14f28, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x126cc000*, lpNumberOfBytesWritten=0x124f5d00*=0x14f28, lpOverlapped=0x124f5d0c) returned 1
	[0183.225] GetFileType (hFile=0x344) returned 0x1
	[0183.225] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x14f28, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.225] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0183.225] SetEvent (hEvent=0x30c) returned 1
	[0183.225] SetEvent (hEvent=0x2e8) returned 1
	[0183.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0183.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0183.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0183.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440e0 | out: pbBuffer=0x127440e0) returned 1
	[0183.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\T0Uv3wpO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\t0uv3wpo.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0183.227] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0183.227] WriteFile (in: hFile=0x1e4, lpBuffer=0x125ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ee000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.227] CloseHandle (hObject=0x1e4) returned 1
	[0183.227] CloseHandle (hObject=0x344) returned 1
	[0183.227] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\T0Uv3wpO.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\t0uv3wpo.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\RVf -n4SMBW5IlxH\\T0Uv3wpO.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\rvf -n4smbw5ilxh\\t0uv3wpo.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.230] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0183.239] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0183.239] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0183.239] SetEvent (hEvent=0x2e8) returned 1
	[0183.239] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0183.252] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0183.253] GetFileType (hFile=0x2dc) returned 0x1
	[0183.253] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.253] WriteFile (in: hFile=0x2dc, lpBuffer=0x128c0000*, nNumberOfBytesToWrite=0x103dc, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x128c0000*, lpNumberOfBytesWritten=0x12767d00*=0x103dc, lpOverlapped=0x12767d0c) returned 1
	[0183.254] GetFileType (hFile=0x2dc) returned 0x1
	[0183.254] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x103dc, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0183.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0183.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0183.254] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0183.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\zw17nOJ0IwCKgijhA.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\zw17noj0iwckgijha.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.254] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0183.255] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.255] CloseHandle (hObject=0x344) returned 1
	[0183.255] CloseHandle (hObject=0x2dc) returned 1
	[0183.255] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\zw17nOJ0IwCKgijhA.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\zw17noj0iwckgijha.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\6ozI7J1h\\zw17nOJ0IwCKgijhA.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\6ozi7j1h\\zw17noj0iwckgijha.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9e3d3230, ftCreationTime.dwHighDateTime=0x1d5e6fe, ftLastAccessTime.dwLowDateTime=0x9ae19790, ftLastAccessTime.dwHighDateTime=0x1d5e27e, ftLastWriteTime.dwLowDateTime=0x9ae19790, ftLastWriteTime.dwHighDateTime=0x1d5e27e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0183.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe35204c0, ftCreationTime.dwHighDateTime=0x1d5e0c5, ftLastAccessTime.dwLowDateTime=0x74479730, ftLastAccessTime.dwHighDateTime=0x1d5e308, ftLastWriteTime.dwLowDateTime=0x74479730, ftLastWriteTime.dwHighDateTime=0x1d5e308, nFileSizeHigh=0x0, nFileSizeLow=0x19b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JKys78Oq4yvPVJwsh.m4a", cAlternateFileName="JKYS78~1.M4A")) returned 1
	[0183.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c4040, ftCreationTime.dwHighDateTime=0x1d5de47, ftLastAccessTime.dwLowDateTime=0x5f999720, ftLastAccessTime.dwHighDateTime=0x1d5e07e, ftLastWriteTime.dwLowDateTime=0x5f999720, ftLastWriteTime.dwHighDateTime=0x1d5e07e, nFileSizeHigh=0x0, nFileSizeLow=0x2570, dwReserved0=0x0, dwReserved1=0x0, cFileName="NNAdwgveVEO78I2MW.m4a", cAlternateFileName="NNADWG~1.M4A")) returned 1
	[0183.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x331f2a90, ftCreationTime.dwHighDateTime=0x1d5d7e9, ftLastAccessTime.dwLowDateTime=0xc60fdbb0, ftLastAccessTime.dwHighDateTime=0x1d5dbd6, ftLastWriteTime.dwLowDateTime=0xc60fdbb0, ftLastWriteTime.dwHighDateTime=0x1d5dbd6, nFileSizeHigh=0x0, nFileSizeLow=0xb0fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="sTgqujIHysw6RJ8.mp3", cAlternateFileName="STGQUJ~1.MP3")) returned 1
	[0183.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7407da0, ftCreationTime.dwHighDateTime=0x1d5ddff, ftLastAccessTime.dwLowDateTime=0x78d2b6b0, ftLastAccessTime.dwHighDateTime=0x1d5d91a, ftLastWriteTime.dwLowDateTime=0x78d2b6b0, ftLastWriteTime.dwHighDateTime=0x1d5d91a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x26r_tASVpWnlp1Keg", cAlternateFileName="X26R_T~1")) returned 1
	[0183.259] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0183.259] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0183.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0183.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0183.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.263] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0183.263] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0183.264] CloseHandle (hObject=0x34c) returned 1
	[0183.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\JKys78Oq4yvPVJwsh.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\jkys78oq4yvpvjwsh.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe35204c0, ftCreationTime.dwHighDateTime=0x1d5e0c5, ftLastAccessTime.dwLowDateTime=0x74479730, ftLastAccessTime.dwHighDateTime=0x1d5e308, ftLastWriteTime.dwLowDateTime=0x74479730, ftLastWriteTime.dwHighDateTime=0x1d5e308, nFileSizeHigh=0x0, nFileSizeLow=0x19b0)) returned 1
	[0183.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\NNAdwgveVEO78I2MW.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\nnadwgveveo78i2mw.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c4040, ftCreationTime.dwHighDateTime=0x1d5de47, ftLastAccessTime.dwLowDateTime=0x5f999720, ftLastAccessTime.dwHighDateTime=0x1d5e07e, ftLastWriteTime.dwLowDateTime=0x5f999720, ftLastWriteTime.dwHighDateTime=0x1d5e07e, nFileSizeHigh=0x0, nFileSizeLow=0x2570)) returned 1
	[0183.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\sTgqujIHysw6RJ8.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\stgqujihysw6rj8.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x331f2a90, ftCreationTime.dwHighDateTime=0x1d5d7e9, ftLastAccessTime.dwLowDateTime=0xc60fdbb0, ftLastAccessTime.dwHighDateTime=0x1d5dbd6, ftLastWriteTime.dwLowDateTime=0xc60fdbb0, ftLastWriteTime.dwHighDateTime=0x1d5dbd6, nFileSizeHigh=0x0, nFileSizeLow=0xb0fd)) returned 1
	[0183.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7407da0, ftCreationTime.dwHighDateTime=0x1d5ddff, ftLastAccessTime.dwLowDateTime=0x78d2b6b0, ftLastAccessTime.dwHighDateTime=0x1d5d91a, ftLastWriteTime.dwLowDateTime=0x78d2b6b0, ftLastWriteTime.dwHighDateTime=0x1d5d91a, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0183.267] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0183.267] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7407da0, ftCreationTime.dwHighDateTime=0x1d5ddff, ftLastAccessTime.dwLowDateTime=0x78d2b6b0, ftLastAccessTime.dwHighDateTime=0x1d5d91a, ftLastWriteTime.dwLowDateTime=0x78d2b6b0, ftLastWriteTime.dwHighDateTime=0x1d5d91a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0183.283] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7407da0, ftCreationTime.dwHighDateTime=0x1d5ddff, ftLastAccessTime.dwLowDateTime=0x78d2b6b0, ftLastAccessTime.dwHighDateTime=0x1d5d91a, ftLastWriteTime.dwLowDateTime=0x78d2b6b0, ftLastWriteTime.dwHighDateTime=0x1d5d91a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0183.283] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10b71b0, ftCreationTime.dwHighDateTime=0x1d5dbd2, ftLastAccessTime.dwLowDateTime=0x2015aac0, ftLastAccessTime.dwHighDateTime=0x1d5e1ec, ftLastWriteTime.dwLowDateTime=0x2015aac0, ftLastWriteTime.dwHighDateTime=0x1d5e1ec, nFileSizeHigh=0x0, nFileSizeLow=0xc216, dwReserved0=0x0, dwReserved1=0x0, cFileName="3W059.mp3", cAlternateFileName="")) returned 1
	[0183.283] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaf17c0, ftCreationTime.dwHighDateTime=0x1d5e020, ftLastAccessTime.dwLowDateTime=0x83e1b710, ftLastAccessTime.dwHighDateTime=0x1d5dfda, ftLastWriteTime.dwLowDateTime=0x83e1b710, ftLastWriteTime.dwHighDateTime=0x1d5dfda, nFileSizeHigh=0x0, nFileSizeLow=0x643a, dwReserved0=0x0, dwReserved1=0x0, cFileName="56ZwSkb5Pl.wav", cAlternateFileName="56ZWSK~1.WAV")) returned 1
	[0183.283] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3afe2ea0, ftCreationTime.dwHighDateTime=0x1d5e626, ftLastAccessTime.dwLowDateTime=0x7140cf00, ftLastAccessTime.dwHighDateTime=0x1d5dda6, ftLastWriteTime.dwLowDateTime=0x7140cf00, ftLastWriteTime.dwHighDateTime=0x1d5dda6, nFileSizeHigh=0x0, nFileSizeLow=0x3754, dwReserved0=0x0, dwReserved1=0x0, cFileName="kGT4gm0xlJ Hu4Fzmv1.mp3", cAlternateFileName="KGT4GM~1.MP3")) returned 1
	[0183.283] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef7253b0, ftCreationTime.dwHighDateTime=0x1d5e488, ftLastAccessTime.dwLowDateTime=0xbbd29080, ftLastAccessTime.dwHighDateTime=0x1d5e43b, ftLastWriteTime.dwLowDateTime=0xbbd29080, ftLastWriteTime.dwHighDateTime=0x1d5e43b, nFileSizeHigh=0x0, nFileSizeLow=0x4363, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoLSMdK9cj.m4a", cAlternateFileName="SOLSMD~1.M4A")) returned 1
	[0183.283] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0183.283] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0183.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0183.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0183.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.300] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0183.300] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0183.301] CloseHandle (hObject=0x33c) returned 1
	[0183.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\3W059.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\3w059.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb10b71b0, ftCreationTime.dwHighDateTime=0x1d5dbd2, ftLastAccessTime.dwLowDateTime=0x2015aac0, ftLastAccessTime.dwHighDateTime=0x1d5e1ec, ftLastWriteTime.dwLowDateTime=0x2015aac0, ftLastWriteTime.dwHighDateTime=0x1d5e1ec, nFileSizeHigh=0x0, nFileSizeLow=0xc216)) returned 1
	[0183.302] SetEvent (hEvent=0x2e8) returned 1
	[0183.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\56ZwSkb5Pl.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\56zwskb5pl.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaf17c0, ftCreationTime.dwHighDateTime=0x1d5e020, ftLastAccessTime.dwLowDateTime=0x83e1b710, ftLastAccessTime.dwHighDateTime=0x1d5dfda, ftLastWriteTime.dwLowDateTime=0x83e1b710, ftLastWriteTime.dwHighDateTime=0x1d5dfda, nFileSizeHigh=0x0, nFileSizeLow=0x643a)) returned 1
	[0183.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\SoLSMdK9cj.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\solsmdk9cj.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef7253b0, ftCreationTime.dwHighDateTime=0x1d5e488, ftLastAccessTime.dwLowDateTime=0xbbd29080, ftLastAccessTime.dwHighDateTime=0x1d5e43b, ftLastWriteTime.dwLowDateTime=0xbbd29080, ftLastWriteTime.dwHighDateTime=0x1d5e43b, nFileSizeHigh=0x0, nFileSizeLow=0x4363)) returned 1
	[0183.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\kGT4gm0xlJ Hu4Fzmv1.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\kgt4gm0xlj hu4fzmv1.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3afe2ea0, ftCreationTime.dwHighDateTime=0x1d5e626, ftLastAccessTime.dwLowDateTime=0x7140cf00, ftLastAccessTime.dwHighDateTime=0x1d5dda6, ftLastWriteTime.dwLowDateTime=0x7140cf00, ftLastWriteTime.dwHighDateTime=0x1d5dda6, nFileSizeHigh=0x0, nFileSizeLow=0x3754)) returned 1
	[0183.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\SoLSMdK9cj.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\solsmdk9cj.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.306] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0183.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\SoLSMdK9cj.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\solsmdk9cj.m4a"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef7253b0, ftCreationTime.dwHighDateTime=0x1d5e488, ftLastAccessTime.dwLowDateTime=0xbbd29080, ftLastAccessTime.dwHighDateTime=0x1d5e43b, ftLastWriteTime.dwLowDateTime=0xbbd29080, ftLastWriteTime.dwHighDateTime=0x1d5e43b, nFileSizeHigh=0x0, nFileSizeLow=0x4363)) returned 1
	[0183.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e800 | out: pbBuffer=0x1240e800) returned 1
	[0183.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788158 | out: pbBuffer=0x12788158) returned 1
	[0183.306] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12769d1c*=0x4363, lpOverlapped=0x0) returned 1
	[0183.335] GetFileType (hFile=0x33c) returned 0x1
	[0183.335] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.335] WriteFile (in: hFile=0x33c, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x4363, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x12769d00*=0x4363, lpOverlapped=0x12769d0c) returned 1
	[0183.336] GetFileType (hFile=0x33c) returned 0x1
	[0183.336] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4363, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0183.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0183.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0183.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788220 | out: pbBuffer=0x12788220) returned 1
	[0183.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\SoLSMdK9cj.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\solsmdk9cj.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.337] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0183.337] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.337] CloseHandle (hObject=0x344) returned 1
	[0183.337] CloseHandle (hObject=0x33c) returned 1
	[0183.337] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\SoLSMdK9cj.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\solsmdk9cj.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\SoLSMdK9cj.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\solsmdk9cj.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\56ZwSkb5Pl.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\56zwskb5pl.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.340] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0183.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\56ZwSkb5Pl.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\56zwskb5pl.wav"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaaf17c0, ftCreationTime.dwHighDateTime=0x1d5e020, ftLastAccessTime.dwLowDateTime=0x83e1b710, ftLastAccessTime.dwHighDateTime=0x1d5dfda, ftLastWriteTime.dwLowDateTime=0x83e1b710, ftLastWriteTime.dwHighDateTime=0x1d5dfda, nFileSizeHigh=0x0, nFileSizeLow=0x643a)) returned 1
	[0183.341] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ed60 | out: pbBuffer=0x1240ed60) returned 1
	[0183.341] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788238 | out: pbBuffer=0x12788238) returned 1
	[0183.341] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0183.348] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0183.348] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0183.348] SetEvent (hEvent=0xa0) returned 1
	[0183.348] SetEvent (hEvent=0x30c) returned 1
	[0183.348] SetEvent (hEvent=0x68) returned 1
	[0183.348] ReadFile (in: hFile=0x33c, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x1242bd1c*=0x643a, lpOverlapped=0x0) returned 1
	[0183.352] SetEvent (hEvent=0x68) returned 1
	[0183.352] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0183.356] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0183.356] SetEvent (hEvent=0x2e8) returned 1
	[0183.356] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0183.369] GetFileType (hFile=0x33c) returned 0x1
	[0183.369] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x128ddce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.369] WriteFile (in: hFile=0x33c, lpBuffer=0x127a6000*, nNumberOfBytesToWrite=0x643a, lpNumberOfBytesWritten=0x128ddd00, lpOverlapped=0x128ddd0c | out: lpBuffer=0x127a6000*, lpNumberOfBytesWritten=0x128ddd00*=0x643a, lpOverlapped=0x128ddd0c) returned 1
	[0183.370] GetFileType (hFile=0x33c) returned 0x1
	[0183.370] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x643a, lpNewFilePointer=0x0, dwMoveMethod=0x128ddce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.370] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0183.370] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0183.370] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0183.370] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0183.370] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\56ZwSkb5Pl.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\56zwskb5pl.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.370] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x128ddd0c | out: lpMode=0x128ddd0c) returned 0
	[0183.370] WriteFile (in: hFile=0x2dc, lpBuffer=0x12742000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x128ddd0c, lpOverlapped=0x0 | out: lpBuffer=0x12742000*, lpNumberOfBytesWritten=0x128ddd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.370] CloseHandle (hObject=0x2dc) returned 1
	[0183.370] CloseHandle (hObject=0x33c) returned 1
	[0183.371] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\56ZwSkb5Pl.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\56zwskb5pl.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\x26r_tASVpWnlp1Keg\\56ZwSkb5Pl.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\x26r_tasvpwnlp1keg\\56zwskb5pl.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.373] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0183.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\nclcKB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\nclckb.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.543] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x128ddd0c | out: lpMode=0x128ddd0c) returned 0
	[0183.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\nclcKB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\nclckb.m4a"), fInfoLevelId=0x0, lpFileInformation=0x128ddad0 | out: lpFileInformation=0x128ddad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c40070, ftCreationTime.dwHighDateTime=0x1d5e170, ftLastAccessTime.dwLowDateTime=0xd3a71a00, ftLastAccessTime.dwHighDateTime=0x1d5dcb6, ftLastWriteTime.dwLowDateTime=0xd3a71a00, ftLastWriteTime.dwHighDateTime=0x1d5dcb6, nFileSizeHigh=0x0, nFileSizeLow=0xe570)) returned 1
	[0183.544] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0183.546] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0183.546] ReadFile (in: hFile=0x344, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x128ddd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x128ddd1c*=0xe570, lpOverlapped=0x0) returned 1
	[0183.596] GetFileType (hFile=0x344) returned 0x1
	[0183.596] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x128ddce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.596] WriteFile (in: hFile=0x344, lpBuffer=0x12818000*, nNumberOfBytesToWrite=0xe570, lpNumberOfBytesWritten=0x128ddd00, lpOverlapped=0x128ddd0c | out: lpBuffer=0x12818000*, lpNumberOfBytesWritten=0x128ddd00*=0xe570, lpOverlapped=0x128ddd0c) returned 1
	[0183.597] GetFileType (hFile=0x344) returned 0x1
	[0183.597] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xe570, lpNewFilePointer=0x0, dwMoveMethod=0x128ddce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.597] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0183.598] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0183.598] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0183.598] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0183.598] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\nclcKB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\nclckb.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0183.598] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x128ddd0c | out: lpMode=0x128ddd0c) returned 0
	[0183.598] WriteFile (in: hFile=0x1e4, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x128ddd0c, lpOverlapped=0x0 | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x128ddd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.605] CloseHandle (hObject=0x1e4) returned 1
	[0183.605] CloseHandle (hObject=0x344) returned 1
	[0183.605] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\nclcKB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\nclckb.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\nclcKB.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\nclckb.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.609] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6EB2NMUfOJHLz_o.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6eb2nmufojhlz_o.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x859b5f0, ftCreationTime.dwHighDateTime=0x1d5d7e4, ftLastAccessTime.dwLowDateTime=0x71f34ff0, ftLastAccessTime.dwHighDateTime=0x1d5e516, ftLastWriteTime.dwLowDateTime=0x71f34ff0, ftLastWriteTime.dwHighDateTime=0x1d5e516, nFileSizeHigh=0x0, nFileSizeLow=0x14e07)) returned 1
	[0183.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\HYv95_2F.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\hyv95_2f.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa31517f0, ftCreationTime.dwHighDateTime=0x1d5e66d, ftLastAccessTime.dwLowDateTime=0xca00f650, ftLastAccessTime.dwHighDateTime=0x1d5e3c9, ftLastWriteTime.dwLowDateTime=0xca00f650, ftLastWriteTime.dwHighDateTime=0x1d5e3c9, nFileSizeHigh=0x0, nFileSizeLow=0xe2b2)) returned 1
	[0183.649] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0183.683] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0183.698] SetEvent (hEvent=0x30c) returned 1
	[0183.698] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W  wunh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w  wunh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.700] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x128ddd0c | out: lpMode=0x128ddd0c) returned 0
	[0183.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W  wunh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w  wunh.wav"), fInfoLevelId=0x0, lpFileInformation=0x128ddad0 | out: lpFileInformation=0x128ddad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x488de410, ftCreationTime.dwHighDateTime=0x1d5e7d0, ftLastAccessTime.dwLowDateTime=0x5c061e20, ftLastAccessTime.dwHighDateTime=0x1d5db02, ftLastWriteTime.dwLowDateTime=0x5c061e20, ftLastWriteTime.dwHighDateTime=0x1d5db02, nFileSizeHigh=0x0, nFileSizeLow=0x4ffe)) returned 1
	[0183.700] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0183.700] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0183.700] ReadFile (in: hFile=0x2dc, lpBuffer=0x125b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x128ddd1c, lpOverlapped=0x0 | out: lpBuffer=0x125b8000*, lpNumberOfBytesRead=0x128ddd1c*=0x4ffe, lpOverlapped=0x0) returned 1
	[0183.743] GetFileType (hFile=0x2dc) returned 0x1
	[0183.743] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x128ddce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.743] WriteFile (in: hFile=0x2dc, lpBuffer=0x12878000*, nNumberOfBytesToWrite=0x4ffe, lpNumberOfBytesWritten=0x128ddd00, lpOverlapped=0x128ddd0c | out: lpBuffer=0x12878000*, lpNumberOfBytesWritten=0x128ddd00*=0x4ffe, lpOverlapped=0x128ddd0c) returned 1
	[0183.743] GetFileType (hFile=0x2dc) returned 0x1
	[0183.743] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x4ffe, lpNewFilePointer=0x0, dwMoveMethod=0x128ddce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.743] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0183.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0183.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0183.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0183.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W  wunh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w  wunh.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.745] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x128ddd0c | out: lpMode=0x128ddd0c) returned 0
	[0183.745] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x128ddd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x128ddd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.746] CloseHandle (hObject=0x34c) returned 1
	[0183.746] CloseHandle (hObject=0x2dc) returned 1
	[0183.746] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W  wunh.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w  wunh.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W  wunh.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w  wunh.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.755] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0183.760] SetEvent (hEvent=0x30c) returned 1
	[0183.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\1CJEGD.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\1cjegd.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.761] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0183.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\1CJEGD.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\1cjegd.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5bf5710, ftCreationTime.dwHighDateTime=0x1d5e2c8, ftLastAccessTime.dwLowDateTime=0x6bc72250, ftLastAccessTime.dwHighDateTime=0x1d5e6fb, ftLastWriteTime.dwLowDateTime=0x6bc72250, ftLastWriteTime.dwHighDateTime=0x1d5e6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd004)) returned 1
	[0183.761] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0183.761] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788108 | out: pbBuffer=0x12788108) returned 1
	[0183.761] ReadFile (in: hFile=0x34c, lpBuffer=0x12890000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12890000*, lpNumberOfBytesRead=0x1276dd1c*=0xd004, lpOverlapped=0x0) returned 1
	[0183.773] GetFileType (hFile=0x34c) returned 0x1
	[0183.773] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.773] WriteFile (in: hFile=0x34c, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0xd004, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x1276dd00*=0xd004, lpOverlapped=0x1276dd0c) returned 1
	[0183.774] GetFileType (hFile=0x34c) returned 0x1
	[0183.774] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xd004, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.774] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0183.774] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0183.774] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0183.774] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881c0 | out: pbBuffer=0x127881c0) returned 1
	[0183.774] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\1CJEGD.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\1cjegd.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.774] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0183.774] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.775] CloseHandle (hObject=0x2dc) returned 1
	[0183.775] CloseHandle (hObject=0x34c) returned 1
	[0183.775] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\1CJEGD.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\1cjegd.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\1CJEGD.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\1cjegd.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.777] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0184.794] SetEvent (hEvent=0x68) returned 1
	[0184.794] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0184.841] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\E6ozqyj P.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\e6ozqyj p.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0184.842] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0184.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\E6ozqyj P.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\e6ozqyj p.wav"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe8e60, ftCreationTime.dwHighDateTime=0x1d5d928, ftLastAccessTime.dwLowDateTime=0xe86cbda0, ftLastAccessTime.dwHighDateTime=0x1d5e35a, ftLastWriteTime.dwLowDateTime=0xe86cbda0, ftLastWriteTime.dwHighDateTime=0x1d5e35a, nFileSizeHigh=0x0, nFileSizeLow=0xdc1)) returned 1
	[0184.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244ca20 | out: pbBuffer=0x1244ca20) returned 1
	[0184.843] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446c8 | out: pbBuffer=0x127446c8) returned 1
	[0184.843] ReadFile (in: hFile=0x33c, lpBuffer=0x12686000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12686000*, lpNumberOfBytesRead=0x12769d1c*=0xdc1, lpOverlapped=0x0) returned 1
	[0184.880] GetFileType (hFile=0x33c) returned 0x1
	[0184.880] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0184.880] WriteFile (in: hFile=0x33c, lpBuffer=0x12602000*, nNumberOfBytesToWrite=0xdc1, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12602000*, lpNumberOfBytesWritten=0x12769d00*=0xdc1, lpOverlapped=0x12769d0c) returned 1
	[0184.880] GetFileType (hFile=0x33c) returned 0x1
	[0184.880] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xdc1, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0184.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401a81 | out: pbBuffer=0x12401a81) returned 1
	[0184.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401b81 | out: pbBuffer=0x12401b81) returned 1
	[0184.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401c81 | out: pbBuffer=0x12401c81) returned 1
	[0184.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744780 | out: pbBuffer=0x12744780) returned 1
	[0184.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\E6ozqyj P.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\e6ozqyj p.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0184.881] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0184.881] WriteFile (in: hFile=0x2dc, lpBuffer=0x127dc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x127dc000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0184.882] CloseHandle (hObject=0x2dc) returned 1
	[0184.882] CloseHandle (hObject=0x33c) returned 1
	[0184.882] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\E6ozqyj P.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\e6ozqyj p.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\lndbLmi_-qHI10e9\\HsjjX\\E6ozqyj P.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\lndblmi_-qhi10e9\\hsjjx\\e6ozqyj p.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0184.885] SwitchToThread () returned 1
	[0184.967] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0185.175] SetEvent (hEvent=0x2f4) returned 1
	[0185.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\nethood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0185.176] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x12767a44 | out: lpFindFileData=0x12767a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0185.177] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0185.412] SetEvent (hEvent=0x70) returned 1
	[0185.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0IIsKDBIH6Gt5E0Cf.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0iiskdbih6gt5e0cf.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.413] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0185.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0IIsKDBIH6Gt5E0Cf.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0iiskdbih6gt5e0cf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11f849e0, ftCreationTime.dwHighDateTime=0x1d5dc95, ftLastAccessTime.dwLowDateTime=0x224526f0, ftLastAccessTime.dwHighDateTime=0x1d5d8c2, ftLastWriteTime.dwLowDateTime=0x224526f0, ftLastWriteTime.dwHighDateTime=0x1d5d8c2, nFileSizeHigh=0x0, nFileSizeLow=0x16277)) returned 1
	[0185.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0185.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e010 | out: pbBuffer=0x1251e010) returned 1
	[0185.413] ReadFile (in: hFile=0x2dc, lpBuffer=0x1291c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1291c000*, lpNumberOfBytesRead=0x12429d1c*=0x16277, lpOverlapped=0x0) returned 1
	[0185.481] GetFileType (hFile=0x2dc) returned 0x1
	[0185.481] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.481] WriteFile (in: hFile=0x2dc, lpBuffer=0x12858000*, nNumberOfBytesToWrite=0x16277, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12858000*, lpNumberOfBytesWritten=0x12429d00*=0x16277, lpOverlapped=0x12429d0c) returned 1
	[0185.481] GetFileType (hFile=0x2dc) returned 0x1
	[0185.481] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x16277, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.482] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0185.482] SetEvent (hEvent=0x30c) returned 1
	[0185.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0185.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0185.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0185.483] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e8 | out: pbBuffer=0x1251e0e8) returned 1
	[0185.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0IIsKDBIH6Gt5E0Cf.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0iiskdbih6gt5e0cf.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0185.483] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0185.483] WriteFile (in: hFile=0x1e4, lpBuffer=0x125fe500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.483] CloseHandle (hObject=0x1e4) returned 1
	[0185.483] CloseHandle (hObject=0x2dc) returned 1
	[0185.483] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0IIsKDBIH6Gt5E0Cf.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0iiskdbih6gt5e0cf.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\0IIsKDBIH6Gt5E0Cf.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\0iiskdbih6gt5e0cf.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NYF3WL1mE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nyf3wl1me.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.487] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0185.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NYF3WL1mE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nyf3wl1me.png"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd5ff020, ftCreationTime.dwHighDateTime=0x1d5e11a, ftLastAccessTime.dwLowDateTime=0x671ed900, ftLastAccessTime.dwHighDateTime=0x1d5e0f2, ftLastWriteTime.dwLowDateTime=0x671ed900, ftLastWriteTime.dwHighDateTime=0x1d5e0f2, nFileSizeHigh=0x0, nFileSizeLow=0x15873)) returned 1
	[0185.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0185.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e110 | out: pbBuffer=0x1251e110) returned 1
	[0185.488] ReadFile (in: hFile=0x2dc, lpBuffer=0x12870000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12870000*, lpNumberOfBytesRead=0x12429d1c*=0x15873, lpOverlapped=0x0) returned 1
	[0185.609] GetFileType (hFile=0x2dc) returned 0x1
	[0185.609] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.610] WriteFile (in: hFile=0x2dc, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x15873, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12429d00*=0x15873, lpOverlapped=0x12429d0c) returned 1
	[0185.610] GetFileType (hFile=0x2dc) returned 0x1
	[0185.610] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x15873, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0185.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0185.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0185.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744420 | out: pbBuffer=0x12744420) returned 1
	[0185.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NYF3WL1mE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nyf3wl1me.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0185.611] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0185.611] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.611] CloseHandle (hObject=0x1e4) returned 1
	[0185.612] CloseHandle (hObject=0x2dc) returned 1
	[0185.612] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NYF3WL1mE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nyf3wl1me.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\NYF3WL1mE.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\nyf3wl1me.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.622] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0185.717] SetEvent (hEvent=0x30c) returned 1
	[0185.717] GetFileType (hFile=0x344) returned 0x1
	[0185.717] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.718] WriteFile (in: hFile=0x344, lpBuffer=0x128e4000*, nNumberOfBytesToWrite=0x2d16, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x128e4000*, lpNumberOfBytesWritten=0x12769d00*=0x2d16, lpOverlapped=0x12769d0c) returned 1
	[0185.718] GetFileType (hFile=0x344) returned 0x1
	[0185.718] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x2d16, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0185.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0185.718] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0185.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0185.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\LWmU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\lwmu.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.719] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0185.719] WriteFile (in: hFile=0x2dc, lpBuffer=0x1248a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x1248a000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.719] CloseHandle (hObject=0x2dc) returned 1
	[0185.719] CloseHandle (hObject=0x344) returned 1
	[0185.719] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\LWmU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\lwmu.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\LWmU.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\lwmu.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.726] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\PkdJzMOwu-e.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\pkdjzmowu-e.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0185.727] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0185.727] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\PkdJzMOwu-e.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\pkdjzmowu-e.gif"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1d8f70, ftCreationTime.dwHighDateTime=0x1d5e0f9, ftLastAccessTime.dwLowDateTime=0x9f0893e0, ftLastAccessTime.dwHighDateTime=0x1d5e50e, ftLastWriteTime.dwLowDateTime=0x9f0893e0, ftLastWriteTime.dwHighDateTime=0x1d5e50e, nFileSizeHigh=0x0, nFileSizeLow=0x652b)) returned 1
	[0185.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0185.727] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0185.728] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12429d1c*=0x652b, lpOverlapped=0x0) returned 1
	[0185.790] GetFileType (hFile=0x344) returned 0x1
	[0185.790] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.790] WriteFile (in: hFile=0x344, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x652b, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x12429d00*=0x652b, lpOverlapped=0x12429d0c) returned 1
	[0185.790] GetFileType (hFile=0x344) returned 0x1
	[0185.790] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x652b, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec601 | out: pbBuffer=0x124ec601) returned 1
	[0185.791] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0185.791] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0185.791] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0185.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\PkdJzMOwu-e.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\pkdjzmowu-e.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0185.791] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0185.791] WriteFile (in: hFile=0x1e4, lpBuffer=0x1248a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1248a500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.791] CloseHandle (hObject=0x1e4) returned 1
	[0185.792] CloseHandle (hObject=0x344) returned 1
	[0185.792] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\PkdJzMOwu-e.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\pkdjzmowu-e.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\PkdJzMOwu-e.gif.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\pkdjzmowu-e.gif.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\dTbYfu SzaY6-cp8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\dtbyfu szay6-cp8.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0185.796] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0185.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\dTbYfu SzaY6-cp8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\dtbyfu szay6-cp8.bmp"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf883ff10, ftCreationTime.dwHighDateTime=0x1d5e395, ftLastAccessTime.dwLowDateTime=0xbf6c9bb0, ftLastAccessTime.dwHighDateTime=0x1d5e5f2, ftLastWriteTime.dwLowDateTime=0xbf6c9bb0, ftLastWriteTime.dwHighDateTime=0x1d5e5f2, nFileSizeHigh=0x0, nFileSizeLow=0xc5fb)) returned 1
	[0185.796] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0185.796] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0185.796] ReadFile (in: hFile=0x344, lpBuffer=0x1284c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1284c000*, lpNumberOfBytesRead=0x12429d1c*=0xc5fb, lpOverlapped=0x0) returned 1
	[0185.861] SetEvent (hEvent=0x68) returned 1
	[0185.862] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0185.904] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0185.904] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0185.939] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0185.939] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0185.939] SetEvent (hEvent=0x30c) returned 1
	[0185.939] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0186.047] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.048] GetFileType (hFile=0x344) returned 0x1
	[0186.048] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.048] WriteFile (in: hFile=0x344, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0xc5fb, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x1242bd00*=0xc5fb, lpOverlapped=0x1242bd0c) returned 1
	[0186.048] GetFileType (hFile=0x344) returned 0x1
	[0186.048] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xc5fb, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0186.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0186.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0186.049] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0186.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\dTbYfu SzaY6-cp8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\dtbyfu szay6-cp8.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.049] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.049] WriteFile (in: hFile=0x33c, lpBuffer=0x128de500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128de500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.050] CloseHandle (hObject=0x33c) returned 1
	[0186.050] CloseHandle (hObject=0x344) returned 1
	[0186.050] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\dTbYfu SzaY6-cp8.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\dtbyfu szay6-cp8.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\dTbYfu SzaY6-cp8.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\dtbyfu szay6-cp8.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\u6eTER.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\u6eter.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.055] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\u6eTER.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\u6eter.png"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb88b6100, ftCreationTime.dwHighDateTime=0x1d5e318, ftLastAccessTime.dwLowDateTime=0xe77bbbe0, ftLastAccessTime.dwHighDateTime=0x1d5e273, ftLastWriteTime.dwLowDateTime=0xe77bbbe0, ftLastWriteTime.dwHighDateTime=0x1d5e273, nFileSizeHigh=0x0, nFileSizeLow=0x9285)) returned 1
	[0186.055] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0186.055] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0186.056] ReadFile (in: hFile=0x344, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12767d1c*=0x9285, lpOverlapped=0x0) returned 1
	[0186.132] GetFileType (hFile=0x344) returned 0x1
	[0186.132] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.132] WriteFile (in: hFile=0x344, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x9285, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x12767d00*=0x9285, lpOverlapped=0x12767d0c) returned 1
	[0186.132] GetFileType (hFile=0x344) returned 0x1
	[0186.132] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x9285, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.132] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0186.132] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0186.132] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0186.133] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0186.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\u6eTER.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\u6eter.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.133] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.133] WriteFile (in: hFile=0x1e4, lpBuffer=0x128dea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x128dea00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.133] CloseHandle (hObject=0x1e4) returned 1
	[0186.208] CloseHandle (hObject=0x344) returned 1
	[0186.272] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\u6eTER.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\u6eter.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\u6eTER.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\u6eter.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.292] SetEvent (hEvent=0x2f4) returned 1
	[0186.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5bBpGkcu3tYsh6hWIw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5bbpgkcu3tysh6hwiw.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.293] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5bBpGkcu3tYsh6hWIw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5bbpgkcu3tysh6hwiw.png"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf49080, ftCreationTime.dwHighDateTime=0x1d5e43e, ftLastAccessTime.dwLowDateTime=0x96614890, ftLastAccessTime.dwHighDateTime=0x1d5e21b, ftLastWriteTime.dwLowDateTime=0x96614890, ftLastWriteTime.dwHighDateTime=0x1d5e21b, nFileSizeHigh=0x0, nFileSizeLow=0x143f5)) returned 1
	[0186.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e640 | out: pbBuffer=0x1240e640) returned 1
	[0186.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0186.293] ReadFile (in: hFile=0x33c, lpBuffer=0x1296a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1296a000*, lpNumberOfBytesRead=0x12767d1c*=0x143f5, lpOverlapped=0x0) returned 1
	[0186.299] GetFileType (hFile=0x33c) returned 0x1
	[0186.299] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.299] WriteFile (in: hFile=0x33c, lpBuffer=0x126ca000*, nNumberOfBytesToWrite=0x143f5, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x126ca000*, lpNumberOfBytesWritten=0x12767d00*=0x143f5, lpOverlapped=0x12767d0c) returned 1
	[0186.299] GetFileType (hFile=0x33c) returned 0x1
	[0186.300] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x143f5, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434601 | out: pbBuffer=0x12434601) returned 1
	[0186.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434701 | out: pbBuffer=0x12434701) returned 1
	[0186.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0186.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0186.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5bBpGkcu3tYsh6hWIw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5bbpgkcu3tysh6hwiw.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.301] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.301] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.301] CloseHandle (hObject=0x2dc) returned 1
	[0186.301] CloseHandle (hObject=0x33c) returned 1
	[0186.302] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5bBpGkcu3tYsh6hWIw.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5bbpgkcu3tysh6hwiw.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\5bBpGkcu3tYsh6hWIw.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\5bbpgkcu3tysh6hwiw.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DEQmAz4ZoU3y.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\deqmaz4zou3y.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.305] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DEQmAz4ZoU3y.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\deqmaz4zou3y.png"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffbd0710, ftCreationTime.dwHighDateTime=0x1d5e609, ftLastAccessTime.dwLowDateTime=0xad8c1c20, ftLastAccessTime.dwHighDateTime=0x1d5e04a, ftLastWriteTime.dwLowDateTime=0xad8c1c20, ftLastWriteTime.dwHighDateTime=0x1d5e04a, nFileSizeHigh=0x0, nFileSizeLow=0x9304)) returned 1
	[0186.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0186.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0186.306] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0186.308] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0186.308] SetEvent (hEvent=0xa0) returned 1
	[0186.308] SetEvent (hEvent=0x80) returned 1
	[0186.308] ReadFile (in: hFile=0x33c, lpBuffer=0x126e0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x126e0000*, lpNumberOfBytesRead=0x12767d1c*=0x9304, lpOverlapped=0x0) returned 1
	[0186.313] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.318] GetFileType (hFile=0x33c) returned 0x1
	[0186.318] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.318] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x9304, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12767d00*=0x9304, lpOverlapped=0x12767d0c) returned 1
	[0186.319] GetFileType (hFile=0x33c) returned 0x1
	[0186.319] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x9304, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.319] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0186.319] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0186.319] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0186.319] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0186.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DEQmAz4ZoU3y.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\deqmaz4zou3y.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.319] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.319] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.320] CloseHandle (hObject=0x34c) returned 1
	[0186.320] CloseHandle (hObject=0x33c) returned 1
	[0186.320] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DEQmAz4ZoU3y.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\deqmaz4zou3y.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\DEQmAz4ZoU3y.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\deqmaz4zou3y.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.322] SetEvent (hEvent=0x70) returned 1
	[0186.322] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OmRMKwrtkfriC1zpJ5Qk.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\omrmkwrtkfric1zpj5qk.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.323] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OmRMKwrtkfriC1zpJ5Qk.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\omrmkwrtkfric1zpj5qk.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ef51a40, ftCreationTime.dwHighDateTime=0x1d5df19, ftLastAccessTime.dwLowDateTime=0x82ad8180, ftLastAccessTime.dwHighDateTime=0x1d5e377, ftLastWriteTime.dwLowDateTime=0x82ad8180, ftLastWriteTime.dwHighDateTime=0x1d5e377, nFileSizeHigh=0x0, nFileSizeLow=0x13226)) returned 1
	[0186.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f120 | out: pbBuffer=0x1240f120) returned 1
	[0186.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e758 | out: pbBuffer=0x1251e758) returned 1
	[0186.323] ReadFile (in: hFile=0x33c, lpBuffer=0x1286e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1286e000*, lpNumberOfBytesRead=0x12767d1c*=0x13226, lpOverlapped=0x0) returned 1
	[0186.329] GetFileType (hFile=0x33c) returned 0x1
	[0186.329] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.329] WriteFile (in: hFile=0x33c, lpBuffer=0x127d0000*, nNumberOfBytesToWrite=0x13226, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x127d0000*, lpNumberOfBytesWritten=0x12767d00*=0x13226, lpOverlapped=0x12767d0c) returned 1
	[0186.330] GetFileType (hFile=0x33c) returned 0x1
	[0186.330] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x13226, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.330] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0186.330] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0186.330] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0186.330] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0186.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OmRMKwrtkfriC1zpJ5Qk.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\omrmkwrtkfric1zpj5qk.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.330] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.330] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.330] CloseHandle (hObject=0x34c) returned 1
	[0186.331] CloseHandle (hObject=0x33c) returned 1
	[0186.331] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OmRMKwrtkfriC1zpJ5Qk.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\omrmkwrtkfric1zpj5qk.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\OmRMKwrtkfriC1zpJ5Qk.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\omrmkwrtkfric1zpj5qk.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UvvU4.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uvvu4.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.333] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UvvU4.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uvvu4.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2552c570, ftCreationTime.dwHighDateTime=0x1d5e491, ftLastAccessTime.dwLowDateTime=0x6277e0b0, ftLastAccessTime.dwHighDateTime=0x1d5e4d8, ftLastWriteTime.dwLowDateTime=0x6277e0b0, ftLastWriteTime.dwHighDateTime=0x1d5e4d8, nFileSizeHigh=0x0, nFileSizeLow=0x15041)) returned 1
	[0186.333] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0186.333] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0186.333] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12767d1c*=0x15041, lpOverlapped=0x0) returned 1
	[0186.341] GetFileType (hFile=0x33c) returned 0x1
	[0186.341] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.341] WriteFile (in: hFile=0x33c, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0x15041, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x12767d00*=0x15041, lpOverlapped=0x12767d0c) returned 1
	[0186.341] GetFileType (hFile=0x33c) returned 0x1
	[0186.341] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x15041, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0186.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0186.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0186.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0186.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UvvU4.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uvvu4.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.342] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.342] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.342] CloseHandle (hObject=0x2dc) returned 1
	[0186.343] CloseHandle (hObject=0x33c) returned 1
	[0186.343] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UvvU4.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uvvu4.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UvvU4.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uvvu4.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.373] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.378] SetEvent (hEvent=0x2f4) returned 1
	[0186.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\aepOA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aepoa.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.380] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\aepOA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aepoa.png"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb022b40, ftCreationTime.dwHighDateTime=0x1d5d945, ftLastAccessTime.dwLowDateTime=0x7efa9c40, ftLastAccessTime.dwHighDateTime=0x1d5dd90, ftLastWriteTime.dwLowDateTime=0x7efa9c40, ftLastWriteTime.dwHighDateTime=0x1d5dd90, nFileSizeHigh=0x0, nFileSizeLow=0x11430)) returned 1
	[0186.380] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322c0 | out: pbBuffer=0x127322c0) returned 1
	[0186.380] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0186.380] ReadFile (in: hFile=0x33c, lpBuffer=0x1256c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1256c000*, lpNumberOfBytesRead=0x12767d1c*=0x11430, lpOverlapped=0x0) returned 1
	[0186.385] GetFileType (hFile=0x33c) returned 0x1
	[0186.385] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.385] WriteFile (in: hFile=0x33c, lpBuffer=0x125ac000*, nNumberOfBytesToWrite=0x11430, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x125ac000*, lpNumberOfBytesWritten=0x12767d00*=0x11430, lpOverlapped=0x12767d0c) returned 1
	[0186.385] GetFileType (hFile=0x33c) returned 0x1
	[0186.385] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x11430, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0186.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0186.386] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0186.386] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788240 | out: pbBuffer=0x12788240) returned 1
	[0186.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\aepOA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aepoa.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.386] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.386] WriteFile (in: hFile=0x1e4, lpBuffer=0x128ce500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x128ce500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.386] CloseHandle (hObject=0x1e4) returned 1
	[0186.387] CloseHandle (hObject=0x33c) returned 1
	[0186.387] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\aepOA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aepoa.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\aepOA.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\aepoa.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.417] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.418] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.419] SetEvent (hEvent=0x70) returned 1
	[0186.419] SetEvent (hEvent=0x80) returned 1
	[0186.419] SwitchToThread () returned 1
	[0186.420] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.426] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\j3Rq Ii5dtLqm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\j3rq ii5dtlqm.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.434] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\j3Rq Ii5dtLqm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\j3rq ii5dtlqm.gif"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed51a2d0, ftCreationTime.dwHighDateTime=0x1d5e5d6, ftLastAccessTime.dwLowDateTime=0x122cdb40, ftLastAccessTime.dwHighDateTime=0x1d5e223, ftLastWriteTime.dwLowDateTime=0x122cdb40, ftLastWriteTime.dwHighDateTime=0x1d5e223, nFileSizeHigh=0x0, nFileSizeLow=0xa45c)) returned 1
	[0186.434] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0186.434] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0186.434] ReadFile (in: hFile=0x33c, lpBuffer=0x12904000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12904000*, lpNumberOfBytesRead=0x12767d1c*=0xa45c, lpOverlapped=0x0) returned 1
	[0186.438] GetFileType (hFile=0x33c) returned 0x1
	[0186.438] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.438] WriteFile (in: hFile=0x33c, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0xa45c, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x12767d00*=0xa45c, lpOverlapped=0x12767d0c) returned 1
	[0186.438] GetFileType (hFile=0x33c) returned 0x1
	[0186.438] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xa45c, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0186.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0186.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0186.439] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0186.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\j3Rq Ii5dtLqm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\j3rq ii5dtlqm.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.439] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0186.439] WriteFile (in: hFile=0x34c, lpBuffer=0x128d4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x128d4000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.439] CloseHandle (hObject=0x34c) returned 1
	[0186.440] CloseHandle (hObject=0x33c) returned 1
	[0186.442] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\j3Rq Ii5dtLqm.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\j3rq ii5dtlqm.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\j3Rq Ii5dtLqm.gif.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\j3rq ii5dtlqm.gif.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.465] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.467] SetEvent (hEvent=0x80) returned 1
	[0186.467] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ow0iTrzqcyPAOKrzeb.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ow0itrzqcypaokrzeb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.468] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0186.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ow0iTrzqcyPAOKrzeb.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ow0itrzqcypaokrzeb.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81f01500, ftCreationTime.dwHighDateTime=0x1d5de81, ftLastAccessTime.dwLowDateTime=0xcef2ebe0, ftLastAccessTime.dwHighDateTime=0x1d5e479, ftLastWriteTime.dwLowDateTime=0xcef2ebe0, ftLastWriteTime.dwHighDateTime=0x1d5e479, nFileSizeHigh=0x0, nFileSizeLow=0x13f56)) returned 1
	[0186.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0186.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0186.468] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1276dd1c*=0x13f56, lpOverlapped=0x0) returned 1
	[0186.472] GetFileType (hFile=0x33c) returned 0x1
	[0186.472] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.472] WriteFile (in: hFile=0x33c, lpBuffer=0x1257a000*, nNumberOfBytesToWrite=0x13f56, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1257a000*, lpNumberOfBytesWritten=0x1276dd00*=0x13f56, lpOverlapped=0x1276dd0c) returned 1
	[0186.472] GetFileType (hFile=0x33c) returned 0x1
	[0186.472] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x13f56, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.472] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0186.473] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d01 | out: pbBuffer=0x127e8d01) returned 1
	[0186.473] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e01 | out: pbBuffer=0x127e8e01) returned 1
	[0186.473] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0186.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ow0iTrzqcyPAOKrzeb.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ow0itrzqcypaokrzeb.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.473] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0186.473] WriteFile (in: hFile=0x34c, lpBuffer=0x128d4a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x128d4a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.473] CloseHandle (hObject=0x34c) returned 1
	[0186.474] CloseHandle (hObject=0x33c) returned 1
	[0186.475] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ow0iTrzqcyPAOKrzeb.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ow0itrzqcypaokrzeb.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ow0iTrzqcyPAOKrzeb.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ow0itrzqcypaokrzeb.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.513] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.525] SetEvent (hEvent=0x80) returned 1
	[0186.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x-kG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x-kg.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.525] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x-kG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x-kg.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf6434ba0, ftCreationTime.dwHighDateTime=0x1d5d8c5, ftLastAccessTime.dwLowDateTime=0xc8459360, ftLastAccessTime.dwHighDateTime=0x1d5e73a, ftLastWriteTime.dwLowDateTime=0xc8459360, ftLastWriteTime.dwHighDateTime=0x1d5e73a, nFileSizeHigh=0x0, nFileSizeLow=0xf1bc)) returned 1
	[0186.526] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0186.526] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744108 | out: pbBuffer=0x12744108) returned 1
	[0186.526] ReadFile (in: hFile=0x33c, lpBuffer=0x126da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126da000*, lpNumberOfBytesRead=0x1242bd1c*=0xf1bc, lpOverlapped=0x0) returned 1
	[0186.534] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0186.535] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.535] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0186.536] SetEvent (hEvent=0xa0) returned 1
	[0186.536] SetEvent (hEvent=0x80) returned 1
	[0186.536] SetEvent (hEvent=0x70) returned 1
	[0186.536] GetFileType (hFile=0x33c) returned 0x1
	[0186.536] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.536] WriteFile (in: hFile=0x33c, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0xf1bc, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x1242bd00*=0xf1bc, lpOverlapped=0x1242bd0c) returned 1
	[0186.537] GetFileType (hFile=0x33c) returned 0x1
	[0186.537] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xf1bc, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.537] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0186.537] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0186.537] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec901 | out: pbBuffer=0x124ec901) returned 1
	[0186.537] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0186.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x-kG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x-kg.bmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.538] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.538] WriteFile (in: hFile=0x344, lpBuffer=0x12624500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12624500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.538] CloseHandle (hObject=0x344) returned 1
	[0186.547] CloseHandle (hObject=0x33c) returned 1
	[0186.553] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x-kG.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x-kg.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\x-kG.bmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\x-kg.bmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.574] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.575] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c)) returned 1
	[0186.575] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127320a0 | out: pbBuffer=0x127320a0) returned 1
	[0186.575] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788078 | out: pbBuffer=0x12788078) returned 1
	[0186.575] ReadFile (in: hFile=0x34c, lpBuffer=0x127c2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127c2000*, lpNumberOfBytesRead=0x12769d1c*=0x20c, lpOverlapped=0x0) returned 1
	[0186.577] GetFileType (hFile=0x34c) returned 0x1
	[0186.577] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.577] WriteFile (in: hFile=0x34c, lpBuffer=0x12534000*, nNumberOfBytesToWrite=0x20c, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12534000*, lpNumberOfBytesWritten=0x12769d00*=0x20c, lpOverlapped=0x12769d0c) returned 1
	[0186.577] GetFileType (hFile=0x34c) returned 0x1
	[0186.577] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x20c, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434401 | out: pbBuffer=0x12434401) returned 1
	[0186.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434501 | out: pbBuffer=0x12434501) returned 1
	[0186.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434601 | out: pbBuffer=0x12434601) returned 1
	[0186.577] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788140 | out: pbBuffer=0x12788140) returned 1
	[0186.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.578] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.578] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.578] CloseHandle (hObject=0x33c) returned 1
	[0186.578] CloseHandle (hObject=0x34c) returned 1
	[0186.578] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\sendto"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.581] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x12725a44 | out: lpFindFileData=0x12725a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0186.581] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.604] SetEvent (hEvent=0x30c) returned 1
	[0186.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\JUdfd7wmTZqkCb0Hce1.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\judfd7wmtzqkcb0hce1.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.605] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\JUdfd7wmTZqkCb0Hce1.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\judfd7wmtzqkcb0hce1.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb07e8b50, ftCreationTime.dwHighDateTime=0x1d5db1f, ftLastAccessTime.dwLowDateTime=0xdff47030, ftLastAccessTime.dwHighDateTime=0x1d5ddb7, ftLastWriteTime.dwLowDateTime=0xdff47030, ftLastWriteTime.dwHighDateTime=0x1d5ddb7, nFileSizeHigh=0x0, nFileSizeLow=0x5c9b)) returned 1
	[0186.606] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0186.606] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0186.606] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0x5c9b, lpOverlapped=0x0) returned 1
	[0186.708] GetFileType (hFile=0x33c) returned 0x1
	[0186.708] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.708] WriteFile (in: hFile=0x33c, lpBuffer=0x125f6000*, nNumberOfBytesToWrite=0x5c9b, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125f6000*, lpNumberOfBytesWritten=0x1242bd00*=0x5c9b, lpOverlapped=0x1242bd0c) returned 1
	[0186.709] GetFileType (hFile=0x33c) returned 0x1
	[0186.709] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x5c9b, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0186.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0186.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0186.709] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0f0 | out: pbBuffer=0x1251e0f0) returned 1
	[0186.709] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\JUdfd7wmTZqkCb0Hce1.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\judfd7wmtzqkcb0hce1.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.710] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.710] WriteFile (in: hFile=0x1e4, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.710] CloseHandle (hObject=0x1e4) returned 1
	[0186.710] CloseHandle (hObject=0x33c) returned 1
	[0186.710] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\JUdfd7wmTZqkCb0Hce1.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\judfd7wmtzqkcb0hce1.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\JUdfd7wmTZqkCb0Hce1.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\judfd7wmtzqkcb0hce1.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.737] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.760] SetEvent (hEvent=0x68) returned 1
	[0186.760] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.785] SetEvent (hEvent=0x68) returned 1
	[0186.786] SetEvent (hEvent=0x30c) returned 1
	[0186.786] GetFileType (hFile=0x344) returned 0x1
	[0186.786] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12725ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.786] WriteFile (in: hFile=0x344, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x11461, lpNumberOfBytesWritten=0x12725d00, lpOverlapped=0x12725d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12725d00*=0x11461, lpOverlapped=0x12725d0c) returned 1
	[0186.787] GetFileType (hFile=0x344) returned 0x1
	[0186.787] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x11461, lpNewFilePointer=0x0, dwMoveMethod=0x12725ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0186.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0186.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0186.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103f0 | out: pbBuffer=0x124103f0) returned 1
	[0186.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\qCVTujkIRlBIORf8zpLj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\qcvtujkirlbiorf8zplj.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.787] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12725d0c | out: lpMode=0x12725d0c) returned 0
	[0186.787] WriteFile (in: hFile=0x33c, lpBuffer=0x1263aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12725d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263aa00*, lpNumberOfBytesWritten=0x12725d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.788] CloseHandle (hObject=0x33c) returned 1
	[0186.788] CloseHandle (hObject=0x344) returned 1
	[0186.788] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\qCVTujkIRlBIORf8zpLj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\qcvtujkirlbiorf8zplj.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\qCVTujkIRlBIORf8zpLj.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\qcvtujkirlbiorf8zplj.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.790] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400801 | out: pbBuffer=0x12400801) returned 1
	[0186.791] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410418 | out: pbBuffer=0x12410418) returned 1
	[0186.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\Zw4Y8xErWav.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\zw4y8xerwav.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.791] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.791] WriteFile (in: hFile=0x344, lpBuffer=0x1263af00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12727d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263af00*, lpNumberOfBytesWritten=0x12727d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.791] CloseHandle (hObject=0x344) returned 1
	[0186.791] CloseHandle (hObject=0x34c) returned 1
	[0186.791] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\Zw4Y8xErWav.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\zw4y8xerwav.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\Zw4Y8xErWav.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\zw4y8xerwav.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.793] SwitchToThread () returned 1
	[0186.797] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.815] SetEvent (hEvent=0x30c) returned 1
	[0186.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\7_TAmv-1EPMCwubXcUt.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\7_tamv-1epmcwubxcut.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.816] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\7_TAmv-1EPMCwubXcUt.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\7_tamv-1epmcwubxcut.swf"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49620850, ftCreationTime.dwHighDateTime=0x1d5dddd, ftLastAccessTime.dwLowDateTime=0x58c60790, ftLastAccessTime.dwHighDateTime=0x1d5e6e5, ftLastWriteTime.dwLowDateTime=0x58c60790, ftLastWriteTime.dwHighDateTime=0x1d5e6e5, nFileSizeHigh=0x0, nFileSizeLow=0x4f85)) returned 1
	[0186.816] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e7a0 | out: pbBuffer=0x1240e7a0) returned 1
	[0186.816] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410430 | out: pbBuffer=0x12410430) returned 1
	[0186.816] ReadFile (in: hFile=0x34c, lpBuffer=0x1284a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1284a000*, lpNumberOfBytesRead=0x12769d1c*=0x4f85, lpOverlapped=0x0) returned 1
	[0186.834] GetFileType (hFile=0x34c) returned 0x1
	[0186.834] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.834] WriteFile (in: hFile=0x34c, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x4f85, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x12769d00*=0x4f85, lpOverlapped=0x12769d0c) returned 1
	[0186.834] GetFileType (hFile=0x34c) returned 0x1
	[0186.834] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x4f85, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.835] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0186.835] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0186.835] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0186.835] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410508 | out: pbBuffer=0x12410508) returned 1
	[0186.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\7_TAmv-1EPMCwubXcUt.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\7_tamv-1epmcwubxcut.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.835] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.835] WriteFile (in: hFile=0x33c, lpBuffer=0x1263b400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263b400*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.835] CloseHandle (hObject=0x33c) returned 1
	[0186.835] CloseHandle (hObject=0x34c) returned 1
	[0186.836] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\7_TAmv-1EPMCwubXcUt.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\7_tamv-1epmcwubxcut.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\7_TAmv-1EPMCwubXcUt.swf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\7_tamv-1epmcwubxcut.swf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\5fUE1I9wpU7cbjkFMI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\5fue1i9wpu7cbjkfmi.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.839] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.839] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\5fUE1I9wpU7cbjkFMI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\5fue1i9wpu7cbjkfmi.flv"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8664d5f0, ftCreationTime.dwHighDateTime=0x1d5dd5d, ftLastAccessTime.dwLowDateTime=0xc21929b0, ftLastAccessTime.dwHighDateTime=0x1d5db60, ftLastWriteTime.dwLowDateTime=0xc21929b0, ftLastWriteTime.dwHighDateTime=0x1d5db60, nFileSizeHigh=0x0, nFileSizeLow=0x10228)) returned 1
	[0186.839] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ed40 | out: pbBuffer=0x1240ed40) returned 1
	[0186.839] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410520 | out: pbBuffer=0x12410520) returned 1
	[0186.839] ReadFile (in: hFile=0x34c, lpBuffer=0x1286a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1286a000*, lpNumberOfBytesRead=0x12769d1c*=0x10228, lpOverlapped=0x0) returned 1
	[0186.861] GetFileType (hFile=0x34c) returned 0x1
	[0186.861] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.861] WriteFile (in: hFile=0x34c, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x10228, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x12769d00*=0x10228, lpOverlapped=0x12769d0c) returned 1
	[0186.862] GetFileType (hFile=0x34c) returned 0x1
	[0186.862] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x10228, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.862] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401001 | out: pbBuffer=0x12401001) returned 1
	[0186.862] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401101 | out: pbBuffer=0x12401101) returned 1
	[0186.862] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401201 | out: pbBuffer=0x12401201) returned 1
	[0186.862] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105d8 | out: pbBuffer=0x124105d8) returned 1
	[0186.862] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\5fUE1I9wpU7cbjkFMI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\5fue1i9wpu7cbjkfmi.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.862] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.862] WriteFile (in: hFile=0x1e4, lpBuffer=0x1263b900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263b900*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.862] CloseHandle (hObject=0x1e4) returned 1
	[0186.863] CloseHandle (hObject=0x34c) returned 1
	[0186.863] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\5fUE1I9wpU7cbjkFMI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\5fue1i9wpu7cbjkfmi.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\5fUE1I9wpU7cbjkFMI.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\5fue1i9wpu7cbjkfmi.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\x4coRc2vg1.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\x4corc2vg1.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42dfb030, ftCreationTime.dwHighDateTime=0x1d5e18a, ftLastAccessTime.dwLowDateTime=0x8c47f700, ftLastAccessTime.dwHighDateTime=0x1d5e2a7, ftLastWriteTime.dwLowDateTime=0x8c47f700, ftLastWriteTime.dwHighDateTime=0x1d5e2a7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5d)) returned 1
	[0186.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2232f150, ftCreationTime.dwHighDateTime=0x1d5e2f0, ftLastAccessTime.dwLowDateTime=0xec746da0, ftLastAccessTime.dwHighDateTime=0x1d5dd90, ftLastWriteTime.dwLowDateTime=0xec746da0, ftLastWriteTime.dwHighDateTime=0x1d5dd90, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0186.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\e5nw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0186.866] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\E5nW\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2232f150, ftCreationTime.dwHighDateTime=0x1d5e2f0, ftLastAccessTime.dwLowDateTime=0xec746da0, ftLastAccessTime.dwHighDateTime=0x1d5dd90, ftLastWriteTime.dwLowDateTime=0xec746da0, ftLastWriteTime.dwHighDateTime=0x1d5dd90, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0186.881] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\KZiHugoVY_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\kzihugovy_.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c5d140, ftCreationTime.dwHighDateTime=0x1d5ddbf, ftLastAccessTime.dwLowDateTime=0x20393970, ftLastAccessTime.dwHighDateTime=0x1d5e53b, ftLastWriteTime.dwLowDateTime=0x20393970, ftLastWriteTime.dwHighDateTime=0x1d5e53b, nFileSizeHigh=0x0, nFileSizeLow=0x946b)) returned 1
	[0186.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\NWK49oPh4.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\nwk49oph4.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe2a79f0, ftCreationTime.dwHighDateTime=0x1d5dab5, ftLastAccessTime.dwLowDateTime=0x9340dec0, ftLastAccessTime.dwHighDateTime=0x1d5e7fa, ftLastWriteTime.dwLowDateTime=0x9340dec0, ftLastWriteTime.dwHighDateTime=0x1d5e7fa, nFileSizeHigh=0x0, nFileSizeLow=0x16220)) returned 1
	[0186.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\KZiHugoVY_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\kzihugovy_.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.918] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\KZiHugoVY_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\kzihugovy_.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c5d140, ftCreationTime.dwHighDateTime=0x1d5ddbf, ftLastAccessTime.dwLowDateTime=0x20393970, ftLastAccessTime.dwHighDateTime=0x1d5e53b, ftLastWriteTime.dwLowDateTime=0x20393970, ftLastWriteTime.dwHighDateTime=0x1d5e53b, nFileSizeHigh=0x0, nFileSizeLow=0x946b)) returned 1
	[0186.919] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0186.919] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0186.919] ReadFile (in: hFile=0x2dc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x1242bd1c*=0x946b, lpOverlapped=0x0) returned 1
	[0186.951] GetFileType (hFile=0x2dc) returned 0x1
	[0186.951] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.951] WriteFile (in: hFile=0x2dc, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x946b, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x1242bd00*=0x946b, lpOverlapped=0x1242bd0c) returned 1
	[0186.951] GetFileType (hFile=0x2dc) returned 0x1
	[0186.951] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x946b, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.951] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0186.968] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0186.968] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0186.968] SetEvent (hEvent=0xa0) returned 1
	[0186.968] SetEvent (hEvent=0x2e8) returned 1
	[0186.968] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0186.969] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0186.969] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0186.969] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0186.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\KZiHugoVY_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\kzihugovy_.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.969] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.970] WriteFile (in: hFile=0x1e4, lpBuffer=0x12990000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12990000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.970] CloseHandle (hObject=0x1e4) returned 1
	[0186.970] CloseHandle (hObject=0x2dc) returned 1
	[0186.970] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\KZiHugoVY_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\kzihugovy_.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\KZiHugoVY_.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\kzihugovy_.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\hHwbpVF.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\hhwbpvf.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.974] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\hHwbpVF.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\hhwbpvf.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4cafe0, ftCreationTime.dwHighDateTime=0x1d5e779, ftLastAccessTime.dwLowDateTime=0x40fcd180, ftLastAccessTime.dwHighDateTime=0x1d5da5a, ftLastWriteTime.dwLowDateTime=0x40fcd180, ftLastWriteTime.dwHighDateTime=0x1d5da5a, nFileSizeHigh=0x0, nFileSizeLow=0xe23d)) returned 1
	[0186.974] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0186.974] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0186.974] ReadFile (in: hFile=0x2dc, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1242bd1c*=0xe23d, lpOverlapped=0x0) returned 1
	[0186.979] GetFileType (hFile=0x2dc) returned 0x1
	[0186.979] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.979] WriteFile (in: hFile=0x2dc, lpBuffer=0x126b4000*, nNumberOfBytesToWrite=0xe23d, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x126b4000*, lpNumberOfBytesWritten=0x1242bd00*=0xe23d, lpOverlapped=0x1242bd0c) returned 1
	[0186.979] GetFileType (hFile=0x2dc) returned 0x1
	[0186.979] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0xe23d, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0186.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d01 | out: pbBuffer=0x12434d01) returned 1
	[0186.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e01 | out: pbBuffer=0x12434e01) returned 1
	[0186.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e9b0 | out: pbBuffer=0x1251e9b0) returned 1
	[0186.980] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\hHwbpVF.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\hhwbpvf.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.980] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.981] WriteFile (in: hFile=0x1e4, lpBuffer=0x128e0f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.981] CloseHandle (hObject=0x1e4) returned 1
	[0186.981] CloseHandle (hObject=0x2dc) returned 1
	[0186.981] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\hHwbpVF.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\hhwbpvf.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\hHwbpVF.mp4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\hhwbpvf.mp4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.984] SetEvent (hEvent=0x2f4) returned 1
	[0186.984] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0187.230] SetEvent (hEvent=0x2e8) returned 1
	[0187.230] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0187.231] SetEvent (hEvent=0x2e8) returned 1
	[0187.231] SetEvent (hEvent=0x30c) returned 1
	[0187.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Msp3zZ.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\msp3zz.avi"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fab05d0, ftCreationTime.dwHighDateTime=0x1d5e063, ftLastAccessTime.dwLowDateTime=0xa4aa37a0, ftLastAccessTime.dwHighDateTime=0x1d5e21f, ftLastWriteTime.dwLowDateTime=0xa4aa37a0, ftLastWriteTime.dwHighDateTime=0x1d5e21f, nFileSizeHigh=0x0, nFileSizeLow=0x17625)) returned 1
	[0187.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac4bdb20, ftCreationTime.dwHighDateTime=0x1d5d8cf, ftLastAccessTime.dwLowDateTime=0x587a2a80, ftLastAccessTime.dwHighDateTime=0x1d5e732, ftLastWriteTime.dwLowDateTime=0x587a2a80, ftLastWriteTime.dwHighDateTime=0x1d5e732, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0187.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0187.233] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac4bdb20, ftCreationTime.dwHighDateTime=0x1d5d8cf, ftLastAccessTime.dwLowDateTime=0x587a2a80, ftLastAccessTime.dwHighDateTime=0x1d5e732, ftLastWriteTime.dwLowDateTime=0x587a2a80, ftLastWriteTime.dwHighDateTime=0x1d5e732, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0187.233] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac4bdb20, ftCreationTime.dwHighDateTime=0x1d5d8cf, ftLastAccessTime.dwLowDateTime=0x587a2a80, ftLastAccessTime.dwHighDateTime=0x1d5e732, ftLastWriteTime.dwLowDateTime=0x587a2a80, ftLastWriteTime.dwHighDateTime=0x1d5e732, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0187.233] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce142bb0, ftCreationTime.dwHighDateTime=0x1d5e0f7, ftLastAccessTime.dwLowDateTime=0x30225b20, ftLastAccessTime.dwHighDateTime=0x1d5e467, ftLastWriteTime.dwLowDateTime=0x30225b20, ftLastWriteTime.dwHighDateTime=0x1d5e467, nFileSizeHigh=0x0, nFileSizeLow=0x16272, dwReserved0=0x0, dwReserved1=0x0, cFileName="41QMHT-8Hcn9Qj6U.avi", cAlternateFileName="41QMHT~1.AVI")) returned 1
	[0187.233] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67dad0, ftCreationTime.dwHighDateTime=0x1d5d959, ftLastAccessTime.dwLowDateTime=0x93f574b0, ftLastAccessTime.dwHighDateTime=0x1d5dfd6, ftLastWriteTime.dwLowDateTime=0x93f574b0, ftLastWriteTime.dwHighDateTime=0x1d5dfd6, nFileSizeHigh=0x0, nFileSizeLow=0xdfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="kPCs3In4upRQntu0Lx.mp4", cAlternateFileName="KPCS3I~1.MP4")) returned 1
	[0187.233] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0187.233] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0187.233] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0187.233] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0187.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0187.244] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0187.244] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0187.245] CloseHandle (hObject=0x33c) returned 1
	[0187.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\41QMHT-8Hcn9Qj6U.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\41qmht-8hcn9qj6u.avi"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce142bb0, ftCreationTime.dwHighDateTime=0x1d5e0f7, ftLastAccessTime.dwLowDateTime=0x30225b20, ftLastAccessTime.dwHighDateTime=0x1d5e467, ftLastWriteTime.dwLowDateTime=0x30225b20, ftLastWriteTime.dwHighDateTime=0x1d5e467, nFileSizeHigh=0x0, nFileSizeLow=0x16272)) returned 1
	[0187.246] SetEvent (hEvent=0x30c) returned 1
	[0187.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\kPCs3In4upRQntu0Lx.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\kpcs3in4uprqntu0lx.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67dad0, ftCreationTime.dwHighDateTime=0x1d5d959, ftLastAccessTime.dwLowDateTime=0x93f574b0, ftLastAccessTime.dwHighDateTime=0x1d5dfd6, ftLastWriteTime.dwLowDateTime=0x93f574b0, ftLastWriteTime.dwHighDateTime=0x1d5dfd6, nFileSizeHigh=0x0, nFileSizeLow=0xdfca)) returned 1
	[0187.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\SF-t-xKEMAC- j_g.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\sf-t-xkemac- j_g.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7ddfc0, ftCreationTime.dwHighDateTime=0x1d5e3b0, ftLastAccessTime.dwLowDateTime=0x39a79690, ftLastAccessTime.dwHighDateTime=0x1d5e108, ftLastWriteTime.dwLowDateTime=0x39a79690, ftLastWriteTime.dwHighDateTime=0x1d5e108, nFileSizeHigh=0x0, nFileSizeLow=0x6d4a)) returned 1
	[0187.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\_qxfVz.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\_qxfvz.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9488b190, ftCreationTime.dwHighDateTime=0x1d5e548, ftLastAccessTime.dwLowDateTime=0x520038c0, ftLastAccessTime.dwHighDateTime=0x1d5e6ab, ftLastWriteTime.dwLowDateTime=0x520038c0, ftLastWriteTime.dwHighDateTime=0x1d5e6ab, nFileSizeHigh=0x0, nFileSizeLow=0x1d95)) returned 1
	[0187.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\SF-t-xKEMAC- j_g.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\sf-t-xkemac- j_g.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0187.250] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0187.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\SF-t-xKEMAC- j_g.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\sf-t-xkemac- j_g.mkv"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7ddfc0, ftCreationTime.dwHighDateTime=0x1d5e3b0, ftLastAccessTime.dwLowDateTime=0x39a79690, ftLastAccessTime.dwHighDateTime=0x1d5e108, ftLastWriteTime.dwLowDateTime=0x39a79690, ftLastWriteTime.dwHighDateTime=0x1d5e108, nFileSizeHigh=0x0, nFileSizeLow=0x6d4a)) returned 1
	[0187.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e420 | out: pbBuffer=0x1240e420) returned 1
	[0187.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410388 | out: pbBuffer=0x12410388) returned 1
	[0187.250] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12727d1c*=0x6d4a, lpOverlapped=0x0) returned 1
	[0187.264] GetFileType (hFile=0x33c) returned 0x1
	[0187.264] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.264] WriteFile (in: hFile=0x33c, lpBuffer=0x128cc000*, nNumberOfBytesToWrite=0x6d4a, lpNumberOfBytesWritten=0x12727d00, lpOverlapped=0x12727d0c | out: lpBuffer=0x128cc000*, lpNumberOfBytesWritten=0x12727d00*=0x6d4a, lpOverlapped=0x12727d0c) returned 1
	[0187.265] GetFileType (hFile=0x33c) returned 0x1
	[0187.265] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x6d4a, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434401 | out: pbBuffer=0x12434401) returned 1
	[0187.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434501 | out: pbBuffer=0x12434501) returned 1
	[0187.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434601 | out: pbBuffer=0x12434601) returned 1
	[0187.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410460 | out: pbBuffer=0x12410460) returned 1
	[0187.265] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\SF-t-xKEMAC- j_g.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\sf-t-xkemac- j_g.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0187.265] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0187.266] WriteFile (in: hFile=0x34c, lpBuffer=0x128e0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12727d0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0000*, lpNumberOfBytesWritten=0x12727d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.266] CloseHandle (hObject=0x34c) returned 1
	[0187.266] CloseHandle (hObject=0x33c) returned 1
	[0187.266] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\SF-t-xKEMAC- j_g.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\sf-t-xkemac- j_g.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\SF-t-xKEMAC- j_g.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\sf-t-xkemac- j_g.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.268] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\kPCs3In4upRQntu0Lx.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\kpcs3in4uprqntu0lx.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0187.269] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0187.269] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\kPCs3In4upRQntu0Lx.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\kpcs3in4uprqntu0lx.mp4"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb67dad0, ftCreationTime.dwHighDateTime=0x1d5d959, ftLastAccessTime.dwLowDateTime=0x93f574b0, ftLastAccessTime.dwHighDateTime=0x1d5dfd6, ftLastWriteTime.dwLowDateTime=0x93f574b0, ftLastWriteTime.dwHighDateTime=0x1d5dfd6, nFileSizeHigh=0x0, nFileSizeLow=0xdfca)) returned 1
	[0187.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e800 | out: pbBuffer=0x1240e800) returned 1
	[0187.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410478 | out: pbBuffer=0x12410478) returned 1
	[0187.269] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12767d1c*=0xdfca, lpOverlapped=0x0) returned 1
	[0187.297] GetFileType (hFile=0x33c) returned 0x1
	[0187.297] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.297] WriteFile (in: hFile=0x33c, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0xdfca, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x12767d00*=0xdfca, lpOverlapped=0x12767d0c) returned 1
	[0187.297] GetFileType (hFile=0x33c) returned 0x1
	[0187.297] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xdfca, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.297] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434701 | out: pbBuffer=0x12434701) returned 1
	[0187.297] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0187.298] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434901 | out: pbBuffer=0x12434901) returned 1
	[0187.298] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410540 | out: pbBuffer=0x12410540) returned 1
	[0187.298] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\kPCs3In4upRQntu0Lx.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\kpcs3in4uprqntu0lx.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0187.298] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0187.298] WriteFile (in: hFile=0x1e4, lpBuffer=0x128e0a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.298] CloseHandle (hObject=0x1e4) returned 1
	[0187.299] CloseHandle (hObject=0x33c) returned 1
	[0187.299] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\kPCs3In4upRQntu0Lx.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\kpcs3in4uprqntu0lx.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\kPCs3In4upRQntu0Lx.mp4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\kpcs3in4uprqntu0lx.mp4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\iA9TzO1cn.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ia9tzo1cn.flv"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44cd79f0, ftCreationTime.dwHighDateTime=0x1d5db49, ftLastAccessTime.dwLowDateTime=0xd42e9690, ftLastAccessTime.dwHighDateTime=0x1d5d9a2, ftLastWriteTime.dwLowDateTime=0xd42e9690, ftLastWriteTime.dwHighDateTime=0x1d5d9a2, nFileSizeHigh=0x0, nFileSizeLow=0x82f7)) returned 1
	[0187.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x8f389c20, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1
	[0187.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\iA9TzO1cn.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ia9tzo1cn.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0187.305] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0187.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\iA9TzO1cn.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ia9tzo1cn.flv"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44cd79f0, ftCreationTime.dwHighDateTime=0x1d5db49, ftLastAccessTime.dwLowDateTime=0xd42e9690, ftLastAccessTime.dwHighDateTime=0x1d5d9a2, ftLastWriteTime.dwLowDateTime=0xd42e9690, ftLastWriteTime.dwHighDateTime=0x1d5d9a2, nFileSizeHigh=0x0, nFileSizeLow=0x82f7)) returned 1
	[0187.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ed60 | out: pbBuffer=0x1240ed60) returned 1
	[0187.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410558 | out: pbBuffer=0x12410558) returned 1
	[0187.306] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12767d1c*=0x82f7, lpOverlapped=0x0) returned 1
	[0187.333] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0188.159] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0188.269] SetEvent (hEvent=0x2e8) returned 1
	[0188.269] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0188.270] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0188.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0188.270] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e820 | out: pbBuffer=0x1252e820) returned 1
	[0188.270] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ebd8 | out: pbBuffer=0x1251ebd8) returned 1
	[0188.271] ReadFile (in: hFile=0x344, lpBuffer=0x12904000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12904000*, lpNumberOfBytesRead=0x12767d1c*=0x7000, lpOverlapped=0x0) returned 1
	[0188.324] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0188.324] SetEvent (hEvent=0x320) returned 1
	[0188.324] GetFileType (hFile=0x344) returned 0x1
	[0188.324] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.324] WriteFile (in: hFile=0x344, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x12767d00*=0x7000, lpOverlapped=0x12767d0c) returned 1
	[0188.325] GetFileType (hFile=0x344) returned 0x1
	[0188.325] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x7000, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0188.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0188.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0188.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251eca0 | out: pbBuffer=0x1251eca0) returned 1
	[0188.326] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0188.326] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0188.326] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0188.326] CloseHandle (hObject=0x33c) returned 1
	[0188.326] CloseHandle (hObject=0x344) returned 1
	[0188.326] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0188.329] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0188.381] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0188.381] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0188.381] SetEvent (hEvent=0x320) returned 1
	[0188.381] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0188.436] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0188.436] GetFileType (hFile=0x2dc) returned 0x1
	[0188.436] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.436] WriteFile (in: hFile=0x2dc, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x12429d00*=0x7000, lpOverlapped=0x12429d0c) returned 1
	[0188.437] GetFileType (hFile=0x2dc) returned 0x1
	[0188.437] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x7000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0188.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0188.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0188.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0188.437] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0188.438] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0188.438] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0188.438] CloseHandle (hObject=0x33c) returned 1
	[0188.438] CloseHandle (hObject=0x2dc) returned 1
	[0188.438] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0188.490] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0188.696] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0188.697] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0188.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.697] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0188.697] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e708 | out: pbBuffer=0x1251e708) returned 1
	[0188.697] ReadFile (in: hFile=0x2dc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0188.697] CloseHandle (hObject=0x2dc) returned 1
	[0188.697] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0188.698] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0188.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0188.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e280 | out: pbBuffer=0x1252e280) returned 1
	[0188.698] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e718 | out: pbBuffer=0x1251e718) returned 1
	[0188.698] ReadFile (in: hFile=0x2dc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12769d1c*=0x43, lpOverlapped=0x0) returned 1
	[0188.700] GetFileType (hFile=0x2dc) returned 0x1
	[0188.700] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.700] WriteFile (in: hFile=0x2dc, lpBuffer=0x128e0320*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x128e0320*, lpNumberOfBytesWritten=0x12769d00*=0x43, lpOverlapped=0x12769d0c) returned 1
	[0188.700] GetFileType (hFile=0x2dc) returned 0x1
	[0188.700] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.701] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0188.701] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0188.701] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0188.701] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e8a0 | out: pbBuffer=0x1251e8a0) returned 1
	[0188.701] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0188.701] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0188.701] WriteFile (in: hFile=0x344, lpBuffer=0x12770500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12770500*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0188.702] CloseHandle (hObject=0x344) returned 1
	[0188.702] CloseHandle (hObject=0x2dc) returned 1
	[0188.702] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0189.466] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0189.467] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0189.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa9d0d0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0189.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0189.467] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744270 | out: pbBuffer=0x12744270) returned 1
	[0189.467] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x0
	[0189.521] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0189.521] SetEvent (hEvent=0x2e8) returned 1
	[0189.521] ReadFile (in: hFile=0x2dc, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x12429d1c*=0x8000, lpOverlapped=0x0) returned 1
	[0189.564] GetFileType (hFile=0x2dc) returned 0x1
	[0189.564] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0189.564] WriteFile (in: hFile=0x2dc, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x12429d00*=0x8000, lpOverlapped=0x12429d0c) returned 1
	[0189.565] GetFileType (hFile=0x2dc) returned 0x1
	[0189.565] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0189.565] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8901 | out: pbBuffer=0x127e8901) returned 1
	[0189.565] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a01 | out: pbBuffer=0x127e8a01) returned 1
	[0189.565] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0189.566] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744328 | out: pbBuffer=0x12744328) returned 1
	[0189.566] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0189.566] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0189.566] WriteFile (in: hFile=0x34c, lpBuffer=0x12838a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12838a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0189.566] CloseHandle (hObject=0x34c) returned 1
	[0189.567] CloseHandle (hObject=0x2dc) returned 1
	[0189.567] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0189.570] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0189.617] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0189.617] SetEvent (hEvent=0x2e8) returned 1
	[0189.617] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0189.663] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0189.663] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0189.702] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0189.702] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0189.703] SetEvent (hEvent=0xa0) returned 1
	[0189.704] SetEvent (hEvent=0x68) returned 1
	[0189.704] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0189.750] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0189.750] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0189.751] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0189.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff12e0f2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9)) returned 1
	[0189.752] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0189.752] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0189.752] ReadFile (in: hFile=0x2dc, lpBuffer=0x12904000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12904000*, lpNumberOfBytesRead=0x1276dd1c*=0x2fa9, lpOverlapped=0x0) returned 1
	[0189.806] GetFileType (hFile=0x2dc) returned 0x1
	[0189.806] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0189.806] WriteFile (in: hFile=0x2dc, lpBuffer=0x1298c000*, nNumberOfBytesToWrite=0x2fa9, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1298c000*, lpNumberOfBytesWritten=0x1276dd00*=0x2fa9, lpOverlapped=0x1276dd0c) returned 1
	[0189.806] GetFileType (hFile=0x2dc) returned 0x1
	[0189.806] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x2fa9, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0189.806] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0189.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0189.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0189.807] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0189.807] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0189.807] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0189.807] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0189.807] CloseHandle (hObject=0x344) returned 1
	[0189.807] CloseHandle (hObject=0x2dc) returned 1
	[0189.808] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.129] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0190.315] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0190.332] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0190.344] SetEvent (hEvent=0x30c) returned 1
	[0190.344] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.345] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0190.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1
	[0190.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0190.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0190.346] ReadFile (in: hFile=0x344, lpBuffer=0x12964000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12964000*, lpNumberOfBytesRead=0x1242bd1c*=0x504, lpOverlapped=0x0) returned 1
	[0190.353] GetFileType (hFile=0x344) returned 0x1
	[0190.353] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.353] WriteFile (in: hFile=0x344, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0x504, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x1242bd00*=0x504, lpOverlapped=0x1242bd0c) returned 1
	[0190.354] GetFileType (hFile=0x344) returned 0x1
	[0190.354] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x504, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.354] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0190.354] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0190.354] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0190.354] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e880 | out: pbBuffer=0x1251e880) returned 1
	[0190.355] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.355] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0190.355] WriteFile (in: hFile=0x33c, lpBuffer=0x12838500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12838500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.355] CloseHandle (hObject=0x33c) returned 1
	[0190.356] CloseHandle (hObject=0x344) returned 1
	[0190.357] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.411] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0190.437] SetEvent (hEvent=0x70) returned 1
	[0190.437] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.438] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1
	[0190.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0190.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410040 | out: pbBuffer=0x12410040) returned 1
	[0190.439] ReadFile (in: hFile=0x344, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1276dd1c*=0x410, lpOverlapped=0x0) returned 1
	[0190.442] GetFileType (hFile=0x344) returned 0x1
	[0190.442] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.442] WriteFile (in: hFile=0x344, lpBuffer=0x12490480*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12490480*, lpNumberOfBytesWritten=0x1276dd00*=0x410, lpOverlapped=0x1276dd0c) returned 1
	[0190.442] GetFileType (hFile=0x344) returned 0x1
	[0190.442] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x410, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec301 | out: pbBuffer=0x124ec301) returned 1
	[0190.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec401 | out: pbBuffer=0x124ec401) returned 1
	[0190.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec501 | out: pbBuffer=0x124ec501) returned 1
	[0190.443] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0190.443] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.443] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0190.443] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.444] CloseHandle (hObject=0x33c) returned 1
	[0190.445] CloseHandle (hObject=0x344) returned 1
	[0190.445] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.471] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0190.473] SetEvent (hEvent=0x70) returned 1
	[0190.473] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.474] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0190.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1
	[0190.474] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ed60 | out: pbBuffer=0x1240ed60) returned 1
	[0190.474] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104f0 | out: pbBuffer=0x124104f0) returned 1
	[0190.474] ReadFile (in: hFile=0x344, lpBuffer=0x12866000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12866000*, lpNumberOfBytesRead=0x12769d1c*=0x427, lpOverlapped=0x0) returned 1
	[0190.477] GetFileType (hFile=0x344) returned 0x1
	[0190.477] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.478] WriteFile (in: hFile=0x344, lpBuffer=0x12491680*, nNumberOfBytesToWrite=0x427, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12491680*, lpNumberOfBytesWritten=0x12769d00*=0x427, lpOverlapped=0x12769d0c) returned 1
	[0190.478] GetFileType (hFile=0x344) returned 0x1
	[0190.478] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x427, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0190.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed081 | out: pbBuffer=0x124ed081) returned 1
	[0190.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed181 | out: pbBuffer=0x124ed181) returned 1
	[0190.478] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105a8 | out: pbBuffer=0x124105a8) returned 1
	[0190.479] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.479] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0190.479] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.479] CloseHandle (hObject=0x33c) returned 1
	[0190.480] CloseHandle (hObject=0x344) returned 1
	[0190.481] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.590] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0190.594] SetEvent (hEvent=0x320) returned 1
	[0190.594] SwitchToThread () returned 1
	[0190.598] SetEvent (hEvent=0x320) returned 1
	[0190.598] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0190.631] SetEvent (hEvent=0x320) returned 1
	[0190.631] SetEvent (hEvent=0x70) returned 1
	[0190.631] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.632] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0190.632] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0190.632] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0190.633] ReadFile (in: hFile=0x34c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12767d1c*=0x104, lpOverlapped=0x0) returned 1
	[0190.667] GetFileType (hFile=0x34c) returned 0x1
	[0190.667] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.667] WriteFile (in: hFile=0x34c, lpBuffer=0x12514900*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12514900*, lpNumberOfBytesWritten=0x12767d00*=0x104, lpOverlapped=0x12767d0c) returned 1
	[0190.667] GetFileType (hFile=0x34c) returned 0x1
	[0190.668] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.668] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0190.668] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0190.668] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0190.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0190.669] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0190.669] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.669] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.669] CloseHandle (hObject=0x1e4) returned 1
	[0190.669] CloseHandle (hObject=0x34c) returned 1
	[0190.670] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.673] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0190.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.817] SetEvent (hEvent=0xa0) returned 1
	[0190.817] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0190.817] SetEvent (hEvent=0x80) returned 1
	[0190.818] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.818] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.822] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.822] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1
	[0190.822] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1
	[0190.822] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.822] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.824] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.824] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.827] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0190.827] WriteFile (in: hFile=0x33c, lpBuffer=0x1283e000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x1283e000*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0190.829] CloseHandle (hObject=0x33c) returned 1
	[0190.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\Preferred" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6404e40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0190.830] SetEvent (hEvent=0x80) returned 1
	[0190.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3111613574-2524581245-2586426736-500\\be5b4fbd-cb99-45f5-9462-5f896dd3a6b9"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0190.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.832] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.832] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.832] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.832] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1
	[0190.832] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.832] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.833] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.833] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.834] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0190.834] WriteFile (in: hFile=0x33c, lpBuffer=0x1283f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1283f300*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0190.836] CloseHandle (hObject=0x33c) returned 1
	[0190.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.836] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.837] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1
	[0190.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1
	[0190.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1
	[0190.837] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.837] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.837] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.837] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.839] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0190.839] WriteFile (in: hFile=0x33c, lpBuffer=0x12840600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12840600*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0190.840] CloseHandle (hObject=0x33c) returned 1
	[0190.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.852] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.852] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.852] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.852] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.852] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.853] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.853] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.854] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0190.854] WriteFile (in: hFile=0x33c, lpBuffer=0x1257a000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0190.856] CloseHandle (hObject=0x33c) returned 1
	[0190.856] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.857] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.857] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.857] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.857] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.857] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.858] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.858] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.860] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0190.861] WriteFile (in: hFile=0x33c, lpBuffer=0x1257b300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x1257b300*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0190.863] CloseHandle (hObject=0x33c) returned 1
	[0190.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.868] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.869] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x1276b8a0 | out: lpFindFileData=0x1276b8a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.869] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.869] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b8e4 | out: lpFindFileData=0x1276b8e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.869] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b568 | out: lpFileInformation=0x1276b568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.869] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.869] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.871] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b778 | out: lpMode=0x1276b778) returned 0
	[0190.871] WriteFile (in: hFile=0x33c, lpBuffer=0x1257c600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b778, lpOverlapped=0x0 | out: lpBuffer=0x1257c600*, lpNumberOfBytesWritten=0x1276b778*=0x1180, lpOverlapped=0x0) returned 1
	[0190.872] CloseHandle (hObject=0x33c) returned 1
	[0190.872] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.875] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.875] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.889] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.889] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7f4ba2, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0190.889] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatCache", cAlternateFileName="IECOMP~1")) returned 1
	[0190.889] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IETldCache", cAlternateFileName="IETLDC~1")) returned 1
	[0190.889] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0190.889] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Shortcuts", cAlternateFileName="NETWOR~1")) returned 1
	[0190.889] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda27f60, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Printer Shortcuts", cAlternateFileName="PRINTE~1")) returned 1
	[0190.889] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1
	[0190.889] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88b51cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0190.890] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0190.890] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x63dece0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0190.890] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda4e0ba, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0190.890] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6404e40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0190.890] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.890] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Application Data" (normalized: "c:\\users\\default\\application data"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.892] CreateFileW (lpFileName="C:\\Users\\Default\\Application Data" (normalized: "c:\\users\\default\\application data"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0190.892] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0190.892] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0190.892] CloseHandle (hObject=0x33c) returned 1
	[0190.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts" (normalized: "c:\\users\\default\\contacts"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.893] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts" (normalized: "c:\\users\\default\\contacts"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.893] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Contacts\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.893] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6392a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.893] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1
	[0190.893] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0190.893] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.893] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\contacts\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.894] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\contacts\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.894] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\contacts\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.895] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0190.895] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0190.897] CloseHandle (hObject=0x33c) returned 1
	[0190.897] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e)) returned 1
	[0190.898] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Contacts\\desktop.ini" (normalized: "c:\\users\\default\\contacts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1
	[0190.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Cookies" (normalized: "c:\\users\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306dce32, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306dce32, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306dce32, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.900] CreateFileW (lpFileName="C:\\Users\\Default\\Cookies" (normalized: "c:\\users\\default\\cookies"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0190.901] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0190.901] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0190.901] CloseHandle (hObject=0x33c) returned 1
	[0190.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Desktop" (normalized: "c:\\users\\default\\desktop"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.914] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop" (normalized: "c:\\users\\default\\desktop"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.914] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.915] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda4e0ba, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.915] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0190.915] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.915] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Desktop\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\desktop\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.915] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\desktop\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.915] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\desktop\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.917] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0190.917] WriteFile (in: hFile=0x344, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0190.924] CloseHandle (hObject=0x344) returned 1
	[0190.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Desktop\\desktop.ini" (normalized: "c:\\users\\default\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0190.925] SetEvent (hEvent=0x320) returned 1
	[0190.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents" (normalized: "c:\\users\\default\\documents"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.926] CreateFileW (lpFileName="C:\\Users\\Default\\Documents" (normalized: "c:\\users\\default\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.926] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.938] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.938] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0190.938] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0190.938] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0190.938] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0190.938] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.938] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\documents\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.940] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\documents\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.940] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\documents\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.945] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0190.945] WriteFile (in: hFile=0x344, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0190.947] CloseHandle (hObject=0x344) returned 1
	[0190.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music" (normalized: "c:\\users\\default\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.948] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music" (normalized: "c:\\users\\default\\documents\\my music"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x344
	[0190.949] GetFileInformationByHandle (in: hFile=0x344, lpFileInformation=0x1276bae8 | out: lpFileInformation=0x1276bae8) returned 1
	[0190.949] GetFileInformationByHandleEx (in: hFile=0x344, FileInformationClass=0x9, lpFileInformation=0x1276bae0, dwBufferSize=0x8 | out: lpFileInformation=0x1276bae0) returned 1
	[0190.949] CloseHandle (hObject=0x344) returned 1
	[0190.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures" (normalized: "c:\\users\\default\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.950] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Pictures" (normalized: "c:\\users\\default\\documents\\my pictures"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x344
	[0190.950] GetFileInformationByHandle (in: hFile=0x344, lpFileInformation=0x1276bae8 | out: lpFileInformation=0x1276bae8) returned 1
	[0190.950] GetFileInformationByHandleEx (in: hFile=0x344, FileInformationClass=0x9, lpFileInformation=0x1276bae0, dwBufferSize=0x8 | out: lpFileInformation=0x1276bae0) returned 1
	[0190.950] CloseHandle (hObject=0x344) returned 1
	[0190.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos" (normalized: "c:\\users\\default\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x306b6cd1, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x306b6cd1, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x306b6cd1, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.951] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Videos" (normalized: "c:\\users\\default\\documents\\my videos"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x344
	[0190.951] GetFileInformationByHandle (in: hFile=0x344, lpFileInformation=0x1276bae8 | out: lpFileInformation=0x1276bae8) returned 1
	[0190.951] GetFileInformationByHandleEx (in: hFile=0x344, FileInformationClass=0x9, lpFileInformation=0x1276bae0, dwBufferSize=0x8 | out: lpFileInformation=0x1276bae0) returned 1
	[0190.951] CloseHandle (hObject=0x344) returned 1
	[0190.951] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Pictures" (normalized: "c:\\users\\default\\documents\\my pictures"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.951] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0190.952] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Videos" (normalized: "c:\\users\\default\\documents\\my videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.952] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0190.952] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\desktop.ini" (normalized: "c:\\users\\default\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0190.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Downloads" (normalized: "c:\\users\\default\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.953] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads" (normalized: "c:\\users\\default\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.953] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.954] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.954] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0190.954] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.954] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.955] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Downloads\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\downloads\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.955] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\downloads\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.955] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\downloads\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.956] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0190.956] WriteFile (in: hFile=0x344, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0190.958] CloseHandle (hObject=0x344) returned 1
	[0190.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Downloads\\desktop.ini" (normalized: "c:\\users\\default\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd88db32b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0190.959] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\desktop.ini" (normalized: "c:\\users\\default\\documents\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.961] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0190.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Documents\\desktop.ini" (normalized: "c:\\users\\default\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd890148c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0190.962] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e1e0 | out: pbBuffer=0x1252e1e0) returned 1
	[0190.962] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e910 | out: pbBuffer=0x1251e910) returned 1
	[0190.962] ReadFile (in: hFile=0x344, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x192, lpOverlapped=0x0) returned 1
	[0190.963] GetFileType (hFile=0x344) returned 0x1
	[0190.964] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.964] WriteFile (in: hFile=0x344, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x12429d00*=0x192, lpOverlapped=0x12429d0c) returned 1
	[0190.964] GetFileType (hFile=0x344) returned 0x1
	[0190.964] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.964] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0190.965] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0190.965] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0190.965] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251eb48 | out: pbBuffer=0x1251eb48) returned 1
	[0190.965] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\desktop.ini" (normalized: "c:\\users\\default\\documents\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.965] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0190.965] WriteFile (in: hFile=0x33c, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.965] CloseHandle (hObject=0x33c) returned 1
	[0190.965] CloseHandle (hObject=0x344) returned 1
	[0190.965] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Documents\\desktop.ini" (normalized: "c:\\users\\default\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Documents\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\documents\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites" (normalized: "c:\\users\\default\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.979] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites" (normalized: "c:\\users\\default\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.979] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda9a36e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd888f06b, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0190.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0190.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1
	[0190.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1
	[0190.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1
	[0190.980] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.981] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.982] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.982] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.984] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0190.984] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0190.985] CloseHandle (hObject=0x33c) returned 1
	[0190.985] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links" (normalized: "c:\\users\\default\\favorites\\links"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.985] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links" (normalized: "c:\\users\\default\\favorites\\links"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.986] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.986] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeffd5f0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.986] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0190.986] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1
	[0190.986] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.986] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.986] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\links\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.986] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\links\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.986] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\links\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.987] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0190.987] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0190.988] CloseHandle (hObject=0x33c) returned 1
	[0190.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb11062, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0190.991] SetEvent (hEvent=0x2e8) returned 1
	[0190.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1
	[0190.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites" (normalized: "c:\\users\\default\\favorites\\msn websites"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.993] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites" (normalized: "c:\\users\\default\\favorites\\msn websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.993] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0191.001] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.001] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
	[0191.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
	[0191.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
	[0191.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
	[0191.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
	[0191.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
	[0191.002] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0191.002] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0191.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\msn websites\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0191.004] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\msn websites\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0191.004] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\msn websites\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.006] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0191.006] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0191.008] CloseHandle (hObject=0x33c) returned 1
	[0191.008] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.010] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.010] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0191.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e9ad0 | out: lpFileInformation=0x125e9ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfefb1330, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1
	[0191.011] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e600 | out: pbBuffer=0x1252e600) returned 1
	[0191.011] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ec98 | out: pbBuffer=0x1251ec98) returned 1
	[0191.011] ReadFile (in: hFile=0x33c, lpBuffer=0x12944000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12944000*, lpNumberOfBytesRead=0x125e9d1c*=0x50, lpOverlapped=0x0) returned 1
	[0191.012] GetFileType (hFile=0x33c) returned 0x1
	[0191.012] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.013] WriteFile (in: hFile=0x33c, lpBuffer=0x1271abe0*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x125e9d00, lpOverlapped=0x125e9d0c | out: lpBuffer=0x1271abe0*, lpNumberOfBytesWritten=0x125e9d00*=0x50, lpOverlapped=0x125e9d0c) returned 1
	[0191.013] GetFileType (hFile=0x33c) returned 0x1
	[0191.013] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0191.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0191.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0191.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ed90 | out: pbBuffer=0x1251ed90) returned 1
	[0191.013] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0191.014] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0191.014] WriteFile (in: hFile=0x1e4, lpBuffer=0x12618500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12618500*, lpNumberOfBytesWritten=0x125e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.014] CloseHandle (hObject=0x1e4) returned 1
	[0191.017] CloseHandle (hObject=0x33c) returned 1
	[0191.019] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.299] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0191.299] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0191.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1
	[0191.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0191.299] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104e0 | out: pbBuffer=0x124104e0) returned 1
	[0191.299] ReadFile (in: hFile=0x2dc, lpBuffer=0x1283c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1283c000*, lpNumberOfBytesRead=0x125e5d1c*=0x86, lpOverlapped=0x0) returned 1
	[0191.300] GetFileType (hFile=0x2dc) returned 0x1
	[0191.301] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.301] WriteFile (in: hFile=0x2dc, lpBuffer=0x1262f050*, nNumberOfBytesToWrite=0x86, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x1262f050*, lpNumberOfBytesWritten=0x125e5d00*=0x86, lpOverlapped=0x125e5d0c) returned 1
	[0191.301] GetFileType (hFile=0x2dc) returned 0x1
	[0191.301] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x86, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0191.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0191.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0191.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410598 | out: pbBuffer=0x12410598) returned 1
	[0191.301] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0191.301] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0191.301] WriteFile (in: hFile=0x34c, lpBuffer=0x12628f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628f00*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.302] CloseHandle (hObject=0x34c) returned 1
	[0191.302] CloseHandle (hObject=0x2dc) returned 1
	[0191.302] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.303] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0191.304] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0191.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.304] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0191.304] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0191.304] ReadFile (in: hFile=0x2dc, lpBuffer=0x1287c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1287c000*, lpNumberOfBytesRead=0x12767d1c*=0x85, lpOverlapped=0x0) returned 1
	[0191.307] GetFileType (hFile=0x2dc) returned 0x1
	[0191.307] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.307] WriteFile (in: hFile=0x2dc, lpBuffer=0x1262fb00*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1262fb00*, lpNumberOfBytesWritten=0x12767d00*=0x85, lpOverlapped=0x12767d0c) returned 1
	[0191.307] GetFileType (hFile=0x2dc) returned 0x1
	[0191.307] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.307] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f01 | out: pbBuffer=0x12400f01) returned 1
	[0191.308] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401001 | out: pbBuffer=0x12401001) returned 1
	[0191.308] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401101 | out: pbBuffer=0x12401101) returned 1
	[0191.308] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106b8 | out: pbBuffer=0x124106b8) returned 1
	[0191.308] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0191.308] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0191.308] WriteFile (in: hFile=0x34c, lpBuffer=0x12629400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12629400*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.309] CloseHandle (hObject=0x34c) returned 1
	[0191.309] CloseHandle (hObject=0x2dc) returned 1
	[0191.309] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.318] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0191.563] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0191.722] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0191.804] SetEvent (hEvent=0x2e8) returned 1
	[0191.804] SetEvent (hEvent=0x320) returned 1
	[0191.804] ReadFile (in: hFile=0x33c, lpBuffer=0x12964000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12964000*, lpNumberOfBytesRead=0x12769d1c*=0x1f8, lpOverlapped=0x0) returned 1
	[0191.808] GetFileType (hFile=0x33c) returned 0x1
	[0191.808] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.808] WriteFile (in: hFile=0x33c, lpBuffer=0x1244a000*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1244a000*, lpNumberOfBytesWritten=0x12769d00*=0x1f8, lpOverlapped=0x12769d0c) returned 1
	[0191.808] GetFileType (hFile=0x33c) returned 0x1
	[0191.808] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1f8, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0191.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0191.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0191.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0191.809] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\desktop.ini" (normalized: "c:\\users\\default\\music\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0191.809] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0191.809] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.810] CloseHandle (hObject=0x2dc) returned 1
	[0191.810] CloseHandle (hObject=0x33c) returned 1
	[0191.810] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Music\\desktop.ini" (normalized: "c:\\users\\default\\music\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Music\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\music\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.813] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.813] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0191.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc103692e, ftCreationTime.dwHighDateTime=0x1ca0451, ftLastAccessTime.dwLowDateTime=0x1dd1880d, ftLastAccessTime.dwHighDateTime=0x1cbf8ec, ftLastWriteTime.dwLowDateTime=0x1dd1880d, ftLastWriteTime.dwHighDateTime=0x1cbf8ec, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1
	[0191.814] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0191.814] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0191.814] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12769d1c*=0x400, lpOverlapped=0x0) returned 1
	[0191.887] GetFileType (hFile=0x33c) returned 0x1
	[0191.887] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.887] WriteFile (in: hFile=0x33c, lpBuffer=0x12498400*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12498400*, lpNumberOfBytesWritten=0x12769d00*=0x400, lpOverlapped=0x12769d0c) returned 1
	[0191.888] GetFileType (hFile=0x33c) returned 0x1
	[0191.888] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x400, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.888] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0191.888] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0191.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0191.889] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0191.889] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0191.889] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0191.889] WriteFile (in: hFile=0x1e4, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.889] CloseHandle (hObject=0x1e4) returned 1
	[0191.889] CloseHandle (hObject=0x33c) returned 1
	[0191.889] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\ntuser.dat.log.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.891] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.892] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0191.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xf8da2d3a, ftCreationTime.dwHighDateTime=0x1ca043d, ftLastAccessTime.dwLowDateTime=0xf8da2d3a, ftLastAccessTime.dwHighDateTime=0x1ca043d, ftLastWriteTime.dwLowDateTime=0xf8e8757c, ftLastWriteTime.dwHighDateTime=0x1ca043d, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1
	[0191.892] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0191.892] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0191.892] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0191.892] SetEvent (hEvent=0x80) returned 1
	[0191.893] ReadFile (in: hFile=0x33c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x12769d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0191.963] GetFileType (hFile=0x33c) returned 0x1
	[0191.963] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.963] WriteFile (in: hFile=0x33c, lpBuffer=0x126b4000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x126b4000*, lpNumberOfBytesWritten=0x12769d00*=0x20000, lpOverlapped=0x12769d0c) returned 1
	[0191.963] GetFileType (hFile=0x33c) returned 0x1
	[0191.963] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.964] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d01 | out: pbBuffer=0x127e8d01) returned 1
	[0191.964] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e01 | out: pbBuffer=0x127e8e01) returned 1
	[0191.964] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127884f0 | out: pbBuffer=0x127884f0) returned 1
	[0191.964] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0191.964] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0191.964] WriteFile (in: hFile=0x344, lpBuffer=0x12604000*, nNumberOfBytesToWrite=0x1ca, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12604000*, lpNumberOfBytesWritten=0x12769d0c*=0x1ca, lpOverlapped=0x0) returned 1
	[0191.966] CloseHandle (hObject=0x344) returned 1
	[0192.004] CloseHandle (hObject=0x33c) returned 1
	[0192.004] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.007] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0192.386] SetEvent (hEvent=0x68) returned 1
	[0192.386] CreateFileW (lpFileName="C:\\Users\\Default\\NetHood" (normalized: "c:\\users\\default\\nethood"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.386] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x12769a44 | out: lpFindFileData=0x12769a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0192.387] CreateFileW (lpFileName="C:\\Users\\Default\\Recent" (normalized: "c:\\users\\default\\recent"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.387] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x125e7a44 | out: lpFindFileData=0x125e7a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0192.387] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\desktop.ini" (normalized: "c:\\users\\default\\saved games\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0192.388] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0192.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Saved Games\\desktop.ini" (normalized: "c:\\users\\default\\saved games\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd894d74c, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0192.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0192.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410048 | out: pbBuffer=0x12410048) returned 1
	[0192.388] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x125e5d1c*=0x11a, lpOverlapped=0x0) returned 1
	[0192.390] GetFileType (hFile=0x33c) returned 0x1
	[0192.390] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.390] WriteFile (in: hFile=0x33c, lpBuffer=0x124fa000*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x124fa000*, lpNumberOfBytesWritten=0x125e5d00*=0x11a, lpOverlapped=0x125e5d0c) returned 1
	[0192.390] GetFileType (hFile=0x33c) returned 0x1
	[0192.391] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.391] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0192.391] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0192.391] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0192.391] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103d0 | out: pbBuffer=0x124103d0) returned 1
	[0192.391] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\desktop.ini" (normalized: "c:\\users\\default\\saved games\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0192.391] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0192.392] WriteFile (in: hFile=0x344, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0192.392] CloseHandle (hObject=0x344) returned 1
	[0192.392] CloseHandle (hObject=0x33c) returned 1
	[0192.392] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Saved Games\\desktop.ini" (normalized: "c:\\users\\default\\saved games\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Saved Games\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\saved games\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.599] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0192.600] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0192.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7df21ca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7df21ca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7df21ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8d1)) returned 1
	[0192.600] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0192.600] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104f8 | out: pbBuffer=0x124104f8) returned 1
	[0192.600] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0192.636] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0192.636] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb28, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb28, ulNumEntriesRemoved=0x33e7fb0c) returned 0
	[0192.636] SetEvent (hEvent=0xa0) returned 1
	[0192.636] SetEvent (hEvent=0x70) returned 1
	[0192.637] ReadFile (in: hFile=0x33c, lpBuffer=0x128e4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e4000*, lpNumberOfBytesRead=0x125e5d1c*=0x8d1, lpOverlapped=0x0) returned 1
	[0192.750] GetFileType (hFile=0x33c) returned 0x1
	[0192.750] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.751] WriteFile (in: hFile=0x33c, lpBuffer=0x12494900*, nNumberOfBytesToWrite=0x8d1, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x12494900*, lpNumberOfBytesWritten=0x125e5d00*=0x8d1, lpOverlapped=0x125e5d0c) returned 1
	[0192.751] GetFileType (hFile=0x33c) returned 0x1
	[0192.751] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x8d1, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0192.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9281 | out: pbBuffer=0x127e9281) returned 1
	[0192.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9381 | out: pbBuffer=0x127e9381) returned 1
	[0192.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9481 | out: pbBuffer=0x127e9481) returned 1
	[0192.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127886f0 | out: pbBuffer=0x127886f0) returned 1
	[0192.751] CreateFileW (lpFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0192.752] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0192.752] WriteFile (in: hFile=0x344, lpBuffer=0x124f0500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x124f0500*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0192.752] CloseHandle (hObject=0x344) returned 1
	[0192.753] CloseHandle (hObject=0x33c) returned 1
	[0192.754] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk"), lpNewFileName="C:\\Users\\Public\\Desktop\\Google Chrome.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\desktop\\google chrome.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0192.817] SetEvent (hEvent=0x68) returned 1
	[0192.817] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0192.899] SetEvent (hEvent=0x68) returned 1
	[0192.899] SetEvent (hEvent=0x2e8) returned 1
	[0192.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\Mozilla Firefox.lnk" (normalized: "c:\\users\\public\\desktop\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0a09a40, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb0a09a40, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb0a09a40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x485)) returned 1
	[0192.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Desktop\\desktop.ini" (normalized: "c:\\users\\public\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2826d6cd, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2826d6cd, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28860dd8, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0192.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents" (normalized: "c:\\users\\public\\documents"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.902] CreateFileW (lpFileName="C:\\Users\\Public\\Documents" (normalized: "c:\\users\\public\\documents"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.902] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0192.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0192.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0192.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0192.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0192.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0192.988] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0192.988] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0192.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\documents\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0192.990] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\documents\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0192.991] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\documents\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0192.992] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0192.992] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0192.994] CloseHandle (hObject=0x33c) returned 1
	[0192.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music" (normalized: "c:\\users\\public\\documents\\my music"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.995] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Music" (normalized: "c:\\users\\public\\documents\\my music"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0192.995] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bae8 | out: lpFileInformation=0x1276bae8) returned 1
	[0192.995] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bae0, dwBufferSize=0x8 | out: lpFileInformation=0x1276bae0) returned 1
	[0192.995] CloseHandle (hObject=0x33c) returned 1
	[0192.995] SetEvent (hEvent=0x320) returned 1
	[0192.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures" (normalized: "c:\\users\\public\\documents\\my pictures"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.996] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Pictures" (normalized: "c:\\users\\public\\documents\\my pictures"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0192.996] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bae8 | out: lpFileInformation=0x1276bae8) returned 1
	[0192.996] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bae0, dwBufferSize=0x8 | out: lpFileInformation=0x1276bae0) returned 1
	[0192.996] CloseHandle (hObject=0x33c) returned 1
	[0192.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos" (normalized: "c:\\users\\public\\documents\\my videos"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x3079b513, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3079b513, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3079b513, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0192.997] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Videos" (normalized: "c:\\users\\public\\documents\\my videos"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0192.997] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276bae8 | out: lpFileInformation=0x1276bae8) returned 1
	[0192.997] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276bae0, dwBufferSize=0x8 | out: lpFileInformation=0x1276bae0) returned 1
	[0192.997] CloseHandle (hObject=0x33c) returned 1
	[0192.997] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1
	[0192.998] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\My Videos" (normalized: "c:\\users\\public\\documents\\my videos"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0192.998] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x12429a44 | out: lpFindFileData=0x12429a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0192.998] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0192.999] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0192.999] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28697d55, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28697d55, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x116)) returned 1
	[0192.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c060 | out: pbBuffer=0x1244c060) returned 1
	[0192.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788098 | out: pbBuffer=0x12788098) returned 1
	[0192.999] ReadFile (in: hFile=0x33c, lpBuffer=0x12944000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12944000*, lpNumberOfBytesRead=0x12429d1c*=0x116, lpOverlapped=0x0) returned 1
	[0193.000] GetFileType (hFile=0x33c) returned 0x1
	[0193.000] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0193.000] WriteFile (in: hFile=0x33c, lpBuffer=0x127da000*, nNumberOfBytesToWrite=0x116, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127da000*, lpNumberOfBytesWritten=0x12429d00*=0x116, lpOverlapped=0x12429d0c) returned 1
	[0193.000] GetFileType (hFile=0x33c) returned 0x1
	[0193.001] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x116, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0193.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0193.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0193.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0193.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788150 | out: pbBuffer=0x12788150) returned 1
	[0193.001] CreateFileW (lpFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0193.001] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0193.001] WriteFile (in: hFile=0x34c, lpBuffer=0x124f0a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x124f0a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0193.001] CloseHandle (hObject=0x34c) returned 1
	[0193.001] CloseHandle (hObject=0x33c) returned 1
	[0193.002] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Documents\\desktop.ini" (normalized: "c:\\users\\public\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Documents\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\documents\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0193.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads" (normalized: "c:\\users\\public\\downloads"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0193.005] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads" (normalized: "c:\\users\\public\\downloads"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0193.006] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0193.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0193.006] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0193.006] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0193.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\downloads\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0193.006] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\downloads\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0193.006] CreateFileW (lpFileName="C:\\Users\\Public\\Downloads\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\downloads\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0193.009] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0193.009] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0193.010] CloseHandle (hObject=0x33c) returned 1
	[0193.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Downloads\\desktop.ini" (normalized: "c:\\users\\public\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28351f0f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28351f0f, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae)) returned 1
	[0193.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Favorites" (normalized: "c:\\users\\public\\favorites"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0193.013] CreateFileW (lpFileName="C:\\Users\\Public\\Favorites" (normalized: "c:\\users\\public\\favorites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0193.013] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Favorites\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0193.013] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdae6622, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfdae6622, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaee7d305, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.013] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0193.013] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0193.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Favorites\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\favorites\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0193.014] CreateFileW (lpFileName="C:\\Users\\Public\\Favorites\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\favorites\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0193.014] CreateFileW (lpFileName="C:\\Users\\Public\\Favorites\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\favorites\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0193.015] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0193.015] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0193.017] CloseHandle (hObject=0x33c) returned 1
	[0193.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries" (normalized: "c:\\users\\public\\libraries"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0193.018] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries" (normalized: "c:\\users\\public\\libraries"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0193.019] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0193.019] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28a29e5c, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.019] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0193.019] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1
	[0193.019] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0193.019] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0193.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\libraries\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0193.019] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\libraries\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0193.019] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\libraries\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0193.127] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0193.127] WriteFile (in: hFile=0x344, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0193.128] CloseHandle (hObject=0x344) returned 1
	[0193.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c)) returned 1
	[0193.129] SetEvent (hEvent=0x320) returned 1
	[0193.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\desktop.ini" (normalized: "c:\\users\\public\\libraries\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2839e1d0, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x2839e1d0, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288f9359, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x58)) returned 1
	[0193.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music" (normalized: "c:\\users\\public\\music"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0193.131] CreateFileW (lpFileName="C:\\Users\\Public\\Music" (normalized: "c:\\users\\public\\music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0193.132] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0193.132] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.132] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0193.132] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Music", cAlternateFileName="SAMPLE~1")) returned 1
	[0193.132] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0193.132] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0193.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\music\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0193.132] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\music\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0193.132] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\music\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0193.133] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0193.134] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0193.135] CloseHandle (hObject=0x344) returned 1
	[0193.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music" (normalized: "c:\\users\\public\\music\\sample music"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0193.135] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music" (normalized: "c:\\users\\public\\music\\sample music"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0193.135] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0193.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x8031a7b6, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0193.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0193.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kalimba.mp3", cAlternateFileName="")) returned 1
	[0193.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maid with the Flaxen Hair.mp3", cAlternateFileName="MAIDWI~1.MP3")) returned 1
	[0193.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sleep Away.mp3", cAlternateFileName="SLEEPA~1.MP3")) returned 1
	[0193.316] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0193.316] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0193.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\music\\sample music\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0193.318] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\music\\sample music\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0193.318] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\music\\sample music\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0194.027] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0194.027] WriteFile (in: hFile=0x344, lpBuffer=0x12770000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12770000*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0194.112] CloseHandle (hObject=0x344) returned 1
	[0194.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Kalimba.mp3" (normalized: "c:\\users\\public\\music\\sample music\\kalimba.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be5ebf7, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8064f1)) returned 1
	[0194.451] SetEvent (hEvent=0x68) returned 1
	[0194.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Maid with the Flaxen Hair.mp3" (normalized: "c:\\users\\public\\music\\sample music\\maid with the flaxen hair.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be5ebf7, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3ec5d2)) returned 1
	[0194.452] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459)) returned 1
	[0194.455] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a)) returned 1
	[0194.457] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0194.458] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0194.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be38a97, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be38a97, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x49e459)) returned 1
	[0194.458] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732780 | out: pbBuffer=0x12732780) returned 1
	[0194.458] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e808 | out: pbBuffer=0x1251e808) returned 1
	[0194.458] ReadFile (in: hFile=0x33c, lpBuffer=0x12964000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12964000*, lpNumberOfBytesRead=0x12769d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0194.512] GetFileType (hFile=0x33c) returned 0x1
	[0194.513] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.513] WriteFile (in: hFile=0x33c, lpBuffer=0x1259a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1259a000*, lpNumberOfBytesWritten=0x12769d00*=0x20000, lpOverlapped=0x12769d0c) returned 1
	[0194.668] GetFileType (hFile=0x33c) returned 0x1
	[0194.668] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0194.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0194.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0194.669] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127443a0 | out: pbBuffer=0x127443a0) returned 1
	[0194.670] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0194.670] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0194.670] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0194.712] CloseHandle (hObject=0x1e4) returned 1
	[0194.712] CloseHandle (hObject=0x33c) returned 1
	[0194.712] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\Sleep Away.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\music\\sample music\\sleep away.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0194.715] SetEvent (hEvent=0x2e8) returned 1
	[0194.718] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0194.718] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0194.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x24a)) returned 1
	[0194.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0194.719] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443c8 | out: pbBuffer=0x127443c8) returned 1
	[0194.719] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x12769d1c*=0x24a, lpOverlapped=0x0) returned 1
	[0194.720] GetFileType (hFile=0x33c) returned 0x1
	[0194.720] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.720] WriteFile (in: hFile=0x33c, lpBuffer=0x12623900*, nNumberOfBytesToWrite=0x24a, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12623900*, lpNumberOfBytesWritten=0x12769d00*=0x24a, lpOverlapped=0x12769d0c) returned 1
	[0194.721] GetFileType (hFile=0x33c) returned 0x1
	[0194.721] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x24a, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0194.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0194.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d01 | out: pbBuffer=0x127e8d01) returned 1
	[0194.722] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744480 | out: pbBuffer=0x12744480) returned 1
	[0194.722] CreateFileW (lpFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0194.722] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0194.722] WriteFile (in: hFile=0x1e4, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0194.722] CloseHandle (hObject=0x1e4) returned 1
	[0194.722] CloseHandle (hObject=0x33c) returned 1
	[0194.722] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Music\\Sample Music\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\music\\sample music\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0194.724] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0194.762] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0194.803] SetEvent (hEvent=0x68) returned 1
	[0194.803] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0194.804] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0194.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875)) returned 1
	[0194.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c220 | out: pbBuffer=0x1244c220) returned 1
	[0194.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0194.804] ReadFile (in: hFile=0x33c, lpBuffer=0x127ae000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127ae000*, lpNumberOfBytesRead=0x1276dd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0194.846] GetFileType (hFile=0x33c) returned 0x1
	[0194.846] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.846] WriteFile (in: hFile=0x33c, lpBuffer=0x12924000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12924000*, lpNumberOfBytesWritten=0x1276dd00*=0x20000, lpOverlapped=0x1276dd0c) returned 1
	[0194.847] GetFileType (hFile=0x33c) returned 0x1
	[0194.847] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0194.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0194.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0194.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744188 | out: pbBuffer=0x12744188) returned 1
	[0194.848] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0194.848] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0194.848] WriteFile (in: hFile=0x350, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0194.860] CloseHandle (hObject=0x350) returned 1
	[0195.198] CloseHandle (hObject=0x33c) returned 1
	[0195.199] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0195.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Lighthouse.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\lighthouse.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c)) returned 1
	[0195.247] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0195.327] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0195.341] SetEvent (hEvent=0x2e8) returned 1
	[0195.341] SetEvent (hEvent=0x68) returned 1
	[0195.341] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0195.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Penguins.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\penguins.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b)) returned 1
	[0195.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958)) returned 1
	[0195.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1
	[0195.347] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0195.348] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0195.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958)) returned 1
	[0195.348] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0195.348] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788020 | out: pbBuffer=0x12788020) returned 1
	[0195.348] ReadFile (in: hFile=0x2dc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12769d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0196.195] SetEvent (hEvent=0xa0) returned 1
	[0196.196] GetFileType (hFile=0x2dc) returned 0x1
	[0196.196] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.196] WriteFile (in: hFile=0x2dc, lpBuffer=0x128e4000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x128e4000*, lpNumberOfBytesWritten=0x12769d00*=0x20000, lpOverlapped=0x12769d0c) returned 1
	[0196.197] GetFileType (hFile=0x2dc) returned 0x1
	[0196.197] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.197] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0196.197] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0196.197] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d01 | out: pbBuffer=0x12434d01) returned 1
	[0196.198] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788340 | out: pbBuffer=0x12788340) returned 1
	[0196.198] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0196.198] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0196.198] WriteFile (in: hFile=0x2cc, lpBuffer=0x127aaa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x127aaa00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0196.276] CloseHandle (hObject=0x2cc) returned 1
	[0196.276] CloseHandle (hObject=0x2dc) returned 1
	[0196.276] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg"), lpNewFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Tulips.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\pictures\\sample pictures\\tulips.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0196.278] SetEvent (hEvent=0x320) returned 1
	[0196.278] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0196.279] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0196.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1
	[0196.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c700 | out: pbBuffer=0x1244c700) returned 1
	[0196.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788358 | out: pbBuffer=0x12788358) returned 1
	[0196.280] ReadFile (in: hFile=0x2dc, lpBuffer=0x12944000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12944000*, lpNumberOfBytesRead=0x12769d1c*=0x50, lpOverlapped=0x0) returned 1
	[0196.281] GetFileType (hFile=0x2dc) returned 0x1
	[0196.281] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.281] WriteFile (in: hFile=0x2dc, lpBuffer=0x124144b0*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x124144b0*, lpNumberOfBytesWritten=0x12769d00*=0x50, lpOverlapped=0x12769d0c) returned 1
	[0196.281] GetFileType (hFile=0x2dc) returned 0x1
	[0196.281] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x50, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.281] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f01 | out: pbBuffer=0x12434f01) returned 1
	[0196.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435001 | out: pbBuffer=0x12435001) returned 1
	[0196.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435101 | out: pbBuffer=0x12435101) returned 1
	[0196.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788420 | out: pbBuffer=0x12788420) returned 1
	[0196.282] CreateFileW (lpFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0196.282] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0196.282] WriteFile (in: hFile=0x2cc, lpBuffer=0x127ab400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ab400*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0196.282] CloseHandle (hObject=0x2cc) returned 1
	[0196.282] CloseHandle (hObject=0x2dc) returned 1
	[0196.282] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0196.458] SetEvent (hEvent=0x320) returned 1
	[0196.458] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0196.594] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0196.594] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0196.643] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0196.643] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0196.678] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0196.678] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33e7fb30, ulCount=0x10, ulNumEntriesRemoved=0x33e7fb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33e7fb30, ulNumEntriesRemoved=0x33e7fb14) returned 0
	[0196.678] SetEvent (hEvent=0x68) returned 1
	[0196.679] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0x1) returned 0x102
	[0196.738] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0196.738] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0196.739] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0196.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e9ad0 | out: lpFileInformation=0x125e9ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0196.739] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0196.739] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0196.739] ReadFile (in: hFile=0x354, lpBuffer=0x12990000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12990000*, lpNumberOfBytesRead=0x125e9d1c*=0x146, lpOverlapped=0x0) returned 1
	[0196.741] GetFileType (hFile=0x354) returned 0x1
	[0196.741] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.741] WriteFile (in: hFile=0x354, lpBuffer=0x1247c580*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x125e9d00, lpOverlapped=0x125e9d0c | out: lpBuffer=0x1247c580*, lpNumberOfBytesWritten=0x125e9d00*=0x146, lpOverlapped=0x125e9d0c) returned 1
	[0196.741] GetFileType (hFile=0x354) returned 0x1
	[0196.741] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x146, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0196.741] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0196.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0196.742] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0196.742] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0196.742] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0196.742] WriteFile (in: hFile=0x1e4, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x125e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0196.742] CloseHandle (hObject=0x1e4) returned 1
	[0196.742] CloseHandle (hObject=0x354) returned 1
	[0196.742] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0196.744] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0196.745] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0196.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x125e5ad0 | out: lpFileInformation=0x125e5ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1
	[0196.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0196.745] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0196.745] ReadFile (in: hFile=0x354, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x125e5d1c*=0x17c, lpOverlapped=0x0) returned 1
	[0196.747] GetFileType (hFile=0x354) returned 0x1
	[0196.747] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.747] WriteFile (in: hFile=0x354, lpBuffer=0x1261e000*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x125e5d00, lpOverlapped=0x125e5d0c | out: lpBuffer=0x1261e000*, lpNumberOfBytesWritten=0x125e5d00*=0x17c, lpOverlapped=0x125e5d0c) returned 1
	[0196.747] GetFileType (hFile=0x354) returned 0x1
	[0196.747] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x17c, lpNewFilePointer=0x0, dwMoveMethod=0x125e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0196.747] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0196.747] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0196.747] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0196.747] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0196.748] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0196.748] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x125e5d0c | out: lpMode=0x125e5d0c) returned 0
	[0196.748] WriteFile (in: hFile=0x1e4, lpBuffer=0x127e2a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2a00*, lpNumberOfBytesWritten=0x125e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0196.748] CloseHandle (hObject=0x1e4) returned 1
	[0196.748] CloseHandle (hObject=0x354) returned 1
	[0196.748] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\Public\\Videos\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\videos\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0196.789] SetEvent (hEvent=0x68) returned 1
	[0196.789] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0199.481] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) returned 0x0
	[0209.609] WaitForSingleObject (hHandle=0x318, dwMilliseconds=0xffffffff) 

Thread:
	id = 56
	os_tid = 0x9c0

	[0107.869] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x33fbff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x33fbff38*=0x314) returned 1
	[0107.869] VirtualQuery (in: lpAddress=0x33fbff48, lpBuffer=0x33fbff48, dwLength=0x1c | out: lpBuffer=0x33fbff48*(BaseAddress=0x33fbf000, AllocationBase=0x33ec0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0107.869] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x320
	[0107.870] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0107.913] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0107.934] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0107.993] SwitchToThread () returned 1
	[0108.036] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0108.112] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0108.112] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0108.215] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0108.216] SetEvent (hEvent=0x308) returned 1
	[0108.216] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0108.270] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0108.271] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334
	[0108.271] GetConsoleMode (in: hConsoleHandle=0x334, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0108.271] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xecdfa490, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1
	[0108.272] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0108.272] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0108.277] ReadFile (in: hFile=0x334, lpBuffer=0x1270e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1270e000*, lpNumberOfBytesRead=0x12429d1c*=0x61d, lpOverlapped=0x0) returned 1
	[0108.782] GetFileType (hFile=0x334) returned 0x1
	[0108.782] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0108.782] WriteFile (in: hFile=0x334, lpBuffer=0x12518700*, nNumberOfBytesToWrite=0x61d, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12518700*, lpNumberOfBytesWritten=0x12429d00*=0x61d, lpOverlapped=0x12429d0c) returned 1
	[0108.783] GetFileType (hFile=0x334) returned 0x1
	[0108.783] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x61d, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0108.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0108.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0108.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0108.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0108.788] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0108.788] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0108.788] WriteFile (in: hFile=0x338, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0108.788] CloseHandle (hObject=0x338) returned 1
	[0108.790] CloseHandle (hObject=0x334) returned 1
	[0108.790] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0016-0409-1000-0000000FF1CE}-C\\ExcelMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0016-0409-1000-0000000ff1ce}-c\\excelmui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0108.791] SetEvent (hEvent=0x70) returned 1
	[0108.791] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x334
	[0108.791] GetConsoleMode (in: hConsoleHandle=0x334, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0108.791] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e02ab00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3e02ab00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe874f770, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x263400)) returned 1
	[0108.791] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0108.791] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0108.793] ReadFile (in: hFile=0x334, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0109.049] GetFileType (hFile=0x334) returned 0x1
	[0109.049] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0109.050] WriteFile (in: hFile=0x334, lpBuffer=0x12694000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12694000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0109.050] GetFileType (hFile=0x334) returned 0x1
	[0109.051] SetFilePointerEx (in: hFile=0x334, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0109.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0109.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0109.051] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0109.052] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410580 | out: pbBuffer=0x12410580) returned 1
	[0109.052] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0109.052] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0109.052] WriteFile (in: hFile=0x338, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0109.139] CloseHandle (hObject=0x338) returned 1
	[0109.380] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0109.511] CloseHandle (hObject=0x334) returned 1
	[0109.511] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0018-0409-1000-0000000FF1CE}-C\\PowerPointMUI.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0018-0409-1000-0000000ff1ce}-c\\powerpointmui.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0109.513] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0109.910] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfad4, ulCount=0x10, ulNumEntriesRemoved=0x33fbfab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfad4, ulNumEntriesRemoved=0x33fbfab8) returned 0
	[0109.910] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfad4, ulCount=0x10, ulNumEntriesRemoved=0x33fbfab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfad4, ulNumEntriesRemoved=0x33fbfab8) returned 1
	[0121.144] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x33fbfab4, fWait=0, lpdwFlags=0x33fbfac4 | out: lpcbTransfer=0x33fbfab4, lpdwFlags=0x33fbfac4) returned 1
	[0121.145] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.214] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.219] SetEvent (hEvent=0x80) returned 1
	[0121.219] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.239] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.240] SetEvent (hEvent=0x70) returned 1
	[0121.240] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.240] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.240] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xabf60500, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xabf60500, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85ab8b0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x80760)) returned 1
	[0121.240] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0121.240] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105a8 | out: pbBuffer=0x124105a8) returned 1
	[0121.240] ReadFile (in: hFile=0x2cc, lpBuffer=0x1270c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1270c000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.246] GetFileType (hFile=0x2cc) returned 0x1
	[0121.246] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.246] WriteFile (in: hFile=0x2cc, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0121.247] GetFileType (hFile=0x2cc) returned 0x1
	[0121.247] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.247] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0121.247] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0121.247] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0121.247] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106d0 | out: pbBuffer=0x124106d0) returned 1
	[0121.248] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.248] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.248] WriteFile (in: hFile=0x328, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.250] CloseHandle (hObject=0x328) returned 1
	[0121.251] CloseHandle (hObject=0x2cc) returned 1
	[0121.251] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\dwdcw20.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dwdcw20.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.279] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.280] SetEvent (hEvent=0x70) returned 1
	[0121.280] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.281] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.281] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8b16200, ftCreationTime.dwHighDateTime=0x1cac190, ftLastAccessTime.dwLowDateTime=0xc8b16200, ftLastAccessTime.dwHighDateTime=0x1cac190, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x2ed80)) returned 1
	[0121.281] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0121.281] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441b8 | out: pbBuffer=0x127441b8) returned 1
	[0121.281] ReadFile (in: hFile=0x340, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.286] GetFileType (hFile=0x340) returned 0x1
	[0121.286] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.286] WriteFile (in: hFile=0x340, lpBuffer=0x12818000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12818000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0121.286] GetFileType (hFile=0x340) returned 0x1
	[0121.287] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0121.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0121.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0121.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744280 | out: pbBuffer=0x12744280) returned 1
	[0121.287] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.288] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.288] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263af00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263af00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.288] CloseHandle (hObject=0x2cc) returned 1
	[0121.288] CloseHandle (hObject=0x340) returned 1
	[0121.289] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\osetupui.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\osetupui.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.313] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.324] SetEvent (hEvent=0x70) returned 1
	[0121.324] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.324] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.324] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3216e900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3216e900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa64a430, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1ab7e94)) returned 1
	[0121.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127328c0 | out: pbBuffer=0x127328c0) returned 1
	[0121.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744368 | out: pbBuffer=0x12744368) returned 1
	[0121.325] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0121.326] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.326] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb28, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb28, ulNumEntriesRemoved=0x33fbfb0c) returned 0
	[0121.326] SetEvent (hEvent=0xa0) returned 1
	[0121.326] SetEvent (hEvent=0x70) returned 1
	[0121.327] ReadFile (in: hFile=0x328, lpBuffer=0x128ca000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x128ca000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.385] GetFileType (hFile=0x328) returned 0x1
	[0121.385] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.386] WriteFile (in: hFile=0x328, lpBuffer=0x12858000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12858000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0121.386] GetFileType (hFile=0x328) returned 0x1
	[0121.386] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0121.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0121.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0121.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104a0 | out: pbBuffer=0x124104a0) returned 1
	[0121.387] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0121.387] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.387] WriteFile (in: hFile=0x2fc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.420] CloseHandle (hObject=0x2fc) returned 1
	[0121.420] CloseHandle (hObject=0x328) returned 1
	[0121.420] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\acclr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.421] SetEvent (hEvent=0x2e8) returned 1
	[0121.421] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.422] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.422] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc111bb0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1
	[0121.422] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0121.422] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0121.422] ReadFile (in: hFile=0x328, lpBuffer=0x1294a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1294a000*, lpNumberOfBytesRead=0x126e5d1c*=0xa40, lpOverlapped=0x0) returned 1
	[0121.439] GetFileType (hFile=0x328) returned 0x1
	[0121.439] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.439] WriteFile (in: hFile=0x328, lpBuffer=0x12644a80*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12644a80*, lpNumberOfBytesWritten=0x126e5d00*=0xa40, lpOverlapped=0x126e5d0c) returned 1
	[0121.440] GetFileType (hFile=0x328) returned 0x1
	[0121.440] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0xa40, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0121.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0121.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0121.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106a0 | out: pbBuffer=0x124106a0) returned 1
	[0121.450] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.450] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.450] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.450] CloseHandle (hObject=0x2cc) returned 1
	[0121.450] CloseHandle (hObject=0x328) returned 1
	[0121.450] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.451] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.462] SetEvent (hEvent=0x80) returned 1
	[0121.462] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.462] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.463] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e3ad0 | out: lpFileInformation=0x126e3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0121.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4c0 | out: pbBuffer=0x1240f4c0) returned 1
	[0121.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106b8 | out: pbBuffer=0x124106b8) returned 1
	[0121.463] ReadFile (in: hFile=0x328, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x126e3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.610] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.620] SetEvent (hEvent=0x2e8) returned 1
	[0121.621] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.670] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.671] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.671] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e3ad0 | out: lpFileInformation=0x126e3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4)) returned 1
	[0121.671] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0121.671] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0121.671] ReadFile (in: hFile=0x338, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x126e3d1c*=0x41d4, lpOverlapped=0x0) returned 1
	[0121.674] GetFileType (hFile=0x338) returned 0x1
	[0121.674] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.674] WriteFile (in: hFile=0x338, lpBuffer=0x12858000*, nNumberOfBytesToWrite=0x41d4, lpNumberOfBytesWritten=0x126e3d00, lpOverlapped=0x126e3d0c | out: lpBuffer=0x12858000*, lpNumberOfBytesWritten=0x126e3d00*=0x41d4, lpOverlapped=0x126e3d0c) returned 1
	[0121.674] GetFileType (hFile=0x338) returned 0x1
	[0121.675] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x41d4, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.675] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0121.675] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0121.675] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0121.675] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0121.675] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.676] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.676] WriteFile (in: hFile=0x32c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.676] CloseHandle (hObject=0x32c) returned 1
	[0121.681] CloseHandle (hObject=0x338) returned 1
	[0121.681] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.711] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.713] SetEvent (hEvent=0x80) returned 1
	[0121.713] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.713] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.713] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31)) returned 1
	[0121.713] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732460 | out: pbBuffer=0x12732460) returned 1
	[0121.713] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441b8 | out: pbBuffer=0x127441b8) returned 1
	[0121.713] ReadFile (in: hFile=0x338, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.730] GetFileType (hFile=0x338) returned 0x1
	[0121.730] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.730] WriteFile (in: hFile=0x338, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0121.731] GetFileType (hFile=0x338) returned 0x1
	[0121.731] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0121.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0121.731] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0121.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744270 | out: pbBuffer=0x12744270) returned 1
	[0121.732] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.732] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.732] WriteFile (in: hFile=0x2cc, lpBuffer=0x12620a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12620a00*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.737] CloseHandle (hObject=0x2cc) returned 1
	[0121.737] CloseHandle (hObject=0x338) returned 1
	[0121.737] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW2.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww2.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.760] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.761] SetEvent (hEvent=0x80) returned 1
	[0121.761] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.761] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0121.761] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0121.761] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0121.761] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788020 | out: pbBuffer=0x12788020) returned 1
	[0121.761] ReadFile (in: hFile=0x338, lpBuffer=0x128ea000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x128ea000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.775] GetFileType (hFile=0x338) returned 0x1
	[0121.775] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.775] WriteFile (in: hFile=0x338, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0121.776] GetFileType (hFile=0x338) returned 0x1
	[0121.776] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0121.776] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0121.777] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0121.777] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0121.777] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.777] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0121.777] WriteFile (in: hFile=0x340, lpBuffer=0x12742000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12742000*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.783] CloseHandle (hObject=0x340) returned 1
	[0121.784] CloseHandle (hObject=0x338) returned 1
	[0121.798] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\osetup.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\osetup.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.842] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.861] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.871] SetEvent (hEvent=0x68) returned 1
	[0121.871] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.871] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0121.871] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x87078450, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x87078450, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5d1e590, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0121.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0121.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0121.871] ReadFile (in: hFile=0x328, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.883] GetFileType (hFile=0x328) returned 0x1
	[0121.883] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.883] WriteFile (in: hFile=0x328, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0121.884] GetFileType (hFile=0x328) returned 0x1
	[0121.884] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0121.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0121.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0121.885] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0121.885] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.885] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0121.885] WriteFile (in: hFile=0x2cc, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.893] CloseHandle (hObject=0x2cc) returned 1
	[0121.905] CloseHandle (hObject=0x328) returned 1
	[0121.907] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Office32WW.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\office32ww.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.933] SetEvent (hEvent=0xa0) returned 1
	[0121.934] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.937] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.947] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0121.952] SetEvent (hEvent=0x68) returned 1
	[0121.952] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.952] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.952] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7ca00570, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7ca00570, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa8c227b0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x412b)) returned 1
	[0121.952] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0121.952] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0121.952] ReadFile (in: hFile=0x32c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f3d1c*=0x412b, lpOverlapped=0x0) returned 1
	[0122.000] SetEvent (hEvent=0xa0) returned 1
	[0122.001] GetFileType (hFile=0x32c) returned 0x1
	[0122.001] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.001] WriteFile (in: hFile=0x32c, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x412b, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f3d00*=0x412b, lpOverlapped=0x124f3d0c) returned 1
	[0122.002] GetFileType (hFile=0x32c) returned 0x1
	[0122.002] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x412b, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0122.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0122.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0122.003] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441a8 | out: pbBuffer=0x127441a8) returned 1
	[0122.003] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0122.003] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.003] WriteFile (in: hFile=0x328, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.003] CloseHandle (hObject=0x328) returned 1
	[0122.003] CloseHandle (hObject=0x32c) returned 1
	[0122.004] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.005] SetEvent (hEvent=0x70) returned 1
	[0122.005] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0122.005] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.005] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2a2397e0, ftCreationTime.dwHighDateTime=0x1cbe19a, ftLastAccessTime.dwLowDateTime=0x2a2397e0, ftLastAccessTime.dwHighDateTime=0x1cbe19a, ftLastWriteTime.dwLowDateTime=0xa8bafbc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0122.005] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324c0 | out: pbBuffer=0x127324c0) returned 1
	[0122.005] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441d0 | out: pbBuffer=0x127441d0) returned 1
	[0122.005] ReadFile (in: hFile=0x32c, lpBuffer=0x127ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.076] GetFileType (hFile=0x32c) returned 0x1
	[0122.076] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.076] WriteFile (in: hFile=0x32c, lpBuffer=0x128f8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x128f8000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0122.077] GetFileType (hFile=0x32c) returned 0x1
	[0122.077] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.077] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0122.077] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434901 | out: pbBuffer=0x12434901) returned 1
	[0122.077] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0122.077] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106a0 | out: pbBuffer=0x124106a0) returned 1
	[0122.077] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.078] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.078] WriteFile (in: hFile=0x2fc, lpBuffer=0x125fef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fef00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.098] CloseHandle (hObject=0x2fc) returned 1
	[0122.098] CloseHandle (hObject=0x32c) returned 1
	[0122.098] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.100] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0122.100] SetEvent (hEvent=0x30c) returned 1
	[0122.101] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0122.101] SetEvent (hEvent=0x30c) returned 1
	[0122.101] SetEvent (hEvent=0x318) returned 1
	[0122.101] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.101] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x46538340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x4a6d41a0, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x4a6d41a0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec54b6b0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xec54b6b0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x4a687710, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7c66670, ftCreationTime.dwHighDateTime=0x1cb0ee5, ftLastAccessTime.dwLowDateTime=0xe7c66670, ftLastAccessTime.dwHighDateTime=0x1cb0ee5, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80aa51d0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80aa51d0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x4a6d3200, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x5061, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.cab", cAlternateFileName="")) returned 1
	[0122.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.msi", cAlternateFileName="")) returned 1
	[0122.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80b17dc0, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80b17dc0, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468a2b70, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x2213, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisiorWW.xml", cAlternateFileName="")) returned 1
	[0122.114] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.114] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.115] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.116] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.116] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0122.117] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0122.117] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0122.118] CloseHandle (hObject=0x32c) returned 1
	[0122.118] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0122.119] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0122.125] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0122.125] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.126] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc9c380f0, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xc9c380f0, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x465d00f0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0122.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127320c0 | out: pbBuffer=0x127320c0) returned 1
	[0122.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0122.126] ReadFile (in: hFile=0x32c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.135] GetFileType (hFile=0x32c) returned 0x1
	[0122.135] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.135] WriteFile (in: hFile=0x32c, lpBuffer=0x126ec000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x126ec000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0122.136] GetFileType (hFile=0x32c) returned 0x1
	[0122.136] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0122.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0122.136] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0122.137] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0122.137] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.138] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.138] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.140] CloseHandle (hObject=0x33c) returned 1
	[0122.141] CloseHandle (hObject=0x32c) returned 1
	[0122.141] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\owow32ww.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.142] SetEvent (hEvent=0x80) returned 1
	[0122.142] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0122.142] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.142] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe5ed9630, ftCreationTime.dwHighDateTime=0x1cb12b3, ftLastAccessTime.dwLowDateTime=0xe5ed9630, ftLastAccessTime.dwHighDateTime=0x1cb12b3, ftLastWriteTime.dwLowDateTime=0x4655d500, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0122.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322e0 | out: pbBuffer=0x127322e0) returned 1
	[0122.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0122.142] ReadFile (in: hFile=0x32c, lpBuffer=0x1270c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1270c000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.151] GetFileType (hFile=0x32c) returned 0x1
	[0122.151] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.151] WriteFile (in: hFile=0x32c, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0122.152] GetFileType (hFile=0x32c) returned 0x1
	[0122.152] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.152] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0122.152] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0122.152] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0122.153] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e720 | out: pbBuffer=0x1251e720) returned 1
	[0122.153] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0122.153] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0122.153] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.171] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0122.190] CloseHandle (hObject=0x2cc) returned 1
	[0122.192] CloseHandle (hObject=0x32c) returned 1
	[0122.192] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.218] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0122.225] SetEvent (hEvent=0x30c) returned 1
	[0122.225] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0122.232] SetEvent (hEvent=0x2e8) returned 1
	[0122.232] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0122.235] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0122.243] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0122.243] SetEvent (hEvent=0x70) returned 1
	[0122.243] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0122.249] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0122.249] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.249] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0122.249] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80711960, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x80711960, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x468ee660, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb80800)) returned 1
	[0122.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0122.250] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0122.250] ReadFile (in: hFile=0x33c, lpBuffer=0x1270c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1270c000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.281] GetFileType (hFile=0x33c) returned 0x1
	[0122.281] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.282] WriteFile (in: hFile=0x33c, lpBuffer=0x126b4000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x126b4000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0122.282] GetFileType (hFile=0x33c) returned 0x1
	[0122.282] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0122.283] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0122.283] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0122.283] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0122.283] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0122.283] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0122.283] WriteFile (in: hFile=0x32c, lpBuffer=0x12456000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12456000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.312] CloseHandle (hObject=0x32c) returned 1
	[0122.312] CloseHandle (hObject=0x33c) returned 1
	[0122.312] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.389] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0122.404] SetEvent (hEvent=0x70) returned 1
	[0122.404] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.404] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.404] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93de7300, ftCreationTime.dwHighDateTime=0x1cb84b4, ftLastAccessTime.dwLowDateTime=0x8000ce40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0x93de7300, ftLastWriteTime.dwHighDateTime=0x1cb84b4, nFileSizeHigh=0x0, nFileSizeLow=0x1df)) returned 1
	[0122.404] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0122.404] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441b8 | out: pbBuffer=0x127441b8) returned 1
	[0122.404] ReadFile (in: hFile=0x338, lpBuffer=0x126ec000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ec000*, lpNumberOfBytesRead=0x126e7d1c*=0x1df, lpOverlapped=0x0) returned 1
	[0122.405] GetFileType (hFile=0x338) returned 0x1
	[0122.406] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.406] WriteFile (in: hFile=0x338, lpBuffer=0x124c81e0*, nNumberOfBytesToWrite=0x1df, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x124c81e0*, lpNumberOfBytesWritten=0x126e7d00*=0x1df, lpOverlapped=0x126e7d0c) returned 1
	[0122.406] GetFileType (hFile=0x338) returned 0x1
	[0122.406] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x1df, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0122.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0122.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0122.407] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744270 | out: pbBuffer=0x12744270) returned 1
	[0122.407] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.407] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.407] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.407] CloseHandle (hObject=0x33c) returned 1
	[0122.407] CloseHandle (hObject=0x338) returned 1
	[0122.408] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), lpNewFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.408] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0122.442] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0122.463] SetEvent (hEvent=0x318) returned 1
	[0122.464] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x4)) returned 1
	[0122.464] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0122.491] SetEvent (hEvent=0x2e4) returned 1
	[0122.491] SetEvent (hEvent=0x2e8) returned 1
	[0122.491] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0130.806] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0130.853] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.006] SetEvent (hEvent=0x318) returned 1
	[0131.006] SetEvent (hEvent=0x70) returned 1
	[0131.006] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.313] SetEvent (hEvent=0x318) returned 1
	[0131.313] SetEvent (hEvent=0x80) returned 1
	[0131.313] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.440] SetEvent (hEvent=0x70) returned 1
	[0131.440] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.441] SetEvent (hEvent=0x80) returned 1
	[0131.441] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.442] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.515] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.533] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.542] SetEvent (hEvent=0x68) returned 1
	[0131.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.543] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.543] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0131.543] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0131.544] ReadFile (in: hFile=0x328, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f3d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.545] GetFileType (hFile=0x328) returned 0x1
	[0131.545] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.545] WriteFile (in: hFile=0x328, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f3d00*=0xb3, lpOverlapped=0x124f3d0c) returned 1
	[0131.545] GetFileType (hFile=0x328) returned 0x1
	[0131.545] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.546] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0131.546] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0131.546] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0131.546] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0131.546] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.547] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.547] WriteFile (in: hFile=0x2fc, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.547] CloseHandle (hObject=0x2fc) returned 1
	[0131.547] CloseHandle (hObject=0x328) returned 1
	[0131.547] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\cs\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0131.548] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85217f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85218f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.549] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0131.549] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0131.549] ReadFile (in: hFile=0x328, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f5d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.550] GetFileType (hFile=0x328) returned 0x1
	[0131.550] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.551] WriteFile (in: hFile=0x328, lpBuffer=0x1260c180*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260c180*, lpNumberOfBytesWritten=0x124f5d00*=0xb3, lpOverlapped=0x124f5d0c) returned 1
	[0131.551] GetFileType (hFile=0x328) returned 0x1
	[0131.551] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.551] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0131.551] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0131.551] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0131.551] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0131.552] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.552] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.552] WriteFile (in: hFile=0x2fc, lpBuffer=0x12628500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.552] CloseHandle (hObject=0x2fc) returned 1
	[0131.552] CloseHandle (hObject=0x328) returned 1
	[0131.552] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\da\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.553] WSASend (in: s=0x108, lpBuffers=0x124e20b4*=((len=0x2c9, buf=0x1260a000*)), dwBufferCount=0x1, lpNumberOfBytesSent=0x124e20a8, dwFlags=0x0, lpOverlapped=0x124e2088, lpCompletionRoutine=0x0 | out: lpNumberOfBytesSent=0x124e20a8*=0x2c9, lpOverlapped=0x124e2088) returned 0
	[0131.557] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.579] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.596] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.605] SetEvent (hEvent=0x318) returned 1
	[0131.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.606] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0131.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.606] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c9c0 | out: pbBuffer=0x1244c9c0) returned 1
	[0131.606] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e780 | out: pbBuffer=0x1251e780) returned 1
	[0131.606] ReadFile (in: hFile=0x2fc, lpBuffer=0x1296a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1296a000*, lpNumberOfBytesRead=0x12429d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.607] GetFileType (hFile=0x2fc) returned 0x1
	[0131.608] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.608] WriteFile (in: hFile=0x2fc, lpBuffer=0x1260c3c0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1260c3c0*, lpNumberOfBytesWritten=0x12429d00*=0xb3, lpOverlapped=0x12429d0c) returned 1
	[0131.608] GetFileType (hFile=0x2fc) returned 0x1
	[0131.608] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0131.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0131.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0131.609] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e898 | out: pbBuffer=0x1251e898) returned 1
	[0131.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0131.609] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0131.609] WriteFile (in: hFile=0x338, lpBuffer=0x12628f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.609] CloseHandle (hObject=0x338) returned 1
	[0131.609] CloseHandle (hObject=0x2fc) returned 1
	[0131.609] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0131.611] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cbe0 | out: pbBuffer=0x1244cbe0) returned 1
	[0131.611] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e8c0 | out: pbBuffer=0x1251e8c0) returned 1
	[0131.611] ReadFile (in: hFile=0x2fc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.614] GetFileType (hFile=0x2fc) returned 0x1
	[0131.614] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.614] WriteFile (in: hFile=0x2fc, lpBuffer=0x1260c540*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260c540*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0131.614] GetFileType (hFile=0x2fc) returned 0x1
	[0131.614] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.615] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0131.615] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0131.616] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.616] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb28, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb28, ulNumEntriesRemoved=0x33fbfb0c) returned 0
	[0131.617] SetEvent (hEvent=0xa0) returned 1
	[0131.617] SetEvent (hEvent=0x2f4) returned 1
	[0131.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0131.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0131.618] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ead8 | out: pbBuffer=0x1251ead8) returned 1
	[0131.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.618] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.618] WriteFile (in: hFile=0x33c, lpBuffer=0x12629400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12629400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.618] CloseHandle (hObject=0x33c) returned 1
	[0131.618] CloseHandle (hObject=0x2fc) returned 1
	[0131.619] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fil\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.623] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0131.623] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0131.624] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0131.624] SetEvent (hEvent=0x2f4) returned 1
	[0131.624] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0131.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.632] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.632] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0131.633] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0131.633] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f3d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.635] GetFileType (hFile=0x33c) returned 0x1
	[0131.635] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.635] WriteFile (in: hFile=0x33c, lpBuffer=0x124b8000*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124b8000*, lpNumberOfBytesWritten=0x124f3d00*=0xb3, lpOverlapped=0x124f3d0c) returned 1
	[0131.635] GetFileType (hFile=0x33c) returned 0x1
	[0131.635] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0131.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0131.636] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0131.636] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0131.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.636] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0131.636] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.636] CloseHandle (hObject=0x340) returned 1
	[0131.637] CloseHandle (hObject=0x33c) returned 1
	[0131.637] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\fr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.638] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.638] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0131.638] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0131.639] ReadFile (in: hFile=0x33c, lpBuffer=0x128ca000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128ca000*, lpNumberOfBytesRead=0x124f1d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.649] GetFileType (hFile=0x33c) returned 0x1
	[0131.649] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.649] WriteFile (in: hFile=0x33c, lpBuffer=0x124b8180*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124b8180*, lpNumberOfBytesWritten=0x124f1d00*=0xb3, lpOverlapped=0x124f1d0c) returned 1
	[0131.649] GetFileType (hFile=0x33c) returned 0x1
	[0131.649] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.649] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0131.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0131.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0131.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0131.650] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.650] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0131.650] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.651] CloseHandle (hObject=0x340) returned 1
	[0131.651] CloseHandle (hObject=0x33c) returned 1
	[0131.651] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\he\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.653] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8523e0d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8523d900, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.653] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0131.653] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744538 | out: pbBuffer=0x12744538) returned 1
	[0131.653] ReadFile (in: hFile=0x33c, lpBuffer=0x1290a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1290a000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.655] GetFileType (hFile=0x33c) returned 0x1
	[0131.655] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.655] WriteFile (in: hFile=0x33c, lpBuffer=0x124b8300*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124b8300*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0131.655] GetFileType (hFile=0x33c) returned 0x1
	[0131.655] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.655] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0131.655] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0131.656] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0131.656] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445f0 | out: pbBuffer=0x127445f0) returned 1
	[0131.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.656] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.656] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.656] CloseHandle (hObject=0x340) returned 1
	[0131.656] CloseHandle (hObject=0x33c) returned 1
	[0131.657] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.658] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.658] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0131.658] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744608 | out: pbBuffer=0x12744608) returned 1
	[0131.658] ReadFile (in: hFile=0x33c, lpBuffer=0x1294a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1294a000*, lpNumberOfBytesRead=0x124f5d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.660] GetFileType (hFile=0x33c) returned 0x1
	[0131.660] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.660] WriteFile (in: hFile=0x33c, lpBuffer=0x124b8480*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124b8480*, lpNumberOfBytesWritten=0x124f5d00*=0xb3, lpOverlapped=0x124f5d0c) returned 1
	[0131.660] GetFileType (hFile=0x33c) returned 0x1
	[0131.660] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.660] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0131.661] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0131.661] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0131.661] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446c0 | out: pbBuffer=0x127446c0) returned 1
	[0131.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.661] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.661] WriteFile (in: hFile=0x340, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.662] CloseHandle (hObject=0x340) returned 1
	[0131.662] CloseHandle (hObject=0x33c) returned 1
	[0131.662] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\hr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.663] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.691] SetEvent (hEvent=0x70) returned 1
	[0131.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.692] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4a0 | out: pbBuffer=0x1240f4a0) returned 1
	[0131.693] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446d8 | out: pbBuffer=0x127446d8) returned 1
	[0131.693] ReadFile (in: hFile=0x33c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.694] GetFileType (hFile=0x33c) returned 0x1
	[0131.694] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.694] WriteFile (in: hFile=0x33c, lpBuffer=0x124b8600*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124b8600*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0131.694] GetFileType (hFile=0x33c) returned 0x1
	[0131.694] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0131.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0131.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0131.695] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744790 | out: pbBuffer=0x12744790) returned 1
	[0131.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.695] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0131.695] WriteFile (in: hFile=0x340, lpBuffer=0x12774000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12774000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.696] CloseHandle (hObject=0x340) returned 1
	[0131.696] CloseHandle (hObject=0x33c) returned 1
	[0131.696] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\it\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.705] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0131.705] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85264230, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85264a00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0131.705] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f6c0 | out: pbBuffer=0x1240f6c0) returned 1
	[0131.705] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127447a8 | out: pbBuffer=0x127447a8) returned 1
	[0131.705] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0131.707] GetFileType (hFile=0x33c) returned 0x1
	[0131.707] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.707] WriteFile (in: hFile=0x33c, lpBuffer=0x124b8780*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124b8780*, lpNumberOfBytesWritten=0x124f5d00*=0xb3, lpOverlapped=0x124f5d0c) returned 1
	[0131.707] GetFileType (hFile=0x33c) returned 0x1
	[0131.707] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0131.707] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0131.707] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed081 | out: pbBuffer=0x124ed081) returned 1
	[0131.707] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed181 | out: pbBuffer=0x124ed181) returned 1
	[0131.708] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744860 | out: pbBuffer=0x12744860) returned 1
	[0131.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0131.708] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0131.708] WriteFile (in: hFile=0x340, lpBuffer=0x12774500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12774500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0131.708] CloseHandle (hObject=0x340) returned 1
	[0131.708] CloseHandle (hObject=0x33c) returned 1
	[0131.709] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\ja\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0131.709] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.728] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.772] SetEvent (hEvent=0x70) returned 1
	[0131.772] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0131.822] SetEvent (hEvent=0x2f4) returned 1
	[0131.822] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0132.382] SetEvent (hEvent=0x70) returned 1
	[0132.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.383] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0132.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0132.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0132.384] ReadFile (in: hFile=0x33c, lpBuffer=0x128ca000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128ca000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.385] GetFileType (hFile=0x33c) returned 0x1
	[0132.385] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.385] WriteFile (in: hFile=0x33c, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0132.385] GetFileType (hFile=0x33c) returned 0x1
	[0132.386] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.386] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0132.386] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0132.386] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0132.387] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0132.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.387] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0132.387] WriteFile (in: hFile=0x340, lpBuffer=0x125f0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125f0000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.387] CloseHandle (hObject=0x340) returned 1
	[0132.387] CloseHandle (hObject=0x33c) returned 1
	[0132.388] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.389] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.389] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0132.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852b04f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852b04f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.389] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0132.389] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0132.390] ReadFile (in: hFile=0x33c, lpBuffer=0x1290a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1290a000*, lpNumberOfBytesRead=0x12429d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.391] GetFileType (hFile=0x33c) returned 0x1
	[0132.391] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.391] WriteFile (in: hFile=0x33c, lpBuffer=0x12612180*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12612180*, lpNumberOfBytesWritten=0x12429d00*=0xb3, lpOverlapped=0x12429d0c) returned 1
	[0132.391] GetFileType (hFile=0x33c) returned 0x1
	[0132.391] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.391] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0132.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0132.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0132.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0132.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.392] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0132.392] WriteFile (in: hFile=0x340, lpBuffer=0x125f0500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f0500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.393] CloseHandle (hObject=0x340) returned 1
	[0132.393] CloseHandle (hObject=0x33c) returned 1
	[0132.393] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.394] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.394] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0132.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.394] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0132.394] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0132.394] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0132.429] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0132.429] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb28, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb28, ulNumEntriesRemoved=0x33fbfb0c) returned 0
	[0132.429] SetEvent (hEvent=0xa0) returned 1
	[0132.429] SetEvent (hEvent=0x70) returned 1
	[0132.430] SetEvent (hEvent=0x68) returned 1
	[0132.430] ReadFile (in: hFile=0x33c, lpBuffer=0x1294a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1294a000*, lpNumberOfBytesRead=0x124f1d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.431] GetFileType (hFile=0x33c) returned 0x1
	[0132.431] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.431] WriteFile (in: hFile=0x33c, lpBuffer=0x12612300*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12612300*, lpNumberOfBytesWritten=0x124f1d00*=0xb3, lpOverlapped=0x124f1d0c) returned 1
	[0132.432] GetFileType (hFile=0x33c) returned 0x1
	[0132.432] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0132.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0132.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0132.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0132.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.433] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0132.433] WriteFile (in: hFile=0x340, lpBuffer=0x125f0a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f0a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.433] CloseHandle (hObject=0x340) returned 1
	[0132.433] CloseHandle (hObject=0x33c) returned 1
	[0132.433] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\sr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.435] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0132.554] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0132.554] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0132.587] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0132.587] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0132.587] SetEvent (hEvent=0x2f4) returned 1
	[0132.587] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0132.644] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0132.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.644] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0132.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0132.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0132.645] ReadFile (in: hFile=0x33c, lpBuffer=0x128c6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128c6000*, lpNumberOfBytesRead=0x12429d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.646] GetFileType (hFile=0x33c) returned 0x1
	[0132.646] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.646] WriteFile (in: hFile=0x33c, lpBuffer=0x124b8000*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124b8000*, lpNumberOfBytesWritten=0x12429d00*=0xb3, lpOverlapped=0x12429d0c) returned 1
	[0132.647] GetFileType (hFile=0x33c) returned 0x1
	[0132.647] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400401 | out: pbBuffer=0x12400401) returned 1
	[0132.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0132.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0132.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0132.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.648] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0132.648] WriteFile (in: hFile=0x340, lpBuffer=0x125f0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f0000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.648] CloseHandle (hObject=0x340) returned 1
	[0132.648] CloseHandle (hObject=0x33c) returned 1
	[0132.648] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\th\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.650] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0132.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x852d6650, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x852d75f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0132.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744398 | out: pbBuffer=0x12744398) returned 1
	[0132.650] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.651] GetFileType (hFile=0x33c) returned 0x1
	[0132.651] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.652] WriteFile (in: hFile=0x33c, lpBuffer=0x124b8180*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124b8180*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0132.652] GetFileType (hFile=0x33c) returned 0x1
	[0132.652] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.652] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0132.652] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0132.652] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0132.653] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744510 | out: pbBuffer=0x12744510) returned 1
	[0132.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.653] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0132.653] WriteFile (in: hFile=0x340, lpBuffer=0x125f0500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125f0500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.653] CloseHandle (hObject=0x340) returned 1
	[0132.653] CloseHandle (hObject=0x33c) returned 1
	[0132.653] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\tr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.655] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0132.779] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0132.827] SetEvent (hEvent=0x68) returned 1
	[0132.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.828] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0132.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.828] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0132.828] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105a8 | out: pbBuffer=0x124105a8) returned 1
	[0132.828] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.830] GetFileType (hFile=0x33c) returned 0x1
	[0132.830] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.830] WriteFile (in: hFile=0x33c, lpBuffer=0x12612240*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12612240*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0132.830] GetFileType (hFile=0x33c) returned 0x1
	[0132.830] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.830] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0132.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0132.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0132.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410a10 | out: pbBuffer=0x12410a10) returned 1
	[0132.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.831] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0132.831] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.832] CloseHandle (hObject=0x340) returned 1
	[0132.832] CloseHandle (hObject=0x33c) returned 1
	[0132.832] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_TW\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_tw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.833] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0132.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85639950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0132.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0132.834] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410a38 | out: pbBuffer=0x12410a38) returned 1
	[0132.834] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12429d1c*=0xb3, lpOverlapped=0x0) returned 1
	[0132.835] GetFileType (hFile=0x33c) returned 0x1
	[0132.835] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.835] WriteFile (in: hFile=0x33c, lpBuffer=0x12612540*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12612540*, lpNumberOfBytesWritten=0x12429d00*=0xb3, lpOverlapped=0x12429d0c) returned 1
	[0132.835] GetFileType (hFile=0x33c) returned 0x1
	[0132.835] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0132.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0132.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0132.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410b00 | out: pbBuffer=0x12410b00) returned 1
	[0132.836] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0132.836] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0132.836] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.837] CloseHandle (hObject=0x340) returned 1
	[0132.837] CloseHandle (hObject=0x33c) returned 1
	[0132.837] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_CN\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_locales\\zh_cn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.852] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0132.853] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0132.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85348a70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85347ad0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x628aed00, ftLastWriteTime.dwHighDateTime=0x1d0f5b2, nFileSizeHigh=0x0, nFileSizeLow=0x2769)) returned 1
	[0132.853] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0132.853] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410b18 | out: pbBuffer=0x12410b18) returned 1
	[0132.853] ReadFile (in: hFile=0x33c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x124f1d1c*=0x2769, lpOverlapped=0x0) returned 1
	[0132.897] GetFileType (hFile=0x33c) returned 0x1
	[0132.897] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.897] WriteFile (in: hFile=0x33c, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x2769, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x124f1d00*=0x2769, lpOverlapped=0x124f1d0c) returned 1
	[0132.897] GetFileType (hFile=0x33c) returned 0x1
	[0132.897] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x2769, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0132.897] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0132.897] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0132.898] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0132.898] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410bf0 | out: pbBuffer=0x12410bf0) returned 1
	[0132.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0132.898] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0132.898] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0132.898] CloseHandle (hObject=0x2cc) returned 1
	[0132.898] CloseHandle (hObject=0x33c) returned 1
	[0132.899] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.8_0\\_metadata\\verified_contents.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0132.982] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.101] SetEvent (hEvent=0x68) returned 1
	[0133.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.102] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0133.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8403b360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8403b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xfe)) returned 1
	[0133.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8c0 | out: pbBuffer=0x1252e8c0) returned 1
	[0133.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410c08 | out: pbBuffer=0x12410c08) returned 1
	[0133.102] ReadFile (in: hFile=0x2cc, lpBuffer=0x12946000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12946000*, lpNumberOfBytesRead=0x1242bd1c*=0xfe, lpOverlapped=0x0) returned 1
	[0133.103] GetFileType (hFile=0x2cc) returned 0x1
	[0133.103] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.104] WriteFile (in: hFile=0x2cc, lpBuffer=0x12635000*, nNumberOfBytesToWrite=0xfe, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12635000*, lpNumberOfBytesWritten=0x1242bd00*=0xfe, lpOverlapped=0x1242bd0c) returned 1
	[0133.104] GetFileType (hFile=0x2cc) returned 0x1
	[0133.104] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xfe, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0133.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0133.104] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0133.105] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410d20 | out: pbBuffer=0x12410d20) returned 1
	[0133.105] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.105] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0133.105] WriteFile (in: hFile=0x33c, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.105] CloseHandle (hObject=0x33c) returned 1
	[0133.105] CloseHandle (hObject=0x2cc) returned 1
	[0133.106] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ar\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.107] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0133.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84056110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84058820, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12f)) returned 1
	[0133.107] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252eae0 | out: pbBuffer=0x1252eae0) returned 1
	[0133.107] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410d38 | out: pbBuffer=0x12410d38) returned 1
	[0133.108] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0133.142] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.142] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb28, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb28, ulNumEntriesRemoved=0x33fbfb0c) returned 0
	[0133.142] SetEvent (hEvent=0xa0) returned 1
	[0133.142] SetEvent (hEvent=0x68) returned 1
	[0133.143] ReadFile (in: hFile=0x2cc, lpBuffer=0x1265c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1265c000*, lpNumberOfBytesRead=0x12429d1c*=0x12f, lpOverlapped=0x0) returned 1
	[0133.144] GetFileType (hFile=0x2cc) returned 0x1
	[0133.144] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.144] WriteFile (in: hFile=0x2cc, lpBuffer=0x12773e00*, nNumberOfBytesToWrite=0x12f, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12773e00*, lpNumberOfBytesWritten=0x12429d00*=0x12f, lpOverlapped=0x12429d0c) returned 1
	[0133.145] GetFileType (hFile=0x2cc) returned 0x1
	[0133.145] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x12f, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.145] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0133.145] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed081 | out: pbBuffer=0x124ed081) returned 1
	[0133.145] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed181 | out: pbBuffer=0x124ed181) returned 1
	[0133.145] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410e50 | out: pbBuffer=0x12410e50) returned 1
	[0133.146] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.146] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0133.146] WriteFile (in: hFile=0x33c, lpBuffer=0x12628500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.146] CloseHandle (hObject=0x33c) returned 1
	[0133.146] CloseHandle (hObject=0x2cc) returned 1
	[0133.146] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\bg\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.148] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0133.191] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.191] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0133.224] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.224] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0133.224] SetEvent (hEvent=0x2f4) returned 1
	[0133.225] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0133.265] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.266] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0133.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84067280, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84067280, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1
	[0133.266] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0133.266] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0133.267] ReadFile (in: hFile=0x2cc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0xe5, lpOverlapped=0x0) returned 1
	[0133.268] GetFileType (hFile=0x2cc) returned 0x1
	[0133.268] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.268] WriteFile (in: hFile=0x2cc, lpBuffer=0x12458000*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12458000*, lpNumberOfBytesWritten=0x1242bd00*=0xe5, lpOverlapped=0x1242bd0c) returned 1
	[0133.268] GetFileType (hFile=0x2cc) returned 0x1
	[0133.268] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xe5, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.268] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0133.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0133.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0133.269] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0133.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.269] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0133.269] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.270] CloseHandle (hObject=0x33c) returned 1
	[0133.270] CloseHandle (hObject=0x2cc) returned 1
	[0133.270] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ca\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.271] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0133.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8407f920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84082030, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b1ca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xda)) returned 1
	[0133.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0133.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744398 | out: pbBuffer=0x12744398) returned 1
	[0133.271] ReadFile (in: hFile=0x2cc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12429d1c*=0xda, lpOverlapped=0x0) returned 1
	[0133.272] GetFileType (hFile=0x2cc) returned 0x1
	[0133.272] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.273] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261a2a0*, nNumberOfBytesToWrite=0xda, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1261a2a0*, lpNumberOfBytesWritten=0x12429d00*=0xda, lpOverlapped=0x12429d0c) returned 1
	[0133.273] GetFileType (hFile=0x2cc) returned 0x1
	[0133.273] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xda, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.273] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0133.273] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0133.273] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0133.273] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744510 | out: pbBuffer=0x12744510) returned 1
	[0133.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.274] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0133.274] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.274] CloseHandle (hObject=0x33c) returned 1
	[0133.274] CloseHandle (hObject=0x2cc) returned 1
	[0133.274] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\cs\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.275] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.406] SetEvent (hEvent=0x70) returned 1
	[0133.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.408] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0133.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84116f00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84116f00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1
	[0133.408] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0133.408] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744528 | out: pbBuffer=0x12744528) returned 1
	[0133.408] ReadFile (in: hFile=0x2cc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1242bd1c*=0x130, lpOverlapped=0x0) returned 1
	[0133.410] GetFileType (hFile=0x2cc) returned 0x1
	[0133.410] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.410] WriteFile (in: hFile=0x2cc, lpBuffer=0x12604dc0*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12604dc0*, lpNumberOfBytesWritten=0x1242bd00*=0x130, lpOverlapped=0x1242bd0c) returned 1
	[0133.410] GetFileType (hFile=0x2cc) returned 0x1
	[0133.410] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.410] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0133.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0133.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0133.411] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445e0 | out: pbBuffer=0x127445e0) returned 1
	[0133.411] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.411] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0133.411] WriteFile (in: hFile=0x33c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.412] CloseHandle (hObject=0x33c) returned 1
	[0133.412] CloseHandle (hObject=0x2cc) returned 1
	[0133.412] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\el\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.413] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.413] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0133.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84120b40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84120b40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1
	[0133.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb20 | out: pbBuffer=0x1244cb20) returned 1
	[0133.413] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127445f8 | out: pbBuffer=0x127445f8) returned 1
	[0133.413] ReadFile (in: hFile=0x2cc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12429d1c*=0xd5, lpOverlapped=0x0) returned 1
	[0133.415] GetFileType (hFile=0x2cc) returned 0x1
	[0133.415] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.415] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261ab60*, nNumberOfBytesToWrite=0xd5, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1261ab60*, lpNumberOfBytesWritten=0x12429d00*=0xd5, lpOverlapped=0x12429d0c) returned 1
	[0133.415] GetFileType (hFile=0x2cc) returned 0x1
	[0133.415] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xd5, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.415] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0133.415] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0133.416] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0133.416] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127449a0 | out: pbBuffer=0x127449a0) returned 1
	[0133.416] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.416] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0133.416] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.416] CloseHandle (hObject=0x33c) returned 1
	[0133.417] CloseHandle (hObject=0x2cc) returned 1
	[0133.417] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_GB\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\en_gb\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.418] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.511] SetEvent (hEvent=0x70) returned 1
	[0133.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.512] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0133.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8413b8f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8413b8f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe5)) returned 1
	[0133.512] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd40 | out: pbBuffer=0x1244cd40) returned 1
	[0133.512] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127449b8 | out: pbBuffer=0x127449b8) returned 1
	[0133.512] ReadFile (in: hFile=0x2cc, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1242bd1c*=0xe5, lpOverlapped=0x0) returned 1
	[0133.514] GetFileType (hFile=0x2cc) returned 0x1
	[0133.514] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.514] WriteFile (in: hFile=0x2cc, lpBuffer=0x124582d0*, nNumberOfBytesToWrite=0xe5, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124582d0*, lpNumberOfBytesWritten=0x1242bd00*=0xe5, lpOverlapped=0x1242bd0c) returned 1
	[0133.514] GetFileType (hFile=0x2cc) returned 0x1
	[0133.514] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xe5, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.514] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0133.514] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0133.515] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0133.515] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744a90 | out: pbBuffer=0x12744a90) returned 1
	[0133.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.515] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0133.515] WriteFile (in: hFile=0x33c, lpBuffer=0x12678000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12678000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.515] CloseHandle (hObject=0x33c) returned 1
	[0133.515] CloseHandle (hObject=0x2cc) returned 1
	[0133.516] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\es_419\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.517] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.635] SetEvent (hEvent=0x70) returned 1
	[0133.635] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.636] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0133.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8414a350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8414f170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1
	[0133.636] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cf60 | out: pbBuffer=0x1244cf60) returned 1
	[0133.636] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744aa8 | out: pbBuffer=0x12744aa8) returned 1
	[0133.636] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0133.670] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.670] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb28, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb28, ulNumEntriesRemoved=0x33fbfb0c) returned 0
	[0133.670] SetEvent (hEvent=0xa0) returned 1
	[0133.670] SetEvent (hEvent=0x70) returned 1
	[0133.670] SetEvent (hEvent=0x68) returned 1
	[0133.671] ReadFile (in: hFile=0x2cc, lpBuffer=0x128e6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e6000*, lpNumberOfBytesRead=0x124f1d1c*=0xdc, lpOverlapped=0x0) returned 1
	[0133.672] GetFileType (hFile=0x2cc) returned 0x1
	[0133.672] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.672] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261ae00*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1261ae00*, lpNumberOfBytesWritten=0x124f1d00*=0xdc, lpOverlapped=0x124f1d0c) returned 1
	[0133.673] GetFileType (hFile=0x2cc) returned 0x1
	[0133.673] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xdc, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435081 | out: pbBuffer=0x12435081) returned 1
	[0133.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435181 | out: pbBuffer=0x12435181) returned 1
	[0133.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435281 | out: pbBuffer=0x12435281) returned 1
	[0133.673] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744b60 | out: pbBuffer=0x12744b60) returned 1
	[0133.674] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.674] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0133.674] WriteFile (in: hFile=0x33c, lpBuffer=0x12678500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12678500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.674] CloseHandle (hObject=0x33c) returned 1
	[0133.674] CloseHandle (hObject=0x2cc) returned 1
	[0133.674] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.676] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0133.717] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.717] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0133.750] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.750] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0133.750] SetEvent (hEvent=0x2f4) returned 1
	[0133.750] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0133.795] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.796] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0133.796] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8415dbd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8415dbd0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1
	[0133.796] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0133.796] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0133.796] ReadFile (in: hFile=0x2cc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f3d1c*=0xe2, lpOverlapped=0x0) returned 1
	[0133.797] GetFileType (hFile=0x2cc) returned 0x1
	[0133.797] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.797] WriteFile (in: hFile=0x2cc, lpBuffer=0x124b8000*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x124b8000*, lpNumberOfBytesWritten=0x124f3d00*=0xe2, lpOverlapped=0x124f3d0c) returned 1
	[0133.797] GetFileType (hFile=0x2cc) returned 0x1
	[0133.797] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.797] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0133.798] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0133.798] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0133.798] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0133.798] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.798] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0133.798] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.798] CloseHandle (hObject=0x33c) returned 1
	[0133.798] CloseHandle (hObject=0x2cc) returned 1
	[0133.799] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\fr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0133.800] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0133.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84165100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84165100, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xee)) returned 1
	[0133.800] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0133.800] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0133.800] ReadFile (in: hFile=0x2cc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0xee, lpOverlapped=0x0) returned 1
	[0133.801] GetFileType (hFile=0x2cc) returned 0x1
	[0133.801] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.801] WriteFile (in: hFile=0x2cc, lpBuffer=0x124b80f0*, nNumberOfBytesToWrite=0xee, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124b80f0*, lpNumberOfBytesWritten=0x124f5d00*=0xee, lpOverlapped=0x124f5d0c) returned 1
	[0133.802] GetFileType (hFile=0x2cc) returned 0x1
	[0133.802] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xee, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0133.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0133.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0133.802] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0133.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.802] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0133.802] WriteFile (in: hFile=0x33c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.803] CloseHandle (hObject=0x33c) returned 1
	[0133.803] CloseHandle (hObject=0x2cc) returned 1
	[0133.803] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\he\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.804] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0133.934] SetEvent (hEvent=0x68) returned 1
	[0133.934] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0133.934] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0133.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8417b090, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8417b090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1
	[0133.934] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0133.934] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0133.935] ReadFile (in: hFile=0x33c, lpBuffer=0x12926000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12926000*, lpNumberOfBytesRead=0x124f3d1c*=0xd8, lpOverlapped=0x0) returned 1
	[0133.936] GetFileType (hFile=0x33c) returned 0x1
	[0133.936] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.936] WriteFile (in: hFile=0x33c, lpBuffer=0x12534540*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12534540*, lpNumberOfBytesWritten=0x124f3d00*=0xd8, lpOverlapped=0x124f3d0c) returned 1
	[0133.936] GetFileType (hFile=0x33c) returned 0x1
	[0133.936] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xd8, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0133.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0133.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0133.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0133.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0133.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0133.937] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0133.937] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0133.938] CloseHandle (hObject=0x340) returned 1
	[0133.938] CloseHandle (hObject=0x33c) returned 1
	[0133.938] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\id\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0133.939] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.030] SetEvent (hEvent=0x68) returned 1
	[0134.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.031] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0134.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84189af0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84189af0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b43b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf5)) returned 1
	[0134.031] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb20 | out: pbBuffer=0x1244cb20) returned 1
	[0134.031] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0134.031] ReadFile (in: hFile=0x2cc, lpBuffer=0x126ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ba000*, lpNumberOfBytesRead=0x12429d1c*=0xf5, lpOverlapped=0x0) returned 1
	[0134.032] GetFileType (hFile=0x2cc) returned 0x1
	[0134.032] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.032] WriteFile (in: hFile=0x2cc, lpBuffer=0x12601000*, nNumberOfBytesToWrite=0xf5, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12601000*, lpNumberOfBytesWritten=0x12429d00*=0xf5, lpOverlapped=0x12429d0c) returned 1
	[0134.033] GetFileType (hFile=0x2cc) returned 0x1
	[0134.033] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xf5, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0134.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0134.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0134.033] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106e0 | out: pbBuffer=0x124106e0) returned 1
	[0134.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.034] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0134.034] WriteFile (in: hFile=0x33c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.034] CloseHandle (hObject=0x33c) returned 1
	[0134.034] CloseHandle (hObject=0x2cc) returned 1
	[0134.034] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ja\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0134.036] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0134.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x125e9ad0 | out: lpFileInformation=0x125e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84191020, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84191020, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x844b6ac0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1
	[0134.036] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd40 | out: pbBuffer=0x1244cd40) returned 1
	[0134.036] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106f8 | out: pbBuffer=0x124106f8) returned 1
	[0134.036] ReadFile (in: hFile=0x2cc, lpBuffer=0x126fa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x126fa000*, lpNumberOfBytesRead=0x125e9d1c*=0xe0, lpOverlapped=0x0) returned 1
	[0134.037] GetFileType (hFile=0x2cc) returned 0x1
	[0134.037] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.037] WriteFile (in: hFile=0x2cc, lpBuffer=0x12534b60*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x125e9d00, lpOverlapped=0x125e9d0c | out: lpBuffer=0x12534b60*, lpNumberOfBytesWritten=0x125e9d00*=0xe0, lpOverlapped=0x125e9d0c) returned 1
	[0134.038] GetFileType (hFile=0x2cc) returned 0x1
	[0134.038] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xe0, lpNewFilePointer=0x0, dwMoveMethod=0x125e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0134.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0134.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0134.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107f0 | out: pbBuffer=0x124107f0) returned 1
	[0134.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.038] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125e9d0c | out: lpMode=0x125e9d0c) returned 0
	[0134.038] WriteFile (in: hFile=0x33c, lpBuffer=0x12768000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12768000*, lpNumberOfBytesWritten=0x125e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.039] CloseHandle (hObject=0x33c) returned 1
	[0134.039] CloseHandle (hObject=0x2cc) returned 1
	[0134.039] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\felcaaldnbdncclmgdcncolpebgiejap\\1.1_0\\_locales\\ko\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.040] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.130] SetEvent (hEvent=0x68) returned 1
	[0134.130] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.177] SetEvent (hEvent=0x68) returned 1
	[0134.177] SetEvent (hEvent=0x70) returned 1
	[0134.177] SetEvent (hEvent=0x2f4) returned 1
	[0134.177] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.378] SetEvent (hEvent=0x68) returned 1
	[0134.378] SetEvent (hEvent=0x70) returned 1
	[0134.378] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.534] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.557] SetEvent (hEvent=0x70) returned 1
	[0134.557] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.574] SetEvent (hEvent=0x2e8) returned 1
	[0134.574] SetEvent (hEvent=0x68) returned 1
	[0134.574] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.749] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.761] SetEvent (hEvent=0x80) returned 1
	[0134.761] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.771] SetEvent (hEvent=0x80) returned 1
	[0134.771] SwitchToThread () returned 1
	[0134.771] SetEvent (hEvent=0x70) returned 1
	[0134.771] SetEvent (hEvent=0x80) returned 1
	[0134.772] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.787] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.821] SetEvent (hEvent=0x68) returned 1
	[0134.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.821] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1
	[0134.822] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0134.822] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0134.822] ReadFile (in: hFile=0x340, lpBuffer=0x12942000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12942000*, lpNumberOfBytesRead=0x124f3d1c*=0xac, lpOverlapped=0x0) returned 1
	[0134.823] GetFileType (hFile=0x340) returned 0x1
	[0134.823] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.823] WriteFile (in: hFile=0x340, lpBuffer=0x12648000*, nNumberOfBytesToWrite=0xac, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12648000*, lpNumberOfBytesWritten=0x124f3d00*=0xac, lpOverlapped=0x124f3d0c) returned 1
	[0134.823] GetFileType (hFile=0x340) returned 0x1
	[0134.824] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xac, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.824] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0134.824] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0134.824] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0134.824] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0134.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.825] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0134.825] WriteFile (in: hFile=0x33c, lpBuffer=0x1277a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277a000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.825] CloseHandle (hObject=0x33c) returned 1
	[0134.825] CloseHandle (hObject=0x340) returned 1
	[0134.825] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\da\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0134.826] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e23760, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e256a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc1)) returned 1
	[0134.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0134.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0134.827] ReadFile (in: hFile=0x340, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f5d1c*=0xc1, lpOverlapped=0x0) returned 1
	[0134.828] GetFileType (hFile=0x340) returned 0x1
	[0134.828] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.828] WriteFile (in: hFile=0x340, lpBuffer=0x12462000*, nNumberOfBytesToWrite=0xc1, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12462000*, lpNumberOfBytesWritten=0x124f5d00*=0xc1, lpOverlapped=0x124f5d0c) returned 1
	[0134.828] GetFileType (hFile=0x340) returned 0x1
	[0134.829] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xc1, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.829] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0134.829] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0134.829] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0134.829] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0134.829] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.829] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.830] WriteFile (in: hFile=0x33c, lpBuffer=0x1277a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277a500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.830] CloseHandle (hObject=0x33c) returned 1
	[0134.830] CloseHandle (hObject=0x340) returned 1
	[0134.830] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\de\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.831] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0134.878] SetEvent (hEvent=0x80) returned 1
	[0134.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0134.878] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.878] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e498c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e4a090, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xcc)) returned 1
	[0134.879] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0134.879] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0134.879] ReadFile (in: hFile=0x33c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f5d1c*=0xcc, lpOverlapped=0x0) returned 1
	[0134.880] GetFileType (hFile=0x33c) returned 0x1
	[0134.880] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.880] WriteFile (in: hFile=0x33c, lpBuffer=0x124620d0*, nNumberOfBytesToWrite=0xcc, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124620d0*, lpNumberOfBytesWritten=0x124f5d00*=0xcc, lpOverlapped=0x124f5d0c) returned 1
	[0134.881] GetFileType (hFile=0x33c) returned 0x1
	[0134.881] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xcc, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0134.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0134.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0134.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0134.882] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0134.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0134.882] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0134.882] WriteFile (in: hFile=0x344, lpBuffer=0x1277b400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1277b400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0134.882] CloseHandle (hObject=0x344) returned 1
	[0134.882] CloseHandle (hObject=0x33c) returned 1
	[0134.883] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\es\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0134.883] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.125] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.209] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x12c)) returned 1
	[0135.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0135.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0135.209] ReadFile (in: hFile=0x340, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12429d1c*=0x12c, lpOverlapped=0x0) returned 1
	[0135.211] GetFileType (hFile=0x340) returned 0x1
	[0135.211] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.211] WriteFile (in: hFile=0x340, lpBuffer=0x124b0280*, nNumberOfBytesToWrite=0x12c, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124b0280*, lpNumberOfBytesWritten=0x12429d00*=0x12c, lpOverlapped=0x12429d0c) returned 1
	[0135.217] GetFileType (hFile=0x340) returned 0x1
	[0135.217] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x12c, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.217] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0135.217] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0135.217] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0135.217] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0135.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.218] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.218] WriteFile (in: hFile=0x34c, lpBuffer=0x12606000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12606000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.221] CloseHandle (hObject=0x34c) returned 1
	[0135.221] CloseHandle (hObject=0x340) returned 1
	[0135.224] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\mr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.236] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.241] SetEvent (hEvent=0x70) returned 1
	[0135.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.242] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f2e100, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f2f870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x20b)) returned 1
	[0135.242] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0135.243] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0135.243] ReadFile (in: hFile=0x34c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1242bd1c*=0x20b, lpOverlapped=0x0) returned 1
	[0135.244] GetFileType (hFile=0x34c) returned 0x1
	[0135.244] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.244] WriteFile (in: hFile=0x34c, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x20b, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x1242bd00*=0x20b, lpOverlapped=0x1242bd0c) returned 1
	[0135.247] GetFileType (hFile=0x34c) returned 0x1
	[0135.247] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x20b, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.248] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0135.248] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0135.248] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0135.248] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0135.248] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.248] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.248] WriteFile (in: hFile=0x32c, lpBuffer=0x12606500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12606500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.250] CloseHandle (hObject=0x32c) returned 1
	[0135.250] CloseHandle (hObject=0x34c) returned 1
	[0135.252] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ne\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.259] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.266] SetEvent (hEvent=0x70) returned 1
	[0135.266] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.266] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x96)) returned 1
	[0135.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0135.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0135.267] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0135.268] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb28, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb28, ulNumEntriesRemoved=0x33fbfb0c) returned 0
	[0135.268] SetEvent (hEvent=0x70) returned 1
	[0135.269] ReadFile (in: hFile=0x32c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x96, lpOverlapped=0x0) returned 1
	[0135.270] GetFileType (hFile=0x32c) returned 0x1
	[0135.270] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.270] WriteFile (in: hFile=0x32c, lpBuffer=0x12462820*, nNumberOfBytesToWrite=0x96, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12462820*, lpNumberOfBytesWritten=0x12429d00*=0x96, lpOverlapped=0x12429d0c) returned 1
	[0135.270] GetFileType (hFile=0x32c) returned 0x1
	[0135.270] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x96, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0135.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0135.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0135.271] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0135.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.272] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.272] WriteFile (in: hFile=0x348, lpBuffer=0x12606a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12606a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.272] CloseHandle (hObject=0x348) returned 1
	[0135.272] CloseHandle (hObject=0x32c) returned 1
	[0135.272] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\no\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.274] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0135.275] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.275] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0135.276] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0135.276] SetEvent (hEvent=0x2e8) returned 1
	[0135.276] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0135.286] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.286] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.287] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.287] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1
	[0135.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0135.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0135.287] ReadFile (in: hFile=0x32c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1242bd1c*=0xb4, lpOverlapped=0x0) returned 1
	[0135.289] GetFileType (hFile=0x32c) returned 0x1
	[0135.289] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.289] WriteFile (in: hFile=0x32c, lpBuffer=0x1277e000*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1277e000*, lpNumberOfBytesWritten=0x1242bd00*=0xb4, lpOverlapped=0x1242bd0c) returned 1
	[0135.289] GetFileType (hFile=0x32c) returned 0x1
	[0135.289] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xb4, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0135.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0135.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0135.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0135.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.290] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.290] WriteFile (in: hFile=0x348, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.291] CloseHandle (hObject=0x348) returned 1
	[0135.291] CloseHandle (hObject=0x32c) returned 1
	[0135.291] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.293] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f54260, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f54260, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1
	[0135.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0135.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0135.293] ReadFile (in: hFile=0x32c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0xbb, lpOverlapped=0x0) returned 1
	[0135.295] GetFileType (hFile=0x32c) returned 0x1
	[0135.295] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.295] WriteFile (in: hFile=0x32c, lpBuffer=0x1277e240*, nNumberOfBytesToWrite=0xbb, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1277e240*, lpNumberOfBytesWritten=0x12429d00*=0xbb, lpOverlapped=0x12429d0c) returned 1
	[0135.295] GetFileType (hFile=0x32c) returned 0x1
	[0135.295] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xbb, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0135.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0135.295] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0135.296] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0135.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.296] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.296] WriteFile (in: hFile=0x348, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.296] CloseHandle (hObject=0x348) returned 1
	[0135.296] CloseHandle (hObject=0x32c) returned 1
	[0135.297] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_BR\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\pt_br\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.298] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.321] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.330] SetEvent (hEvent=0x70) returned 1
	[0135.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.335] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1
	[0135.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0135.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0135.336] ReadFile (in: hFile=0x32c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x1242bd1c*=0x119, lpOverlapped=0x0) returned 1
	[0135.337] GetFileType (hFile=0x32c) returned 0x1
	[0135.337] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.337] WriteFile (in: hFile=0x32c, lpBuffer=0x125ec480*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125ec480*, lpNumberOfBytesWritten=0x1242bd00*=0x119, lpOverlapped=0x1242bd0c) returned 1
	[0135.346] GetFileType (hFile=0x32c) returned 0x1
	[0135.347] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x119, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0135.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0135.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0135.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0135.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.347] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.347] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.349] CloseHandle (hObject=0x34c) returned 1
	[0135.349] CloseHandle (hObject=0x32c) returned 1
	[0135.351] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\ru\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.357] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.362] SetEvent (hEvent=0x80) returned 1
	[0135.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.363] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85f7a3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85f7b360, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1
	[0135.363] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0135.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105c8 | out: pbBuffer=0x124105c8) returned 1
	[0135.364] ReadFile (in: hFile=0x34c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f1d1c*=0xbe, lpOverlapped=0x0) returned 1
	[0135.366] GetFileType (hFile=0x34c) returned 0x1
	[0135.366] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.366] WriteFile (in: hFile=0x34c, lpBuffer=0x1277e480*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1277e480*, lpNumberOfBytesWritten=0x124f1d00*=0xbe, lpOverlapped=0x124f1d0c) returned 1
	[0135.368] GetFileType (hFile=0x34c) returned 0x1
	[0135.368] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xbe, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.368] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0135.368] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0135.368] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0135.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106f0 | out: pbBuffer=0x124106f0) returned 1
	[0135.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.369] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.369] WriteFile (in: hFile=0x348, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.370] CloseHandle (hObject=0x348) returned 1
	[0135.370] CloseHandle (hObject=0x34c) returned 1
	[0135.370] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sl\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.372] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.382] SetEvent (hEvent=0x70) returned 1
	[0135.382] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.382] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1
	[0135.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8c0 | out: pbBuffer=0x1252e8c0) returned 1
	[0135.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410718 | out: pbBuffer=0x12410718) returned 1
	[0135.383] ReadFile (in: hFile=0x34c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x12429d1c*=0x104, lpOverlapped=0x0) returned 1
	[0135.384] GetFileType (hFile=0x34c) returned 0x1
	[0135.384] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.384] WriteFile (in: hFile=0x34c, lpBuffer=0x125e65a0*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125e65a0*, lpNumberOfBytesWritten=0x12429d00*=0x104, lpOverlapped=0x12429d0c) returned 1
	[0135.384] GetFileType (hFile=0x34c) returned 0x1
	[0135.385] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x104, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0135.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0135.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0135.385] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410800 | out: pbBuffer=0x12410800) returned 1
	[0135.385] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.386] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.386] WriteFile (in: hFile=0x348, lpBuffer=0x12716000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12716000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.386] CloseHandle (hObject=0x348) returned 1
	[0135.386] CloseHandle (hObject=0x34c) returned 1
	[0135.386] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.388] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fa0520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fa2460, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1
	[0135.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252eae0 | out: pbBuffer=0x1252eae0) returned 1
	[0135.388] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410818 | out: pbBuffer=0x12410818) returned 1
	[0135.388] ReadFile (in: hFile=0x34c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x1242bd1c*=0xb3, lpOverlapped=0x0) returned 1
	[0135.390] GetFileType (hFile=0x34c) returned 0x1
	[0135.390] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.390] WriteFile (in: hFile=0x34c, lpBuffer=0x1277e6c0*, nNumberOfBytesToWrite=0xb3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1277e6c0*, lpNumberOfBytesWritten=0x1242bd00*=0xb3, lpOverlapped=0x1242bd0c) returned 1
	[0135.390] GetFileType (hFile=0x34c) returned 0x1
	[0135.390] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xb3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0135.390] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed081 | out: pbBuffer=0x124ed081) returned 1
	[0135.391] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed181 | out: pbBuffer=0x124ed181) returned 1
	[0135.391] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410960 | out: pbBuffer=0x12410960) returned 1
	[0135.391] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.391] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.391] WriteFile (in: hFile=0x348, lpBuffer=0x12716500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12716500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.391] CloseHandle (hObject=0x348) returned 1
	[0135.391] CloseHandle (hObject=0x34c) returned 1
	[0135.392] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\sv\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.393] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.402] SetEvent (hEvent=0x70) returned 1
	[0135.402] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.409] SetEvent (hEvent=0x70) returned 1
	[0135.409] SetEvent (hEvent=0x80) returned 1
	[0135.409] SetEvent (hEvent=0x2e8) returned 1
	[0135.409] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.480] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.524] SetEvent (hEvent=0x70) returned 1
	[0135.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.525] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x862fc2f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1
	[0135.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0135.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0135.525] ReadFile (in: hFile=0x34c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1242bd1c*=0xb0, lpOverlapped=0x0) returned 1
	[0135.527] GetFileType (hFile=0x34c) returned 0x1
	[0135.527] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.527] WriteFile (in: hFile=0x34c, lpBuffer=0x1262a000*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1262a000*, lpNumberOfBytesWritten=0x1242bd00*=0xb0, lpOverlapped=0x1242bd0c) returned 1
	[0135.527] GetFileType (hFile=0x34c) returned 0x1
	[0135.527] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xb0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.527] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0135.528] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0135.528] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0135.528] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0135.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.528] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0135.528] WriteFile (in: hFile=0x348, lpBuffer=0x1276a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1276a000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.529] CloseHandle (hObject=0x348) returned 1
	[0135.529] CloseHandle (hObject=0x34c) returned 1
	[0135.529] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_CN\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_cn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.531] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85fec7e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85fedf50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1
	[0135.531] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0135.531] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0135.531] ReadFile (in: hFile=0x34c, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f5d1c*=0xd2, lpOverlapped=0x0) returned 1
	[0135.533] GetFileType (hFile=0x34c) returned 0x1
	[0135.533] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.534] WriteFile (in: hFile=0x34c, lpBuffer=0x125f60e0*, nNumberOfBytesToWrite=0xd2, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125f60e0*, lpNumberOfBytesWritten=0x124f5d00*=0xd2, lpOverlapped=0x124f5d0c) returned 1
	[0135.534] GetFileType (hFile=0x34c) returned 0x1
	[0135.534] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xd2, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.534] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0135.534] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0135.534] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0135.534] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0135.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0135.534] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0135.535] WriteFile (in: hFile=0x348, lpBuffer=0x1276a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1276a500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.535] CloseHandle (hObject=0x348) returned 1
	[0135.535] CloseHandle (hObject=0x34c) returned 1
	[0135.535] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_HK\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\_locales\\zh_hk\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.537] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.547] SetEvent (hEvent=0x70) returned 1
	[0135.547] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.553] SetEvent (hEvent=0x2e8) returned 1
	[0135.553] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.574] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.592] SetEvent (hEvent=0x80) returned 1
	[0135.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.592] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86012940, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86012940, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x47d5c900, ftLastWriteTime.dwHighDateTime=0x1d1781e, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1
	[0135.593] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0135.593] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0135.593] ReadFile (in: hFile=0x32c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x12429d1c*=0x5b6c, lpOverlapped=0x0) returned 1
	[0135.599] GetFileType (hFile=0x32c) returned 0x1
	[0135.599] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.600] WriteFile (in: hFile=0x32c, lpBuffer=0x125f0000*, nNumberOfBytesToWrite=0x5b6c, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125f0000*, lpNumberOfBytesWritten=0x12429d00*=0x5b6c, lpOverlapped=0x12429d0c) returned 1
	[0135.701] GetFileType (hFile=0x32c) returned 0x1
	[0135.701] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x5b6c, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400401 | out: pbBuffer=0x12400401) returned 1
	[0135.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0135.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0135.702] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0135.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0135.703] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.703] WriteFile (in: hFile=0x340, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.706] CloseHandle (hObject=0x340) returned 1
	[0135.706] CloseHandle (hObject=0x32c) returned 1
	[0135.707] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_0\\eventpage_bin_prod.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.749] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8267ddb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8267ddb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2c1)) returned 1
	[0135.749] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127327a0 | out: pbBuffer=0x127327a0) returned 1
	[0135.749] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e818 | out: pbBuffer=0x1251e818) returned 1
	[0135.749] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0135.750] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb28, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb28, ulNumEntriesRemoved=0x33fbfb0c) returned 0
	[0135.750] SetEvent (hEvent=0x68) returned 1
	[0135.750] ReadFile (in: hFile=0x34c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x12429d1c*=0x2c1, lpOverlapped=0x0) returned 1
	[0135.762] GetFileType (hFile=0x34c) returned 0x1
	[0135.762] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.762] WriteFile (in: hFile=0x34c, lpBuffer=0x1260a300*, nNumberOfBytesToWrite=0x2c1, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1260a300*, lpNumberOfBytesWritten=0x12429d00*=0x2c1, lpOverlapped=0x12429d0c) returned 1
	[0135.762] GetFileType (hFile=0x34c) returned 0x1
	[0135.762] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x2c1, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.762] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0135.762] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0135.762] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0135.762] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0135.762] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.763] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.763] WriteFile (in: hFile=0x32c, lpBuffer=0x125e8000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e8000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.763] CloseHandle (hObject=0x32c) returned 1
	[0135.763] CloseHandle (hObject=0x34c) returned 1
	[0135.763] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\ca\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.764] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.771] SetEvent (hEvent=0x2e8) returned 1
	[0135.771] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.772] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826a27a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826a4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x297)) returned 1
	[0135.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0135.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0135.772] ReadFile (in: hFile=0x34c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f1d1c*=0x297, lpOverlapped=0x0) returned 1
	[0135.784] GetFileType (hFile=0x34c) returned 0x1
	[0135.785] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.785] WriteFile (in: hFile=0x34c, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x297, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x124f1d00*=0x297, lpOverlapped=0x124f1d0c) returned 1
	[0135.785] GetFileType (hFile=0x34c) returned 0x1
	[0135.785] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x297, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0135.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0135.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0135.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0135.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.786] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.786] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.786] CloseHandle (hObject=0x2cc) returned 1
	[0135.786] CloseHandle (hObject=0x34c) returned 1
	[0135.786] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\cs\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.787] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x127d5d0c | out: lpMode=0x127d5d0c) returned 0
	[0135.787] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x127d5ad0 | out: lpFileInformation=0x127d5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bae40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826bae40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2bd)) returned 1
	[0135.788] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0135.788] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0135.788] ReadFile (in: hFile=0x34c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x127d5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x127d5d1c*=0x2bd, lpOverlapped=0x0) returned 1
	[0135.803] GetFileType (hFile=0x34c) returned 0x1
	[0135.803] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x127d5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.803] WriteFile (in: hFile=0x34c, lpBuffer=0x12780580*, nNumberOfBytesToWrite=0x2bd, lpNumberOfBytesWritten=0x127d5d00, lpOverlapped=0x127d5d0c | out: lpBuffer=0x12780580*, lpNumberOfBytesWritten=0x127d5d00*=0x2bd, lpOverlapped=0x127d5d0c) returned 1
	[0135.803] GetFileType (hFile=0x34c) returned 0x1
	[0135.803] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x2bd, lpNewFilePointer=0x0, dwMoveMethod=0x127d5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0135.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0135.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0135.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0135.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.804] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x127d5d0c | out: lpMode=0x127d5d0c) returned 0
	[0135.804] WriteFile (in: hFile=0x33c, lpBuffer=0x1263a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x127d5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263a500*, lpNumberOfBytesWritten=0x127d5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.804] CloseHandle (hObject=0x33c) returned 1
	[0135.805] CloseHandle (hObject=0x34c) returned 1
	[0135.805] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\de\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.806] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826e9470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826ebb80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.806] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.807] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.807] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0135.808] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.808] WriteFile (in: hFile=0x34c, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.809] CloseHandle (hObject=0x34c) returned 1
	[0135.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826ebb80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826ebb80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x2b8)) returned 1
	[0135.820] SetEvent (hEvent=0x2e8) returned 1
	[0135.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.821] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826f30b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x826f7ed0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.821] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.821] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.821] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.822] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.822] WriteFile (in: hFile=0x32c, lpBuffer=0x1276f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1276f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.824] CloseHandle (hObject=0x32c) returned 1
	[0135.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826f7ed0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x826f7ed0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29b)) returned 1
	[0135.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.824] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0135.824] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0135.825] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x826ff400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82701b10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82701b10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0135.825] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0135.825] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0135.825] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0135.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0135.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0135.826] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.826] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0135.826] WriteFile (in: hFile=0x32c, lpBuffer=0x12770600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12770600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0135.828] CloseHandle (hObject=0x32c) returned 1
	[0135.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82701b10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82704220, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aada20, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x261)) returned 1
	[0135.832] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\fi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x82709040, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8270de60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8270de60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0135.839] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.845] SetEvent (hEvent=0x2e8) returned 1
	[0135.845] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.891] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8272da30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8272da30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ad)) returned 1
	[0135.891] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0135.891] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0135.891] ReadFile (in: hFile=0x2cc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f1d1c*=0x3ad, lpOverlapped=0x0) returned 1
	[0135.903] GetFileType (hFile=0x2cc) returned 0x1
	[0135.903] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.904] WriteFile (in: hFile=0x2cc, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x3ad, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x124f1d00*=0x3ad, lpOverlapped=0x124f1d0c) returned 1
	[0135.904] GetFileType (hFile=0x2cc) returned 0x1
	[0135.904] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x3ad, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0135.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0135.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0135.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0135.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0135.905] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.905] WriteFile (in: hFile=0x33c, lpBuffer=0x1297e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1297e500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.905] CloseHandle (hObject=0x33c) returned 1
	[0135.905] CloseHandle (hObject=0x2cc) returned 1
	[0135.905] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\hi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.916] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.916] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82752420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82752420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x269)) returned 1
	[0135.916] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0135.916] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0135.916] ReadFile (in: hFile=0x2cc, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f1d1c*=0x269, lpOverlapped=0x0) returned 1
	[0135.935] GetFileType (hFile=0x2cc) returned 0x1
	[0135.935] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.935] WriteFile (in: hFile=0x2cc, lpBuffer=0x12787680*, nNumberOfBytesToWrite=0x269, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12787680*, lpNumberOfBytesWritten=0x124f1d00*=0x269, lpOverlapped=0x124f1d0c) returned 1
	[0135.936] GetFileType (hFile=0x2cc) returned 0x1
	[0135.936] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x269, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0135.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0135.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0135.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0135.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0135.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0135.937] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0135.937] WriteFile (in: hFile=0x32c, lpBuffer=0x1297ea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1297ea00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0135.937] CloseHandle (hObject=0x32c) returned 1
	[0135.937] CloseHandle (hObject=0x2cc) returned 1
	[0135.937] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\id\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0135.938] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.947] SetEvent (hEvent=0x68) returned 1
	[0135.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0135.948] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0135.948] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8275c060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8275c060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82ab0130, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x26e)) returned 1
	[0135.948] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4c0 | out: pbBuffer=0x1252e4c0) returned 1
	[0135.948] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0135.949] ReadFile (in: hFile=0x2cc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x26e, lpOverlapped=0x0) returned 1
	[0135.960] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0135.968] SetEvent (hEvent=0x80) returned 1
	[0135.968] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0136.399] SetEvent (hEvent=0x30c) returned 1
	[0136.399] SetEvent (hEvent=0x2e8) returned 1
	[0136.399] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.068] SetEvent (hEvent=0x70) returned 1
	[0142.068] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.173] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.654] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.699] SetEvent (hEvent=0x2e8) returned 1
	[0142.699] SetEvent (hEvent=0x68) returned 1
	[0142.699] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.710] SetEvent (hEvent=0x2f4) returned 1
	[0142.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_setup\\offers.html"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83685dc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83685dc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3b)) returned 1
	[0142.723] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.729] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.744] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.748] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.752] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.783] SetEvent (hEvent=0x2f4) returned 1
	[0142.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc26)) returned 1
	[0142.783] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.787] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.828] SetEvent (hEvent=0x2e4) returned 1
	[0142.828] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.830] SetEvent (hEvent=0x2f4) returned 1
	[0142.830] SetEvent (hEvent=0x30c) returned 1
	[0142.830] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0142.831] SetEvent (hEvent=0x80) returned 1
	[0142.831] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0143.979] SetEvent (hEvent=0x70) returned 1
	[0143.979] SetEvent (hEvent=0x2e8) returned 1
	[0143.979] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0144.151] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0146.189] SetEvent (hEvent=0x2f4) returned 1
	[0146.190] SetEvent (hEvent=0x30c) returned 1
	[0146.190] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0146.198] SetEvent (hEvent=0x2f4) returned 1
	[0146.199] SetEvent (hEvent=0x30c) returned 1
	[0146.199] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0146.206] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0147.128] SetEvent (hEvent=0x30c) returned 1
	[0147.128] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0147.362] SetEvent (hEvent=0x2e4) returned 1
	[0147.363] SetEvent (hEvent=0x2f4) returned 1
	[0147.363] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0147.364] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0147.364] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0147.364] SetEvent (hEvent=0x2e4) returned 1
	[0147.364] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0147.367] GetFileType (hFile=0x344) returned 0x1
	[0147.367] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.367] WriteFile (in: hFile=0x344, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0147.368] GetFileType (hFile=0x344) returned 0x1
	[0147.368] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.368] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0147.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0147.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0147.369] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880c0 | out: pbBuffer=0x127880c0) returned 1
	[0147.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0147.369] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0147.369] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0147.420] SetEvent (hEvent=0xa0) returned 1
	[0147.421] CloseHandle (hObject=0x340) returned 1
	[0147.444] CloseHandle (hObject=0x344) returned 1
	[0147.444] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\IconCache.db.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\iconcache.db.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0147.449] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0148.120] SetEvent (hEvent=0x80) returned 1
	[0148.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0148.121] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0148.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0148.121] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e260 | out: pbBuffer=0x1252e260) returned 1
	[0148.121] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0148.121] ReadFile (in: hFile=0x2cc, lpBuffer=0x128f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x128f8000*, lpNumberOfBytesRead=0x12429d1c*=0x7000, lpOverlapped=0x0) returned 1
	[0149.752] GetFileType (hFile=0x2cc) returned 0x1
	[0149.752] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0149.752] WriteFile (in: hFile=0x2cc, lpBuffer=0x125e9000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125e9000*, lpNumberOfBytesWritten=0x12429d00*=0x7000, lpOverlapped=0x12429d0c) returned 1
	[0149.752] GetFileType (hFile=0x2cc) returned 0x1
	[0149.753] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x7000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0149.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0149.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0149.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0149.754] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0149.754] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0149.754] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0149.754] WriteFile (in: hFile=0x344, lpBuffer=0x12612500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0149.754] CloseHandle (hObject=0x344) returned 1
	[0149.754] CloseHandle (hObject=0x2cc) returned 1
	[0149.754] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0149.756] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0149.851] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0149.906] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0150.119] SetEvent (hEvent=0x30c) returned 1
	[0150.119] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0150.182] SetEvent (hEvent=0x80) returned 1
	[0150.182] SetEvent (hEvent=0x2e4) returned 1
	[0150.182] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0150.344] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0150.379] SetEvent (hEvent=0x80) returned 1
	[0150.379] SetEvent (hEvent=0x2f4) returned 1
	[0150.379] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0150.533] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0150.987] SetEvent (hEvent=0x2e4) returned 1
	[0150.987] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0150.988] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0150.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0150.988] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0150.988] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0150.988] ReadFile (in: hFile=0x340, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f1d1c*=0x0, lpOverlapped=0x0) returned 1
	[0150.988] CloseHandle (hObject=0x340) returned 1
	[0150.988] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0150.989] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0150.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0150.989] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0150.989] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0150.989] ReadFile (in: hFile=0x340, lpBuffer=0x1289c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1289c000*, lpNumberOfBytesRead=0x124f1d1c*=0x0, lpOverlapped=0x0) returned 1
	[0150.989] CloseHandle (hObject=0x340) returned 1
	[0150.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0150.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0150.990] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0150.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0150.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0150.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0150.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ieonline.microsoft[1]", cAlternateFileName="IEONLI~1.MIC")) returned 1
	[0150.990] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0150.992] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0150.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0150.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0150.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0152.312] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0152.313] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0152.369] CloseHandle (hObject=0x33c) returned 1
	[0152.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0152.531] SetEvent (hEvent=0x80) returned 1
	[0152.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0152.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\ieonline.microsoft[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\ieonline.microsoft[1]"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x52d90010, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d90010, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52d90010, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0153.259] SetEvent (hEvent=0xa0) returned 1
	[0153.259] SetEvent (hEvent=0x30c) returned 1
	[0153.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0153.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0153.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0153.270] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0153.270] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0153.271] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd754c00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd754c00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd754c00, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.271] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0153.271] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0153.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0153.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0153.271] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IME12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\ime12\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0153.273] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0153.273] WriteFile (in: hFile=0x2cc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0153.275] CloseHandle (hObject=0x2cc) returned 1
	[0153.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0153.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0153.486] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0153.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.486] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0153.486] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0153.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0153.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0153.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP12\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp12\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0153.489] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0153.489] WriteFile (in: hFile=0x344, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0153.490] CloseHandle (hObject=0x344) returned 1
	[0153.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0153.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0153.669] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0153.669] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.669] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0153.670] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0153.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0153.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0153.670] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP8_1\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp8_1\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0153.706] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0153.706] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0153.710] CloseHandle (hObject=0x2cc) returned 1
	[0153.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0153.718] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0153.718] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0153.718] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd72eaa0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd72eaa0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd72eaa0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.719] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0153.719] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0153.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0153.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0153.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\IMJP9_0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\imjp9_0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0153.722] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0153.722] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245d300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1245d300*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0153.726] CloseHandle (hObject=0x2cc) returned 1
	[0153.726] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0153.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0153.766] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0153.807] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.807] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1
	[0153.807] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1
	[0153.807] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1
	[0153.807] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="frameiconcache.dat", cAlternateFileName="FRAMEI~1.DAT")) returned 1
	[0153.807] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1
	[0153.807] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0153.808] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0153.808] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0153.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0153.809] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0153.845] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0153.848] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0153.848] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245e600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1245e600*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0153.849] CloseHandle (hObject=0x2cc) returned 1
	[0153.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0153.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0153.898] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0153.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3LKBQZJ3", cAlternateFileName="")) returned 1
	[0153.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8NES5H33", cAlternateFileName="")) returned 1
	[0153.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FKLUIDU0", cAlternateFileName="")) returned 1
	[0153.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0153.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWLVMZRC", cAlternateFileName="")) returned 1
	[0153.898] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0153.898] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0153.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0153.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0153.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0153.940] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0153.940] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245f900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x1245f900*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0153.941] CloseHandle (hObject=0x2cc) returned 1
	[0153.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0153.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0153.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0153.945] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0153.945] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0153.945] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0153.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0153.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0153.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\3LKBQZJ3\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\3lkbqzj3\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0153.948] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0153.948] WriteFile (in: hFile=0x2cc, lpBuffer=0x12460c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12460c00*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0153.998] CloseHandle (hObject=0x2cc) returned 1
	[0153.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0153.999] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0154.000] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0154.000] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.000] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="get.adobe[1].xml", cAlternateFileName="GETADO~1.XML")) returned 1
	[0154.000] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0154.000] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0154.000] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0154.000] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0154.001] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0154.002] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0154.002] WriteFile (in: hFile=0x2cc, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0154.004] CloseHandle (hObject=0x2cc) returned 1
	[0154.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1
	[0154.041] SetEvent (hEvent=0x30c) returned 1
	[0154.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0154.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0154.060] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0154.062] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.062] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0154.062] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0154.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0154.062] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0154.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\FKLUIDU0\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\fkluidu0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0154.148] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0154.267] SetEvent (hEvent=0x30c) returned 1
	[0154.268] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0154.268] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0154.304] SetEvent (hEvent=0x30c) returned 1
	[0154.304] SetEvent (hEvent=0x2e4) returned 1
	[0154.304] WriteFile (in: hFile=0x33c, lpBuffer=0x12589300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12589300*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0154.315] CloseHandle (hObject=0x33c) returned 1
	[0154.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0154.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0154.316] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0154.317] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d705b70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.317] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0154.317] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0154.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0154.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0154.317] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\OWLVMZRC\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\owlvmzrc\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0154.319] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0154.319] WriteFile (in: hFile=0x33c, lpBuffer=0x12588000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12588000*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0154.320] CloseHandle (hObject=0x33c) returned 1
	[0154.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0154.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0154.366] SetEvent (hEvent=0x2e4) returned 1
	[0154.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0154.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0154.368] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0154.368] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed4ae10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6db5fbe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6db5fbe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.368] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1
	[0154.368] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1
	[0154.368] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0154.368] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0154.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0154.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0154.369] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0154.370] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0154.370] WriteFile (in: hFile=0x2cc, lpBuffer=0x1258a600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f77dc, lpOverlapped=0x0 | out: lpBuffer=0x1258a600*, lpNumberOfBytesWritten=0x124f77dc*=0x1180, lpOverlapped=0x0) returned 1
	[0154.371] CloseHandle (hObject=0x2cc) returned 1
	[0154.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0154.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0154.420] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0154.420] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4ed70f70, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bc84b10, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bc84b10, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.420] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0154.420] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0154.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0154.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0154.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\active\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0154.422] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0154.422] WriteFile (in: hFile=0x2cc, lpBuffer=0x1258b900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x1258b900*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0154.424] CloseHandle (hObject=0x2cc) returned 1
	[0154.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0154.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0154.498] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0154.533] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6db5fbe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x30603250, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0154.533] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="RECOVE~2.DAT")) returned 1
	[0154.533] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1
	[0154.533] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{4BD65~1.DAT")) returned 1
	[0154.533] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat", cAlternateFileName="{69512~1.DAT")) returned 1
	[0154.533] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0154.534] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0154.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0154.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0154.536] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0154.537] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0154.537] WriteFile (in: hFile=0x33c, lpBuffer=0x1258cc00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x1258cc00*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0154.539] CloseHandle (hObject=0x33c) returned 1
	[0154.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0154.539] SetEvent (hEvent=0x30c) returned 1
	[0154.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{AAE6BF5C-4991-11E7-8E2B-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{aae6bf5c-4991-11e7-8e2b-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6dd28c60, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6dd28c60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1
	[0154.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{4BD650F0-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{4bd650f0-c8f9-11e7-b5bf-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe35acf0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1
	[0154.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1
	[0155.131] SetEvent (hEvent=0xa0) returned 1
	[0155.131] SetEvent (hEvent=0x2f4) returned 1
	[0155.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9)) returned 1
	[0155.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0155.133] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0155.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30603250, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x30603250, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1
	[0155.133] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e6c0 | out: pbBuffer=0x1240e6c0) returned 1
	[0155.133] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0155.134] ReadFile (in: hFile=0x340, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f3d1c*=0x1200, lpOverlapped=0x0) returned 1
	[0155.201] GetFileType (hFile=0x340) returned 0x1
	[0155.201] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.201] WriteFile (in: hFile=0x340, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1200, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f3d00*=0x1200, lpOverlapped=0x124f3d0c) returned 1
	[0155.201] GetFileType (hFile=0x340) returned 0x1
	[0155.201] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x1200, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.202] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0155.202] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0155.202] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0155.202] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0155.202] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0155.202] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0155.202] WriteFile (in: hFile=0x34c, lpBuffer=0x127d8500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d8500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.203] CloseHandle (hObject=0x34c) returned 1
	[0155.290] CloseHandle (hObject=0x340) returned 1
	[0155.485] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\{69512155-C8F9-11E7-B5BF-C43DC7584A00}.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\{69512155-c8f9-11e7-b5bf-c43dc7584a00}.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.674] SetEvent (hEvent=0x2e4) returned 1
	[0155.674] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0155.684] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0155.685] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0155.690] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0155.690] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0155.690] SetEvent (hEvent=0x2e8) returned 1
	[0155.690] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0155.713] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0155.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0155.714] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0155.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2cf33a20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2cf33a20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1106c)) returned 1
	[0155.714] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0155.714] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0155.715] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0x1106c, lpOverlapped=0x0) returned 1
	[0155.766] GetFileType (hFile=0x33c) returned 0x1
	[0155.766] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.766] WriteFile (in: hFile=0x33c, lpBuffer=0x127c6000*, nNumberOfBytesToWrite=0x1106c, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127c6000*, lpNumberOfBytesWritten=0x124f3d00*=0x1106c, lpOverlapped=0x124f3d0c) returned 1
	[0155.767] GetFileType (hFile=0x33c) returned 0x1
	[0155.767] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1106c, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.767] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0155.767] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0155.767] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0155.768] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0155.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0155.768] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0155.768] WriteFile (in: hFile=0x34c, lpBuffer=0x125f6000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f6000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.768] CloseHandle (hObject=0x34c) returned 1
	[0155.769] CloseHandle (hObject=0x33c) returned 1
	[0155.769] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1
	[0155.902] SetEvent (hEvent=0x80) returned 1
	[0155.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1
	[0155.918] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0155.924] SetEvent (hEvent=0x30c) returned 1
	[0155.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1
	[0155.949] SetEvent (hEvent=0x2e8) returned 1
	[0155.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1
	[0155.974] SetEvent (hEvent=0x80) returned 1
	[0155.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1
	[0155.992] SetEvent (hEvent=0x2f4) returned 1
	[0155.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1
	[0156.021] SetEvent (hEvent=0x2e8) returned 1
	[0156.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\10_All_Music.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1
	[0156.034] SetEvent (hEvent=0x80) returned 1
	[0156.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\11_All_Pictures.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1
	[0156.061] SetEvent (hEvent=0x2f4) returned 1
	[0156.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0000E713\\12_All_Video.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\0000e713\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ca96f80, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2ca96f80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2ca96f80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1
	[0156.084] SetEvent (hEvent=0x2e8) returned 1
	[0156.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0156.088] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0156.088] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0156.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0156.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1
	[0156.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1
	[0156.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1
	[0156.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1
	[0156.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1
	[0156.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1
	[0156.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1
	[0156.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1
	[0156.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1
	[0156.115] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1
	[0156.116] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1
	[0156.116] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28ec86c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28ec86c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1
	[0156.116] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0156.116] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0156.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0156.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0156.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.120] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0156.120] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0156.129] CloseHandle (hObject=0x33c) returned 1
	[0156.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0156.132] SetEvent (hEvent=0x30c) returned 1
	[0156.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1
	[0156.159] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0156.209] SetEvent (hEvent=0x2e8) returned 1
	[0156.209] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0156.237] SetEvent (hEvent=0x2f4) returned 1
	[0156.237] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0156.240] SetEvent (hEvent=0x2e4) returned 1
	[0156.241] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0156.244] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0156.244] SetEvent (hEvent=0x2e4) returned 1
	[0156.244] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0156.245] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0156.502] SetEvent (hEvent=0x2e4) returned 1
	[0156.502] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0156.742] SetEvent (hEvent=0x30c) returned 1
	[0156.742] SetEvent (hEvent=0x80) returned 1
	[0156.742] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0156.751] SetEvent (hEvent=0x2e4) returned 1
	[0156.751] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0157.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0157.306] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0157.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7eaf750, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7eaf750, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7f21b70, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x21839)) returned 1
	[0157.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0157.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0157.306] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0157.634] SetEvent (hEvent=0xa0) returned 1
	[0157.635] GetFileType (hFile=0x33c) returned 0x1
	[0157.636] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.636] WriteFile (in: hFile=0x33c, lpBuffer=0x12694000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12694000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0157.637] GetFileType (hFile=0x33c) returned 0x1
	[0157.637] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece01 | out: pbBuffer=0x124ece01) returned 1
	[0157.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf01 | out: pbBuffer=0x124ecf01) returned 1
	[0157.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed001 | out: pbBuffer=0x124ed001) returned 1
	[0157.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410670 | out: pbBuffer=0x12410670) returned 1
	[0157.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0157.637] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0157.637] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.638] CloseHandle (hObject=0x34c) returned 1
	[0157.638] CloseHandle (hObject=0x33c) returned 1
	[0157.638] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\C\\E6\\9DCB7d01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\c\\e6\\9dcb7d01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.643] SetEvent (hEvent=0x80) returned 1
	[0157.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0157.645] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0157.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81e671d0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81e671d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81e671d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8266)) returned 1
	[0157.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732300 | out: pbBuffer=0x12732300) returned 1
	[0157.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106a8 | out: pbBuffer=0x124106a8) returned 1
	[0157.645] ReadFile (in: hFile=0x33c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x124f3d1c*=0x8266, lpOverlapped=0x0) returned 1
	[0157.734] GetFileType (hFile=0x33c) returned 0x1
	[0157.734] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.734] WriteFile (in: hFile=0x33c, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x8266, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x124f3d00*=0x8266, lpOverlapped=0x124f3d0c) returned 1
	[0157.751] GetFileType (hFile=0x33c) returned 0x1
	[0157.751] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x8266, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0157.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0157.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0157.751] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0157.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0157.752] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0157.752] WriteFile (in: hFile=0x348, lpBuffer=0x127d4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d4000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.757] CloseHandle (hObject=0x348) returned 1
	[0157.757] CloseHandle (hObject=0x33c) returned 1
	[0157.761] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\D\\08\\71469d01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\d\\08\\71469d01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.790] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0157.804] SetEvent (hEvent=0x80) returned 1
	[0157.804] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0157.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0157.809] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0157.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb6518ad0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb6518ad0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x851226b0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1
	[0157.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ec20 | out: pbBuffer=0x1240ec20) returned 1
	[0157.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127446b8 | out: pbBuffer=0x127446b8) returned 1
	[0157.809] ReadFile (in: hFile=0x33c, lpBuffer=0x128ca000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128ca000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0158.546] GetFileType (hFile=0x33c) returned 0x1
	[0158.546] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.546] WriteFile (in: hFile=0x33c, lpBuffer=0x1292a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1292a000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0158.552] GetFileType (hFile=0x33c) returned 0x1
	[0158.552] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0158.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434301 | out: pbBuffer=0x12434301) returned 1
	[0158.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434401 | out: pbBuffer=0x12434401) returned 1
	[0158.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434501 | out: pbBuffer=0x12434501) returned 1
	[0158.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744430 | out: pbBuffer=0x12744430) returned 1
	[0158.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0158.553] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0158.553] WriteFile (in: hFile=0x340, lpBuffer=0x127ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.398] CloseHandle (hObject=0x340) returned 1
	[0159.398] CloseHandle (hObject=0x33c) returned 1
	[0159.398] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\_CACHE_001_.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\_cache_001_.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.401] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0159.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0159.481] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x1262bd0c | out: lpMode=0x1262bd0c) returned 0
	[0159.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), fInfoLevelId=0x0, lpFileInformation=0x1262bad0 | out: lpFileInformation=0x1262bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb97ade50, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb97ade50, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb97ade50, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1c362)) returned 1
	[0159.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0159.482] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0159.482] ReadFile (in: hFile=0x354, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1262bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1262bd1c*=0x1c362, lpOverlapped=0x0) returned 1
	[0159.487] GetFileType (hFile=0x354) returned 0x1
	[0159.488] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1262bce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.488] WriteFile (in: hFile=0x354, lpBuffer=0x126f4000*, nNumberOfBytesToWrite=0x1c362, lpNumberOfBytesWritten=0x1262bd00, lpOverlapped=0x1262bd0c | out: lpBuffer=0x126f4000*, lpNumberOfBytesWritten=0x1262bd00*=0x1c362, lpOverlapped=0x1262bd0c) returned 1
	[0159.488] GetFileType (hFile=0x354) returned 0x1
	[0159.488] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x1c362, lpNewFilePointer=0x0, dwMoveMethod=0x1262bce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0159.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0159.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0159.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0159.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0159.489] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1262bd0c | out: lpMode=0x1262bd0c) returned 0
	[0159.489] WriteFile (in: hFile=0x340, lpBuffer=0x12768000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1262bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12768000*, lpNumberOfBytesWritten=0x1262bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.490] CloseHandle (hObject=0x340) returned 1
	[0159.490] CloseHandle (hObject=0x354) returned 1
	[0159.491] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ce8c0453589216a67cddb50284fbfe8d.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.494] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0159.546] SetEvent (hEvent=0x30c) returned 1
	[0159.546] SetEvent (hEvent=0x2e4) returned 1
	[0159.546] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0159.554] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0159.555] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0159.555] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0159.555] SetEvent (hEvent=0x2e4) returned 1
	[0159.555] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0159.560] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0159.574] SetEvent (hEvent=0x30c) returned 1
	[0159.574] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0159.575] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0159.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80993150, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80993150, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80993150, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xc)) returned 1
	[0159.576] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0159.576] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0159.576] ReadFile (in: hFile=0x354, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x1242bd1c*=0xc, lpOverlapped=0x0) returned 1
	[0159.578] GetFileType (hFile=0x354) returned 0x1
	[0159.578] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.578] WriteFile (in: hFile=0x354, lpBuffer=0x1251e010*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1251e010*, lpNumberOfBytesWritten=0x1242bd00*=0xc, lpOverlapped=0x1242bd0c) returned 1
	[0159.578] GetFileType (hFile=0x354) returned 0x1
	[0159.578] SetFilePointerEx (in: hFile=0x354, liDistanceToMove=0xc, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0159.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0159.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0159.579] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0f0 | out: pbBuffer=0x1251e0f0) returned 1
	[0159.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0159.579] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0159.579] WriteFile (in: hFile=0x340, lpBuffer=0x12768000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12768000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.579] CloseHandle (hObject=0x340) returned 1
	[0159.579] CloseHandle (hObject=0x354) returned 1
	[0159.580] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates\\0\\update.status.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates\\0\\update.status.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.604] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0159.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CFS3QJ2-sFifxS77OCu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cfs3qj2-sfifxs77ocu.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x67a13ae0, ftCreationTime.dwHighDateTime=0x1d5e641, ftLastAccessTime.dwLowDateTime=0xc31563a0, ftLastAccessTime.dwHighDateTime=0x1d5db16, ftLastWriteTime.dwLowDateTime=0xc31563a0, ftLastWriteTime.dwHighDateTime=0x1d5db16, nFileSizeHigh=0x0, nFileSizeLow=0x15bb9)) returned 1
	[0159.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CIT7_FUR7Qv8_cM326t.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cit7_fur7qv8_cm326t.mp4"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c78d870, ftCreationTime.dwHighDateTime=0x1d5dedf, ftLastAccessTime.dwLowDateTime=0xf09e0360, ftLastAccessTime.dwHighDateTime=0x1d5e05f, ftLastWriteTime.dwLowDateTime=0xf09e0360, ftLastWriteTime.dwHighDateTime=0x1d5e05f, nFileSizeHigh=0x0, nFileSizeLow=0x8ff6)) returned 1
	[0159.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CFS3QJ2-sFifxS77OCu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cfs3qj2-sfifxs77ocu.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0159.904] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CFS3QJ2-sFifxS77OCu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cfs3qj2-sfifxs77ocu.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x67a13ae0, ftCreationTime.dwHighDateTime=0x1d5e641, ftLastAccessTime.dwLowDateTime=0xc31563a0, ftLastAccessTime.dwHighDateTime=0x1d5db16, ftLastWriteTime.dwLowDateTime=0xc31563a0, ftLastWriteTime.dwHighDateTime=0x1d5db16, nFileSizeHigh=0x0, nFileSizeLow=0x15bb9)) returned 1
	[0159.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c4e0 | out: pbBuffer=0x1244c4e0) returned 1
	[0159.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e118 | out: pbBuffer=0x1251e118) returned 1
	[0159.904] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb28, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb28, ulNumEntriesRemoved=0x33fbfb0c) returned 0
	[0159.904] SetEvent (hEvent=0x68) returned 1
	[0159.905] ReadFile (in: hFile=0x340, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x15bb9, lpOverlapped=0x0) returned 1
	[0159.952] GetFileType (hFile=0x340) returned 0x1
	[0159.952] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.952] WriteFile (in: hFile=0x340, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x15bb9, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x124f5d00*=0x15bb9, lpOverlapped=0x124f5d0c) returned 1
	[0159.953] GetFileType (hFile=0x340) returned 0x1
	[0159.953] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x15bb9, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0159.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0159.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0159.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410778 | out: pbBuffer=0x12410778) returned 1
	[0159.954] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CFS3QJ2-sFifxS77OCu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cfs3qj2-sfifxs77ocu.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0159.954] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.954] WriteFile (in: hFile=0x354, lpBuffer=0x125fa500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fa500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.954] CloseHandle (hObject=0x354) returned 1
	[0159.954] CloseHandle (hObject=0x340) returned 1
	[0159.955] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CFS3QJ2-sFifxS77OCu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cfs3qj2-sfifxs77ocu.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CFS3QJ2-sFifxS77OCu.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cfs3qj2-sfifxs77ocu.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.960] SetEvent (hEvent=0x68) returned 1
	[0159.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CIT7_FUR7Qv8_cM326t.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cit7_fur7qv8_cm326t.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0159.961] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0159.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CIT7_FUR7Qv8_cM326t.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cit7_fur7qv8_cm326t.mp4"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c78d870, ftCreationTime.dwHighDateTime=0x1d5dedf, ftLastAccessTime.dwLowDateTime=0xf09e0360, ftLastAccessTime.dwHighDateTime=0x1d5e05f, ftLastWriteTime.dwLowDateTime=0xf09e0360, ftLastWriteTime.dwHighDateTime=0x1d5e05f, nFileSizeHigh=0x0, nFileSizeLow=0x8ff6)) returned 1
	[0159.961] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f400 | out: pbBuffer=0x1240f400) returned 1
	[0159.961] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124107b0 | out: pbBuffer=0x124107b0) returned 1
	[0159.962] ReadFile (in: hFile=0x340, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f5d1c*=0x8ff6, lpOverlapped=0x0) returned 1
	[0160.000] GetFileType (hFile=0x340) returned 0x1
	[0160.000] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0160.001] WriteFile (in: hFile=0x340, lpBuffer=0x12878000*, nNumberOfBytesToWrite=0x8ff6, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12878000*, lpNumberOfBytesWritten=0x124f5d00*=0x8ff6, lpOverlapped=0x124f5d0c) returned 1
	[0160.001] GetFileType (hFile=0x340) returned 0x1
	[0160.001] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x8ff6, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0160.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0160.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0160.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0160.002] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744350 | out: pbBuffer=0x12744350) returned 1
	[0160.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CIT7_FUR7Qv8_cM326t.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cit7_fur7qv8_cm326t.mp4"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0160.002] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0160.002] WriteFile (in: hFile=0x354, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0160.002] CloseHandle (hObject=0x354) returned 1
	[0160.003] CloseHandle (hObject=0x340) returned 1
	[0160.003] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CIT7_FUR7Qv8_cM326t.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cit7_fur7qv8_cm326t.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\CIT7_FUR7Qv8_cM326t.mp4.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\cit7_fur7qv8_cm326t.mp4.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0160.047] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0160.145] SetEvent (hEvent=0x80) returned 1
	[0160.145] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0160.781] SetEvent (hEvent=0x2e4) returned 1
	[0160.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0160.783] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0160.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x33d9ad10, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x33d9ad10, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0160.783] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f560 | out: pbBuffer=0x1240f560) returned 1
	[0160.784] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105d8 | out: pbBuffer=0x124105d8) returned 1
	[0160.784] ReadFile (in: hFile=0x350, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x0, lpOverlapped=0x0) returned 1
	[0160.784] CloseHandle (hObject=0x350) returned 1
	[0160.784] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0161.085] SetEvent (hEvent=0x30c) returned 1
	[0161.086] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0161.167] SetEvent (hEvent=0x2e8) returned 1
	[0161.167] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0161.205] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0161.205] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0161.239] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0161.239] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0161.239] SetEvent (hEvent=0x30c) returned 1
	[0161.239] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0161.298] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0161.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LoUl0Xu 5Q x.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\loul0xu 5q x.m4a"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x10cd3a90, ftCreationTime.dwHighDateTime=0x1d5d7b7, ftLastAccessTime.dwLowDateTime=0xd6dd8390, ftLastAccessTime.dwHighDateTime=0x1d5d99a, ftLastWriteTime.dwLowDateTime=0xd6dd8390, ftLastWriteTime.dwHighDateTime=0x1d5d99a, nFileSizeHigh=0x0, nFileSizeLow=0x16c62)) returned 1
	[0161.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LpOqcW.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lpoqcw.avi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59a58b10, ftCreationTime.dwHighDateTime=0x1d5dbc1, ftLastAccessTime.dwLowDateTime=0x73e928c0, ftLastAccessTime.dwHighDateTime=0x1d5dadf, ftLastWriteTime.dwLowDateTime=0x73e928c0, ftLastWriteTime.dwHighDateTime=0x1d5dadf, nFileSizeHigh=0x0, nFileSizeLow=0x180b2)) returned 1
	[0161.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\MsNG1LoqgdS VIpC w8I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\msng1loqgds vipc w8i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x680029f0, ftCreationTime.dwHighDateTime=0x1d5ded1, ftLastAccessTime.dwLowDateTime=0x9e58d670, ftLastAccessTime.dwHighDateTime=0x1d5e780, ftLastWriteTime.dwLowDateTime=0x9e58d670, ftLastWriteTime.dwHighDateTime=0x1d5e780, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1
	[0161.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Nm Ksy3vu h3xABn8 Z1.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nm ksy3vu h3xabn8 z1.mkv"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1f27d4f0, ftCreationTime.dwHighDateTime=0x1d5d9c0, ftLastAccessTime.dwLowDateTime=0x3ae95d70, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x3ae95d70, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x186f1)) returned 1
	[0161.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Noia9DZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\noia9dz.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeeb84ad0, ftCreationTime.dwHighDateTime=0x1d5e5ee, ftLastAccessTime.dwLowDateTime=0x20b78bf0, ftLastAccessTime.dwHighDateTime=0x1d5d9dc, ftLastWriteTime.dwLowDateTime=0x20b78bf0, ftLastWriteTime.dwHighDateTime=0x1d5d9dc, nFileSizeHigh=0x0, nFileSizeLow=0xe327)) returned 1
	[0161.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Nm Ksy3vu h3xABn8 Z1.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nm ksy3vu h3xabn8 z1.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0161.314] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0161.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Nm Ksy3vu h3xABn8 Z1.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nm ksy3vu h3xabn8 z1.mkv"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1f27d4f0, ftCreationTime.dwHighDateTime=0x1d5d9c0, ftLastAccessTime.dwLowDateTime=0x3ae95d70, ftLastAccessTime.dwHighDateTime=0x1d5e09c, ftLastWriteTime.dwLowDateTime=0x3ae95d70, ftLastWriteTime.dwHighDateTime=0x1d5e09c, nFileSizeHigh=0x0, nFileSizeLow=0x186f1)) returned 1
	[0161.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0161.314] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0161.314] ReadFile (in: hFile=0x344, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f5d1c*=0x186f1, lpOverlapped=0x0) returned 1
	[0161.360] GetFileType (hFile=0x344) returned 0x1
	[0161.360] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.360] WriteFile (in: hFile=0x344, lpBuffer=0x126d2000*, nNumberOfBytesToWrite=0x186f1, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x126d2000*, lpNumberOfBytesWritten=0x124f5d00*=0x186f1, lpOverlapped=0x124f5d0c) returned 1
	[0161.360] GetFileType (hFile=0x344) returned 0x1
	[0161.360] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x186f1, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.361] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0161.361] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0161.361] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0161.361] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0161.361] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Nm Ksy3vu h3xABn8 Z1.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nm ksy3vu h3xabn8 z1.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.361] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0161.361] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.362] CloseHandle (hObject=0x340) returned 1
	[0161.362] CloseHandle (hObject=0x344) returned 1
	[0161.362] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Nm Ksy3vu h3xABn8 Z1.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nm ksy3vu h3xabn8 z1.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Nm Ksy3vu h3xABn8 Z1.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\nm ksy3vu h3xabn8 z1.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.367] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Noia9DZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\noia9dz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0161.367] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0161.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Noia9DZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\noia9dz.jpg"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeeb84ad0, ftCreationTime.dwHighDateTime=0x1d5e5ee, ftLastAccessTime.dwLowDateTime=0x20b78bf0, ftLastAccessTime.dwHighDateTime=0x1d5d9dc, ftLastWriteTime.dwLowDateTime=0x20b78bf0, ftLastWriteTime.dwHighDateTime=0x1d5d9dc, nFileSizeHigh=0x0, nFileSizeLow=0xe327)) returned 1
	[0161.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0161.367] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0161.368] ReadFile (in: hFile=0x344, lpBuffer=0x126ec000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ec000*, lpNumberOfBytesRead=0x124f5d1c*=0xe327, lpOverlapped=0x0) returned 1
	[0161.448] GetFileType (hFile=0x344) returned 0x1
	[0161.449] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.449] WriteFile (in: hFile=0x344, lpBuffer=0x12962000*, nNumberOfBytesToWrite=0xe327, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12962000*, lpNumberOfBytesWritten=0x124f5d00*=0xe327, lpOverlapped=0x124f5d0c) returned 1
	[0161.449] GetFileType (hFile=0x344) returned 0x1
	[0161.449] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xe327, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0161.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0161.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0161.450] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5e0 | out: pbBuffer=0x1251e5e0) returned 1
	[0161.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Noia9DZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\noia9dz.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0161.450] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0161.450] WriteFile (in: hFile=0x354, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.451] CloseHandle (hObject=0x354) returned 1
	[0161.451] CloseHandle (hObject=0x344) returned 1
	[0161.451] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Noia9DZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\noia9dz.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Noia9DZ.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\noia9dz.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Qn_DRcPU5aoUEc8om.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qn_drcpu5aouec8om.mp3"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x351ea2c0, ftCreationTime.dwHighDateTime=0x1d5e0aa, ftLastAccessTime.dwLowDateTime=0xebb24d50, ftLastAccessTime.dwHighDateTime=0x1d5dba7, ftLastWriteTime.dwLowDateTime=0xebb24d50, ftLastWriteTime.dwHighDateTime=0x1d5dba7, nFileSizeHigh=0x0, nFileSizeLow=0x1437)) returned 1
	[0161.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0161.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0161.465] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0161.465] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd978bc80, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0161.465] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1
	[0161.465] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0161.465] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0161.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0161.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0161.465] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0161.467] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0161.467] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0161.468] CloseHandle (hObject=0x344) returned 1
	[0161.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0161.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0161.469] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\*", lpFindFileData=0x124f7904 | out: lpFindFileData=0x124f7904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0161.469] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0161.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="03J4UQW0", cAlternateFileName="")) returned 1
	[0161.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0161.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1
	[0161.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KETAJP6D", cAlternateFileName="")) returned 1
	[0161.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VB18B0KB", cAlternateFileName="")) returned 1
	[0161.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd97b1de0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97b1de0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97b1de0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XT1RPYG9", cAlternateFileName="")) returned 1
	[0161.470] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7948 | out: lpFindFileData=0x124f7948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0161.470] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0161.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f75cc | out: lpFileInformation=0x124f75cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0161.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0161.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.533] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f77dc | out: lpMode=0x124f77dc) returned 0
	[0161.533] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0161.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0161.794] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0161.794] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97d7f40, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97d7f40, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd97d7f40, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0161.794] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0161.794] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0161.794] ReadFile (in: hFile=0x350, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x1245dd1c*=0x43, lpOverlapped=0x0) returned 1
	[0161.799] GetFileType (hFile=0x350) returned 0x1
	[0161.799] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.799] WriteFile (in: hFile=0x350, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x1245dd00*=0x43, lpOverlapped=0x1245dd0c) returned 1
	[0161.800] GetFileType (hFile=0x350) returned 0x1
	[0161.800] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.800] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0161.800] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0161.800] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0161.801] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0161.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0161.801] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0161.801] WriteFile (in: hFile=0x344, lpBuffer=0x1267a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1267a000*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.801] CloseHandle (hObject=0x344) returned 1
	[0161.801] CloseHandle (hObject=0x350) returned 1
	[0161.802] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\VB18B0KB\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\vb18b0kb\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.979] SetEvent (hEvent=0x30c) returned 1
	[0161.979] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0161.980] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0161.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xd978bc80, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd978bc80, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xed0fc650, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0161.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0161.980] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0161.980] ReadFile (in: hFile=0x350, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1245dd1c*=0x8000, lpOverlapped=0x0) returned 1
	[0162.045] GetFileType (hFile=0x350) returned 0x1
	[0162.045] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.045] WriteFile (in: hFile=0x350, lpBuffer=0x12722000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12722000*, lpNumberOfBytesWritten=0x1245dd00*=0x8000, lpOverlapped=0x1245dd0c) returned 1
	[0162.045] GetFileType (hFile=0x350) returned 0x1
	[0162.045] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.045] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0162.045] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0162.045] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0162.045] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e7f0 | out: pbBuffer=0x1251e7f0) returned 1
	[0162.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0162.046] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0162.046] WriteFile (in: hFile=0x354, lpBuffer=0x12680f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12680f00*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.046] CloseHandle (hObject=0x354) returned 1
	[0162.095] CloseHandle (hObject=0x350) returned 1
	[0162.109] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\Temporary Internet Files\\Content.IE5\\index.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\temporary internet files\\content.ie5\\index.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.198] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0162.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ey2SCFlW9bAkVQT2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ey2scflw9bakvqt2.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0162.289] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0162.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ey2SCFlW9bAkVQT2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ey2scflw9bakvqt2.png"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2850f370, ftCreationTime.dwHighDateTime=0x1d5da8f, ftLastAccessTime.dwLowDateTime=0x245d4450, ftLastAccessTime.dwHighDateTime=0x1d5da3d, ftLastWriteTime.dwLowDateTime=0x245d4450, ftLastWriteTime.dwHighDateTime=0x1d5da3d, nFileSizeHigh=0x0, nFileSizeLow=0x7086)) returned 1
	[0162.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0162.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0162.289] ReadFile (in: hFile=0x350, lpBuffer=0x126a4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126a4000*, lpNumberOfBytesRead=0x124f3d1c*=0x7086, lpOverlapped=0x0) returned 1
	[0162.325] GetFileType (hFile=0x350) returned 0x1
	[0162.325] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.325] WriteFile (in: hFile=0x350, lpBuffer=0x125c6000*, nNumberOfBytesToWrite=0x7086, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125c6000*, lpNumberOfBytesWritten=0x124f3d00*=0x7086, lpOverlapped=0x124f3d0c) returned 1
	[0162.326] GetFileType (hFile=0x350) returned 0x1
	[0162.326] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x7086, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.326] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb28, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb28, ulNumEntriesRemoved=0x33fbfb0c) returned 0
	[0162.326] SetEvent (hEvent=0x70) returned 1
	[0162.326] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0162.327] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0162.327] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0162.327] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0162.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ey2SCFlW9bAkVQT2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ey2scflw9bakvqt2.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0162.327] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0162.327] WriteFile (in: hFile=0x33c, lpBuffer=0x125d4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125d4000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.327] CloseHandle (hObject=0x33c) returned 1
	[0162.328] CloseHandle (hObject=0x350) returned 1
	[0162.328] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ey2SCFlW9bAkVQT2.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ey2scflw9bakvqt2.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\ey2SCFlW9bAkVQT2.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\ey2scflw9bakvqt2.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.332] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0162.341] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0162.341] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0162.341] SetEvent (hEvent=0x70) returned 1
	[0162.341] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0162.373] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0162.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lGaXRLi6YTbXeMEsLC.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lgaxrli6ytbxemeslc.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0162.374] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0162.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lGaXRLi6YTbXeMEsLC.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lgaxrli6ytbxemeslc.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1bad820, ftCreationTime.dwHighDateTime=0x1d5db48, ftLastAccessTime.dwLowDateTime=0x521d1100, ftLastAccessTime.dwHighDateTime=0x1d5e144, ftLastWriteTime.dwLowDateTime=0x521d1100, ftLastWriteTime.dwHighDateTime=0x1d5e144, nFileSizeHigh=0x0, nFileSizeLow=0xa475)) returned 1
	[0162.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e440 | out: pbBuffer=0x1240e440) returned 1
	[0162.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0162.374] ReadFile (in: hFile=0x350, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1242bd1c*=0xa475, lpOverlapped=0x0) returned 1
	[0162.420] GetFileType (hFile=0x350) returned 0x1
	[0162.420] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.420] WriteFile (in: hFile=0x350, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0xa475, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x1242bd00*=0xa475, lpOverlapped=0x1242bd0c) returned 1
	[0162.501] GetFileType (hFile=0x350) returned 0x1
	[0162.501] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0xa475, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0162.501] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec401 | out: pbBuffer=0x124ec401) returned 1
	[0162.501] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec501 | out: pbBuffer=0x124ec501) returned 1
	[0162.501] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec601 | out: pbBuffer=0x124ec601) returned 1
	[0162.501] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105d0 | out: pbBuffer=0x124105d0) returned 1
	[0162.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lGaXRLi6YTbXeMEsLC.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lgaxrli6ytbxemeslc.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0162.502] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0162.502] WriteFile (in: hFile=0x340, lpBuffer=0x125d4a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125d4a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0162.539] CloseHandle (hObject=0x340) returned 1
	[0162.541] CloseHandle (hObject=0x350) returned 1
	[0162.542] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lGaXRLi6YTbXeMEsLC.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lgaxrli6ytbxemeslc.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\lGaXRLi6YTbXeMEsLC.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lgaxrli6ytbxemeslc.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0162.584] SetEvent (hEvent=0xa0) returned 1
	[0162.584] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0162.687] SetEvent (hEvent=0x80) returned 1
	[0162.687] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0162.688] SetEvent (hEvent=0x80) returned 1
	[0162.688] SwitchToThread () returned 1
	[0162.689] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0162.753] SetEvent (hEvent=0x80) returned 1
	[0162.753] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temporary internet files"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0162.753] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x1242ba44 | out: lpFindFileData=0x1242ba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0162.753] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.125] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.141] SetEvent (hEvent=0x70) returned 1
	[0163.141] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.144] SetEvent (hEvent=0x30c) returned 1
	[0163.145] SetEvent (hEvent=0x2e8) returned 1
	[0163.145] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0163.146] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0163.146] SetEvent (hEvent=0x2e8) returned 1
	[0163.146] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0163.147] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.326] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.329] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.483] SetEvent (hEvent=0x2f4) returned 1
	[0163.483] SetEvent (hEvent=0x68) returned 1
	[0163.484] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.487] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.532] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.545] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.556] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.567] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.575] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.584] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.597] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.607] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.621] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.644] SetEvent (hEvent=0x2e4) returned 1
	[0163.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9bc2ffc5d9591e1bd3545230e9b7cc36_cf30943571f9bee96c487b2d9f0436e6"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab)) returned 1
	[0163.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652)) returned 1
	[0163.650] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.650] SetEvent (hEvent=0x30c) returned 1
	[0163.650] SetEvent (hEvent=0x80) returned 1
	[0163.650] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.651] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0163.863] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0164.028] SetEvent (hEvent=0x80) returned 1
	[0164.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\a9e4f776657345b52012ce8e279d314c_183a5be0b233cc1d513955fabecf9450"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7)) returned 1
	[0164.030] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0164.716] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0165.044] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfad4, ulCount=0x10, ulNumEntriesRemoved=0x33fbfab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfad4, ulNumEntriesRemoved=0x33fbfab8) returned 0
	[0165.044] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfad4, ulCount=0x10, ulNumEntriesRemoved=0x33fbfab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfad4, ulNumEntriesRemoved=0x33fbfab8) returned 1
	[0176.872] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x33fbfab4, fWait=0, lpdwFlags=0x33fbfac4 | out: lpcbTransfer=0x33fbfab4, lpdwFlags=0x33fbfac4) returned 1
	[0176.873] SetEvent (hEvent=0x318) returned 1
	[0176.873] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x46c, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0176.873] SetEvent (hEvent=0x11c) returned 1
	[0176.873] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfad4, ulCount=0x10, ulNumEntriesRemoved=0x33fbfab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfad4, ulNumEntriesRemoved=0x33fbfab8) returned 0
	[0176.874] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfad4, ulCount=0x10, ulNumEntriesRemoved=0x33fbfab8, dwMilliseconds=0xffffffff, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfad4, ulNumEntriesRemoved=0x33fbfab8) returned 1
	[0188.211] WSAGetOverlappedResult (in: s=0x108, lpOverlapped=0x124e2014, lpcbTransfer=0x33fbfab4, fWait=0, lpdwFlags=0x33fbfac4 | out: lpcbTransfer=0x33fbfab4, lpdwFlags=0x33fbfac4) returned 1
	[0188.212] WSARecv (in: s=0x108, lpBuffers=0x124e2040, dwBufferCount=0x1, lpNumberOfBytesRecvd=0x124e2034, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014, lpCompletionRoutine=0x0 | out: lpBuffers=0x124e2040*=((len=0x18a9, buf=0x124fe000)), lpNumberOfBytesRecvd=0x124e2034*=0x46c, lpFlags=0x124e2078*=0x0, lpOverlapped=0x124e2014) returned 0xffffffff
	[0188.212] SetEvent (hEvent=0x11c) returned 1
	[0188.212] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfad4, ulCount=0x10, ulNumEntriesRemoved=0x33fbfab8, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfad4, ulNumEntriesRemoved=0x33fbfab8) returned 0
	[0188.212] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0188.213] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0188.213] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0188.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c120 | out: pbBuffer=0x1244c120) returned 1
	[0188.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744188 | out: pbBuffer=0x12744188) returned 1
	[0188.214] ReadFile (in: hFile=0x33c, lpBuffer=0x127ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127ba000*, lpNumberOfBytesRead=0x12769d1c*=0x7000, lpOverlapped=0x0) returned 1
	[0188.259] GetFileType (hFile=0x33c) returned 0x1
	[0188.259] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.259] WriteFile (in: hFile=0x33c, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x12769d00*=0x7000, lpOverlapped=0x12769d0c) returned 1
	[0188.259] GetFileType (hFile=0x33c) returned 0x1
	[0188.259] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x7000, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0188.260] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0188.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0188.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744390 | out: pbBuffer=0x12744390) returned 1
	[0188.261] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0188.261] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0188.261] WriteFile (in: hFile=0x344, lpBuffer=0x127dc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x127dc000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0188.262] CloseHandle (hObject=0x344) returned 1
	[0188.262] CloseHandle (hObject=0x33c) returned 1
	[0188.262] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0188.264] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0188.265] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0188.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfeaa2466, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0188.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c380 | out: pbBuffer=0x1244c380) returned 1
	[0188.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443b8 | out: pbBuffer=0x127443b8) returned 1
	[0188.265] ReadFile (in: hFile=0x33c, lpBuffer=0x1284a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1284a000*, lpNumberOfBytesRead=0x1276dd1c*=0x7000, lpOverlapped=0x0) returned 1
	[0188.319] GetFileType (hFile=0x33c) returned 0x1
	[0188.319] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.319] WriteFile (in: hFile=0x33c, lpBuffer=0x127ff000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x127ff000*, lpNumberOfBytesWritten=0x1276dd00*=0x7000, lpOverlapped=0x1276dd0c) returned 1
	[0188.319] GetFileType (hFile=0x33c) returned 0x1
	[0188.319] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x7000, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.319] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0188.319] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0188.319] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0188.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744470 | out: pbBuffer=0x12744470) returned 1
	[0188.320] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0188.320] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0188.320] WriteFile (in: hFile=0x1e4, lpBuffer=0x127dc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x127dc500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0188.320] CloseHandle (hObject=0x1e4) returned 1
	[0188.320] CloseHandle (hObject=0x33c) returned 1
	[0188.320] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0188.323] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0188.380] SetEvent (hEvent=0x318) returned 1
	[0188.380] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0188.423] SetEvent (hEvent=0x318) returned 1
	[0188.423] SetEvent (hEvent=0x2e8) returned 1
	[0188.424] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0188.425] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12723d0c | out: lpMode=0x12723d0c) returned 0
	[0188.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x12723ad0 | out: lpFileInformation=0x12723ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfedc214c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.426] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0188.426] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0188.426] ReadFile (in: hFile=0x344, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12723d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12723d1c*=0x0, lpOverlapped=0x0) returned 1
	[0188.426] CloseHandle (hObject=0x344) returned 1
	[0188.426] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0188.428] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12723d0c | out: lpMode=0x12723d0c) returned 0
	[0188.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x12723ad0 | out: lpFileInformation=0x12723ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0188.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410048 | out: pbBuffer=0x12410048) returned 1
	[0188.429] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12723d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12723d1c*=0x0, lpOverlapped=0x0) returned 1
	[0188.429] CloseHandle (hObject=0x344) returned 1
	[0188.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.431] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0188.432] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0188.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0188.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0188.432] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0188.432] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0188.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0188.432] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0188.433] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0188.435] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0188.435] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0188.486] CloseHandle (hObject=0x344) returned 1
	[0188.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0188.534] SetEvent (hEvent=0x318) returned 1
	[0188.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.633] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0188.633] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0188.633] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0188.634] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0188.634] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fwlink[1]", cAlternateFileName="FWLINK~1")) returned 1
	[0188.634] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0188.634] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0188.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0188.635] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0188.635] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0188.636] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0188.636] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0188.638] CloseHandle (hObject=0x33c) returned 1
	[0188.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0188.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0188.640] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0188.641] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0188.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x668c5a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x668c5a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe9e3d85, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0188.641] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3a0 | out: pbBuffer=0x1240e3a0) returned 1
	[0188.641] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e0 | out: pbBuffer=0x124103e0) returned 1
	[0188.641] ReadFile (in: hFile=0x33c, lpBuffer=0x12814000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12814000*, lpNumberOfBytesRead=0x1242bd1c*=0x43, lpOverlapped=0x0) returned 1
	[0188.644] GetFileType (hFile=0x33c) returned 0x1
	[0188.644] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.645] WriteFile (in: hFile=0x33c, lpBuffer=0x124145f0*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x124145f0*, lpNumberOfBytesWritten=0x1242bd00*=0x43, lpOverlapped=0x1242bd0c) returned 1
	[0188.645] GetFileType (hFile=0x33c) returned 0x1
	[0188.645] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0188.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0188.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0188.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0188.646] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0188.646] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0188.646] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0188.646] WriteFile (in: hFile=0x2dc, lpBuffer=0x12778000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12778000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0188.646] CloseHandle (hObject=0x2dc) returned 1
	[0188.646] CloseHandle (hObject=0x33c) returned 1
	[0188.646] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0188.779] SetEvent (hEvent=0xa0) returned 1
	[0188.779] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0189.611] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0189.655] SetEvent (hEvent=0x68) returned 1
	[0189.655] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0189.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1
	[0190.309] SetEvent (hEvent=0xa0) returned 1
	[0190.309] SetEvent (hEvent=0x2e8) returned 1
	[0190.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1
	[0190.327] SetEvent (hEvent=0x68) returned 1
	[0190.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1
	[0190.344] SetEvent (hEvent=0x318) returned 1
	[0190.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1
	[0190.363] SetEvent (hEvent=0x2e8) returned 1
	[0190.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1
	[0190.382] SetEvent (hEvent=0x70) returned 1
	[0190.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1
	[0190.434] SetEvent (hEvent=0xa0) returned 1
	[0190.434] SetEvent (hEvent=0x318) returned 1
	[0190.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6666440, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6666440, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1
	[0190.449] SetEvent (hEvent=0x2e8) returned 1
	[0190.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1
	[0190.462] SetEvent (hEvent=0x68) returned 1
	[0190.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1
	[0190.473] SetEvent (hEvent=0x318) returned 1
	[0190.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1
	[0190.492] SetEvent (hEvent=0xa0) returned 1
	[0190.492] SetEvent (hEvent=0x2e8) returned 1
	[0190.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x66402e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf740fbac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1
	[0190.507] SetEvent (hEvent=0x68) returned 1
	[0190.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.509] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.509] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x66d8860, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d1d5e4e, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x165f8f7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Burn", cAlternateFileName="")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xeb4bd20c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66402e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x182897a, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Explorer", cAlternateFileName="")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfda01e06, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xaef3b9d6, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x661a180, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf96dfdac, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe7364c0, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x579672e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat", cAlternateFileName="")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65f4020, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65f4020, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x579672e0, ftLastWriteTime.dwHighDateTime=0x1d2de2a, nFileSizeHigh=0x0, nFileSizeLow=0xb400, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG1", cAlternateFileName="USRCLA~2.LOG")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65cdec0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65cdec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9c5705f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat.LOG2", cAlternateFileName="USRCLA~1.LOG")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x65cdec0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x65cdec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x962222ec, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf", cAlternateFileName="USRCLA~1.BLF")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6581c00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6581c00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="USRCLA~2.REG")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x961fc18b, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="USRCLA~1.REG")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4d26e3cf, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1
	[0190.515] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.515] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.518] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.519] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x66b2700, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd774d0cb, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x5e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", cAlternateFileName="ACCOUN~3.OEA")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf657b4d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", cAlternateFileName="ACCOUN~2.OEA")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6535940, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6535940, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67b6975, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", cAlternateFileName="ACCOUN~1.OEA")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf303882f, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backup", cAlternateFileName="")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7bc3a13, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2b29966, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2027392, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2216575, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64c3520, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x64c3520, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf67dcad6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeold.xml", cAlternateFileName="")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x650f7e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf690d5d8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd7b05332, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x204000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.MSMessageStore", cAlternateFileName="WINDOW~1.MSM")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf2e234eb, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMail.pat", cAlternateFileName="WINDOW~1.PAT")) returned 1
	[0190.527] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.527] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.530] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.530] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf7de167e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf928f5c4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="12.0", cAlternateFileName="")) returned 1
	[0190.530] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.530] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.531] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.531] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.531] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.531] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1
	[0190.531] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x184eadb, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x54, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings.ini", cAlternateFileName="")) returned 1
	[0190.532] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.532] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp" (normalized: "c:\\users\\default\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.534] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp" (normalized: "c:\\users\\default\\appdata\\local\\temp"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.534] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.534] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfda27f60, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x3b34dcb8, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.534] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FXSAPIDebugLogFile.txt", cAlternateFileName="FXSAPI~1.TXT")) returned 1
	[0190.534] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.535] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\temp\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.535] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\temp\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.535] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\local\\temp\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.537] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0190.537] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0190.538] CloseHandle (hObject=0x33c) returned 1
	[0190.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.539] SetEvent (hEvent=0x70) returned 1
	[0190.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.541] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x33c
	[0190.541] GetFileInformationByHandle (in: hFile=0x33c, lpFileInformation=0x1276ba84 | out: lpFileInformation=0x1276ba84) returned 1
	[0190.541] GetFileInformationByHandleEx (in: hFile=0x33c, FileInformationClass=0x9, lpFileInformation=0x1276ba7c, dwBufferSize=0x8 | out: lpFileInformation=0x1276ba7c) returned 1
	[0190.541] CloseHandle (hObject=0x33c) returned 1
	[0190.541] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.542] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x77398c9, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f760 | out: pbBuffer=0x1240f760) returned 1
	[0190.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124109e0 | out: pbBuffer=0x124109e0) returned 1
	[0190.542] ReadFile (in: hFile=0x33c, lpBuffer=0x12964000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12964000*, lpNumberOfBytesRead=0x12767d1c*=0x0, lpOverlapped=0x0) returned 1
	[0190.542] CloseHandle (hObject=0x33c) returned 1
	[0190.542] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.543] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x12767a44 | out: lpFindFileData=0x12767a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0190.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow" (normalized: "c:\\users\\default\\appdata\\locallow"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.544] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow" (normalized: "c:\\users\\default\\appdata\\locallow"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.544] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.544] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.544] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0190.544] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.544] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.544] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.545] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.548] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0190.548] WriteFile (in: hFile=0x33c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0190.549] CloseHandle (hObject=0x33c) returned 1
	[0190.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.550] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.550] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.550] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a1d229, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.550] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1
	[0190.551] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.551] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.551] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.551] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.551] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.558] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0190.558] WriteFile (in: hFile=0x33c, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0190.560] CloseHandle (hObject=0x33c) returned 1
	[0190.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.561] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.561] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x1276b968 | out: lpFindFileData=0x1276b968*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6320600, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.561] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1
	[0190.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1
	[0190.562] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b9ac | out: lpFindFileData=0x1276b9ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.562] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b630 | out: lpFileInformation=0x1276b630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.562] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.562] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.566] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b840 | out: lpMode=0x1276b840) returned 0
	[0190.566] WriteFile (in: hFile=0x33c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b840, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x1276b840*=0x1180, lpOverlapped=0x0) returned 1
	[0190.568] CloseHandle (hObject=0x33c) returned 1
	[0190.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.569] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.569] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x1276b904 | out: lpFindFileData=0x1276b904*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0190.569] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x6320600, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0190.569] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1
	[0190.569] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1
	[0190.569] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b948 | out: lpFindFileData=0x1276b948*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0190.569] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0190.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b5cc | out: lpFileInformation=0x1276b5cc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0190.569] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0190.570] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.574] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b7dc | out: lpMode=0x1276b7dc) returned 0
	[0190.574] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b7dc, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b7dc*=0x1180, lpOverlapped=0x0) returned 1
	[0190.576] CloseHandle (hObject=0x344) returned 1
	[0190.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1
	[0190.576] SetEvent (hEvent=0x70) returned 1
	[0190.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x1276b9c8 | out: lpFileInformation=0x1276b9c8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.577] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.578] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1
	[0190.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f7e0 | out: pbBuffer=0x1240f7e0) returned 1
	[0190.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410b50 | out: pbBuffer=0x12410b50) returned 1
	[0190.578] ReadFile (in: hFile=0x344, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x12767d1c*=0x228, lpOverlapped=0x0) returned 1
	[0190.584] GetFileType (hFile=0x344) returned 0x1
	[0190.584] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.584] WriteFile (in: hFile=0x344, lpBuffer=0x127d8000*, nNumberOfBytesToWrite=0x228, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x127d8000*, lpNumberOfBytesWritten=0x12767d00*=0x228, lpOverlapped=0x12767d0c) returned 1
	[0190.584] GetFileType (hFile=0x344) returned 0x1
	[0190.584] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x228, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.584] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eda01 | out: pbBuffer=0x124eda01) returned 1
	[0190.585] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124edb01 | out: pbBuffer=0x124edb01) returned 1
	[0190.585] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124edc01 | out: pbBuffer=0x124edc01) returned 1
	[0190.585] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410c08 | out: pbBuffer=0x12410c08) returned 1
	[0190.585] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.585] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.585] WriteFile (in: hFile=0x2dc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.586] CloseHandle (hObject=0x2dc) returned 1
	[0190.586] CloseHandle (hObject=0x344) returned 1
	[0190.586] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.588] SetEvent (hEvent=0x70) returned 1
	[0190.588] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.589] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0190.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6451100, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6451100, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0190.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240fa00 | out: pbBuffer=0x1240fa00) returned 1
	[0190.589] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410c20 | out: pbBuffer=0x12410c20) returned 1
	[0190.589] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0190.591] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0190.591] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb28, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb28, ulNumEntriesRemoved=0x33fbfb0c) returned 0
	[0190.591] SetEvent (hEvent=0xa0) returned 1
	[0190.591] SetEvent (hEvent=0x70) returned 1
	[0190.591] ReadFile (in: hFile=0x344, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x12767d1c*=0x0, lpOverlapped=0x0) returned 1
	[0190.591] CloseHandle (hObject=0x344) returned 1
	[0190.592] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0190.593] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0190.597] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x0
	[0190.599] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0190.599] SetEvent (hEvent=0x318) returned 1
	[0190.599] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0190.634] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0190.634] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0190.635] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0190.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1
	[0190.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0190.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e068 | out: pbBuffer=0x1251e068) returned 1
	[0190.635] ReadFile (in: hFile=0x344, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12769d1c*=0x130, lpOverlapped=0x0) returned 1
	[0190.675] GetFileType (hFile=0x344) returned 0x1
	[0190.675] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.675] WriteFile (in: hFile=0x344, lpBuffer=0x1261a000*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1261a000*, lpNumberOfBytesWritten=0x12769d00*=0x130, lpOverlapped=0x12769d0c) returned 1
	[0190.675] GetFileType (hFile=0x344) returned 0x1
	[0190.675] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x130, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0190.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0190.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0190.676] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e760 | out: pbBuffer=0x1251e760) returned 1
	[0190.676] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.676] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0190.677] WriteFile (in: hFile=0x34c, lpBuffer=0x127ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.677] CloseHandle (hObject=0x34c) returned 1
	[0190.677] CloseHandle (hObject=0x344) returned 1
	[0190.677] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), lpNewFileName="C:\\Users\\Default\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.680] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0190.714] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0190.730] SetEvent (hEvent=0x68) returned 1
	[0190.730] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.731] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0190.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc)) returned 1
	[0190.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0190.732] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0190.732] ReadFile (in: hFile=0x2dc, lpBuffer=0x12886000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12886000*, lpNumberOfBytesRead=0x12769d1c*=0x4cc, lpOverlapped=0x0) returned 1
	[0190.772] GetFileType (hFile=0x2dc) returned 0x1
	[0190.772] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.772] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x4cc, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12769d00*=0x4cc, lpOverlapped=0x12769d0c) returned 1
	[0190.772] GetFileType (hFile=0x2dc) returned 0x1
	[0190.772] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x4cc, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0190.772] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0190.773] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0190.773] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0190.773] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.773] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0190.773] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.774] CloseHandle (hObject=0x34c) returned 1
	[0190.774] CloseHandle (hObject=0x2dc) returned 1
	[0190.775] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.777] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0190.778] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0190.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x642afa0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x642afa0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0190.778] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c4a0 | out: pbBuffer=0x1244c4a0) returned 1
	[0190.778] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0190.778] ReadFile (in: hFile=0x2dc, lpBuffer=0x12904000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12904000*, lpNumberOfBytesRead=0x12769d1c*=0x18, lpOverlapped=0x0) returned 1
	[0190.780] GetFileType (hFile=0x2dc) returned 0x1
	[0190.780] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.780] WriteFile (in: hFile=0x2dc, lpBuffer=0x1244c4c0*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1244c4c0*, lpNumberOfBytesWritten=0x12769d00*=0x18, lpOverlapped=0x12769d0c) returned 1
	[0190.780] GetFileType (hFile=0x2dc) returned 0x1
	[0190.780] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0190.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0190.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0190.781] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0190.781] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.781] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0190.781] WriteFile (in: hFile=0x34c, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.782] CloseHandle (hObject=0x34c) returned 1
	[0190.782] CloseHandle (hObject=0x2dc) returned 1
	[0190.782] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\protect\\credhist.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.821] SetEvent (hEvent=0x68) returned 1
	[0190.821] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0190.851] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0190.851] SetEvent (hEvent=0x80) returned 1
	[0190.851] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0190.860] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0190.860] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0190.873] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0190.873] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x33fbfb30, ulCount=0x10, ulNumEntriesRemoved=0x33fbfb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x33fbfb30, ulNumEntriesRemoved=0x33fbfb14) returned 0
	[0190.873] SetEvent (hEvent=0x68) returned 1
	[0190.873] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0x1) returned 0x102
	[0190.889] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0190.889] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0190.921] CreateFileW (lpFileName="C:\\Users\\Default\\Cookies" (normalized: "c:\\users\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0190.921] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x125e9a44 | out: lpFindFileData=0x125e9a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0190.921] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0190.929] SetEvent (hEvent=0x2e8) returned 1
	[0190.929] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\desktop.ini" (normalized: "c:\\users\\default\\desktop\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0190.930] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0190.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Desktop\\desktop.ini" (normalized: "c:\\users\\default\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd8868f0a, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0190.931] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732060 | out: pbBuffer=0x12732060) returned 1
	[0190.931] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744010 | out: pbBuffer=0x12744010) returned 1
	[0190.931] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12429d1c*=0x11a, lpOverlapped=0x0) returned 1
	[0190.933] GetFileType (hFile=0x33c) returned 0x1
	[0190.933] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.933] WriteFile (in: hFile=0x33c, lpBuffer=0x128c6d80*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x128c6d80*, lpNumberOfBytesWritten=0x12429d00*=0x11a, lpOverlapped=0x12429d0c) returned 1
	[0190.933] GetFileType (hFile=0x33c) returned 0x1
	[0190.933] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0190.933] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0190.934] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0190.934] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0190.934] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0190.934] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\desktop.ini" (normalized: "c:\\users\\default\\desktop\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0190.934] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0190.934] WriteFile (in: hFile=0x34c, lpBuffer=0x12524000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12524000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0190.935] CloseHandle (hObject=0x34c) returned 1
	[0190.935] CloseHandle (hObject=0x33c) returned 1
	[0190.935] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Desktop\\desktop.ini" (normalized: "c:\\users\\default\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Desktop\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\desktop\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0190.937] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0190.975] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0191.014] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0191.026] SetEvent (hEvent=0x68) returned 1
	[0191.026] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0191.034] SetEvent (hEvent=0x68) returned 1
	[0191.034] SetEvent (hEvent=0x70) returned 1
	[0191.034] SetEvent (hEvent=0x80) returned 1
	[0191.034] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0191.214] SetEvent (hEvent=0x68) returned 1
	[0191.214] SetEvent (hEvent=0x80) returned 1
	[0191.214] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.215] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0191.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.215] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0191.215] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0191.215] ReadFile (in: hFile=0x33c, lpBuffer=0x127b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x127b4000*, lpNumberOfBytesRead=0x12767d1c*=0x85, lpOverlapped=0x0) returned 1
	[0191.217] GetFileType (hFile=0x33c) returned 0x1
	[0191.217] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.217] WriteFile (in: hFile=0x33c, lpBuffer=0x12516090*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12516090*, lpNumberOfBytesWritten=0x12767d00*=0x85, lpOverlapped=0x12767d0c) returned 1
	[0191.217] GetFileType (hFile=0x33c) returned 0x1
	[0191.217] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.217] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0191.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0191.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0191.218] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0191.218] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0191.218] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0191.218] WriteFile (in: hFile=0x34c, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.218] CloseHandle (hObject=0x34c) returned 1
	[0191.219] CloseHandle (hObject=0x33c) returned 1
	[0191.219] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.221] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.221] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0191.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.221] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0191.221] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0191.221] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12767d1c*=0x85, lpOverlapped=0x0) returned 1
	[0191.223] GetFileType (hFile=0x33c) returned 0x1
	[0191.223] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.223] WriteFile (in: hFile=0x33c, lpBuffer=0x12516510*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12516510*, lpNumberOfBytesWritten=0x12767d00*=0x85, lpOverlapped=0x12767d0c) returned 1
	[0191.223] GetFileType (hFile=0x33c) returned 0x1
	[0191.223] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.223] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0191.223] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0191.223] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0191.224] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744220 | out: pbBuffer=0x12744220) returned 1
	[0191.224] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0191.224] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0191.224] WriteFile (in: hFile=0x34c, lpBuffer=0x12618500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12618500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.224] CloseHandle (hObject=0x34c) returned 1
	[0191.224] CloseHandle (hObject=0x33c) returned 1
	[0191.224] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.227] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\default\\favorites\\microsoft websites"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0191.263] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\default\\favorites\\microsoft websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0191.263] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0191.271] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62fa4a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0191.271] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
	[0191.271] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
	[0191.271] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
	[0191.271] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
	[0191.271] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa52981, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
	[0191.271] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0191.271] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0191.272] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0191.273] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0191.273] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0191.274] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0191.274] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0191.276] CloseHandle (hObject=0x344) returned 1
	[0191.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa066c0, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.279] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0191.279] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0191.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6346760, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x6346760, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xa2c821, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0191.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0191.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744270 | out: pbBuffer=0x12744270) returned 1
	[0191.279] ReadFile (in: hFile=0x344, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12429d1c*=0x85, lpOverlapped=0x0) returned 1
	[0191.281] GetFileType (hFile=0x344) returned 0x1
	[0191.281] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.281] WriteFile (in: hFile=0x344, lpBuffer=0x12516cf0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12516cf0*, lpNumberOfBytesWritten=0x12429d00*=0x85, lpOverlapped=0x12429d0c) returned 1
	[0191.281] GetFileType (hFile=0x344) returned 0x1
	[0191.281] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.281] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0191.281] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0191.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0191.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744328 | out: pbBuffer=0x12744328) returned 1
	[0191.282] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0191.282] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0191.282] WriteFile (in: hFile=0x33c, lpBuffer=0x12619400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12619400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.282] CloseHandle (hObject=0x33c) returned 1
	[0191.282] CloseHandle (hObject=0x344) returned 1
	[0191.282] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.319] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0191.364] SetEvent (hEvent=0x2e8) returned 1
	[0191.364] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0191.517] SetEvent (hEvent=0x2e8) returned 1
	[0191.517] SetEvent (hEvent=0x318) returned 1
	[0191.517] SetEvent (hEvent=0x70) returned 1
	[0191.517] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0191.856] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0191.857] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0191.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), fInfoLevelId=0x0, lpFileInformation=0x125e7ad0 | out: lpFileInformation=0x125e7ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636c8c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x636c8c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd89738ac, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x16b)) returned 1
	[0191.857] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0191.857] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0191.857] ReadFile (in: hFile=0x34c, lpBuffer=0x128e4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e4000*, lpNumberOfBytesRead=0x125e7d1c*=0x16b, lpOverlapped=0x0) returned 1
	[0191.859] GetFileType (hFile=0x34c) returned 0x1
	[0191.859] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.859] WriteFile (in: hFile=0x34c, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x16b, lpNumberOfBytesWritten=0x125e7d00, lpOverlapped=0x125e7d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x125e7d00*=0x16b, lpOverlapped=0x125e7d0c) returned 1
	[0191.860] GetFileType (hFile=0x34c) returned 0x1
	[0191.860] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x16b, lpNewFilePointer=0x0, dwMoveMethod=0x125e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0191.860] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0191.860] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0191.860] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0191.860] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0191.860] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0191.861] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0191.861] WriteFile (in: hFile=0x1e4, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x125e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0191.861] CloseHandle (hObject=0x1e4) returned 1
	[0191.861] CloseHandle (hObject=0x34c) returned 1
	[0191.861] MoveFileExW (lpExistingFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\default\\links\\recentplaces.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0191.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400)) returned 1
	[0191.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x9012aa61, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0191.864] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0191.865] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x125e7d0c | out: lpMode=0x125e7d0c) returned 0
	[0191.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), fInfoLevelId=0x0, lpFileInformation=0x125e7ad0 | out: lpFileInformation=0x125e7ad0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x9012aa61, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0x9012aa61, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x674ac80, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2e400)) returned 1
	[0191.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322a0 | out: pbBuffer=0x127322a0) returned 1
	[0191.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0191.865] ReadFile (in: hFile=0x34c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x125e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0191.952] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0192.716] SwitchToThread () returned 1
	[0192.816] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0192.988] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0193.075] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0193.172] SetEvent (hEvent=0x68) returned 1
	[0193.172] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0193.173] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0193.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2837806f, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x289b7a3b, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a29e5c, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x36c)) returned 1
	[0193.173] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0193.173] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0193.174] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12767d1c*=0x36c, lpOverlapped=0x0) returned 1
	[0194.026] GetFileType (hFile=0x33c) returned 0x1
	[0194.026] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.026] WriteFile (in: hFile=0x33c, lpBuffer=0x12526000*, nNumberOfBytesToWrite=0x36c, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12526000*, lpNumberOfBytesWritten=0x12767d00*=0x36c, lpOverlapped=0x12767d0c) returned 1
	[0194.075] GetFileType (hFile=0x33c) returned 0x1
	[0194.075] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x36c, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0194.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0194.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0194.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744200 | out: pbBuffer=0x12744200) returned 1
	[0194.075] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0194.076] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0194.076] WriteFile (in: hFile=0x2dc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0194.285] CloseHandle (hObject=0x2dc) returned 1
	[0194.285] CloseHandle (hObject=0x33c) returned 1
	[0194.554] MoveFileExW (lpExistingFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), lpNewFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0194.711] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0194.731] SetEvent (hEvent=0x80) returned 1
	[0194.732] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0194.742] SetEvent (hEvent=0x318) returned 1
	[0194.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Music\\desktop.ini" (normalized: "c:\\users\\public\\music\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28305c4e, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x28305c4e, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1
	[0194.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures" (normalized: "c:\\users\\public\\pictures"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0194.745] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures" (normalized: "c:\\users\\public\\pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0194.745] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0194.745] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0194.745] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0194.745] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Pictures", cAlternateFileName="SAMPLE~1")) returned 1
	[0194.745] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0194.745] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0194.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\pictures\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0194.746] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0194.746] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0194.747] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0194.747] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0194.749] CloseHandle (hObject=0x34c) returned 1
	[0194.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures" (normalized: "c:\\users\\public\\pictures\\sample pictures"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0194.749] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures" (normalized: "c:\\users\\public\\pictures\\sample pictures"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0194.750] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0194.788] SetEvent (hEvent=0xa0) returned 1
	[0194.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0194.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrysanthemum.jpg", cAlternateFileName="CHRYSA~1.JPG")) returned 1
	[0194.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desert.jpg", cAlternateFileName="")) returned 1
	[0194.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0194.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hydrangeas.jpg", cAlternateFileName="HYDRAN~1.JPG")) returned 1
	[0194.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616, dwReserved0=0x0, dwReserved1=0x0, cFileName="Jellyfish.jpg", cAlternateFileName="JELLYF~1.JPG")) returned 1
	[0194.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Koala.jpg", cAlternateFileName="")) returned 1
	[0194.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x8907c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lighthouse.jpg", cAlternateFileName="LIGHTH~1.JPG")) returned 1
	[0194.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbde6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Penguins.jpg", cAlternateFileName="")) returned 1
	[0194.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x97958, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tulips.jpg", cAlternateFileName="")) returned 1
	[0194.788] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0194.788] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0194.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\pictures\\sample pictures\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0194.790] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\pictures\\sample pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0194.790] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\pictures\\sample pictures\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0194.794] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0194.794] WriteFile (in: hFile=0x34c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0194.795] CloseHandle (hObject=0x34c) returned 1
	[0194.795] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Chrysanthemum.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\chrysanthemum.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xd6b22)) returned 1
	[0194.799] SetEvent (hEvent=0x318) returned 1
	[0194.799] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Desert.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\desert.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xce875)) returned 1
	[0194.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Hydrangeas.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\hydrangeas.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x91554)) returned 1
	[0194.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616)) returned 1
	[0194.811] SetEvent (hEvent=0x68) returned 1
	[0194.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Koala.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\koala.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be84d57, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be84d57, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbea1f)) returned 1
	[0194.812] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0194.812] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0194.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8031a7b6, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0xbd616)) returned 1
	[0194.812] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324e0 | out: pbBuffer=0x127324e0) returned 1
	[0194.812] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e718 | out: pbBuffer=0x1251e718) returned 1
	[0194.812] ReadFile (in: hFile=0x34c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x12769d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0194.857] GetFileType (hFile=0x34c) returned 0x1
	[0194.857] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.857] WriteFile (in: hFile=0x34c, lpBuffer=0x12964000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12964000*, lpNumberOfBytesWritten=0x12769d00*=0x20000, lpOverlapped=0x12769d0c) returned 1
	[0194.857] GetFileType (hFile=0x34c) returned 0x1
	[0194.857] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0194.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401001 | out: pbBuffer=0x12401001) returned 1
	[0194.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0194.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0194.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e940 | out: pbBuffer=0x1251e940) returned 1
	[0194.858] CreateFileW (lpFileName="C:\\Users\\Public\\Pictures\\Sample Pictures\\Jellyfish.jpg" (normalized: "c:\\users\\public\\pictures\\sample pictures\\jellyfish.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0194.858] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0194.858] WriteFile (in: hFile=0x354, lpBuffer=0x127aaf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x127aaf00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0195.202] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0195.318] CloseHandle (hObject=0x354) returned 1
	[0195.318] CloseHandle (hObject=0x34c) returned 1
	[0195.318] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0195.361] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0195.571] SetEvent (hEvent=0x70) returned 1
	[0195.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Pictures\\desktop.ini" (normalized: "c:\\users\\public\\pictures\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x288ad099, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1
	[0195.572] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0195.594] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0195.617] SetEvent (hEvent=0x80) returned 1
	[0195.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Recorded TV\\desktop.ini" (normalized: "c:\\users\\public\\recorded tv\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x917fa2ee, ftCreationTime.dwHighDateTime=0x1cbf8eb, ftLastAccessTime.dwLowDateTime=0x89e5e11e, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x89e5e11e, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1
	[0195.619] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0196.316] SetEvent (hEvent=0x80) returned 1
	[0196.316] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos" (normalized: "c:\\users\\public\\videos"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0196.318] CreateFileW (lpFileName="C:\\Users\\Public\\Videos" (normalized: "c:\\users\\public\\videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0196.318] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x1276ba94 | out: lpFindFileData=0x1276ba94*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0196.318] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0196.318] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0196.318] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sample Videos", cAlternateFileName="SAMPLE~1")) returned 1
	[0196.318] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276bad8 | out: lpFindFileData=0x1276bad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0196.318] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0196.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\videos\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b75c | out: lpFileInformation=0x1276b75c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0196.318] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\videos\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0196.319] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\videos\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0196.320] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276b96c | out: lpMode=0x1276b96c) returned 0
	[0196.320] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b96c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b96c*=0x1180, lpOverlapped=0x0) returned 1
	[0196.321] CloseHandle (hObject=0x2cc) returned 1
	[0196.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos" (normalized: "c:\\users\\public\\videos\\sample videos"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0196.322] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos" (normalized: "c:\\users\\public\\videos\\sample videos"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0196.322] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0196.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x802f4656, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0196.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0196.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wildlife.wmv", cAlternateFileName="")) returned 1
	[0196.322] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0196.322] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0196.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\videos\\sample videos\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0196.322] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\videos\\sample videos\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0196.322] CreateFileW (lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\# M0rphine Help #.hta" (normalized: "c:\\users\\public\\videos\\sample videos\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0196.323] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0196.324] WriteFile (in: hFile=0x2cc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0196.325] CloseHandle (hObject=0x2cc) returned 1
	[0196.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\Wildlife.wmv" (normalized: "c:\\users\\public\\videos\\sample videos\\wildlife.wmv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80282235, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bda0516, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7be12937, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x1907b8a)) returned 1
	[0196.326] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) returned 0x0
	[0196.575] SetEvent (hEvent=0x318) returned 1
	[0196.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\Sample Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\sample videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x802f4656, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7be12937, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x288d31f9, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0196.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\Public\\Videos\\desktop.ini" (normalized: "c:\\users\\public\\videos\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x282dfaee, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x282dfaee, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28886f39, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x17c)) returned 1
	[0196.594] SetEvent (hEvent=0x70) returned 1
	[0196.594] WaitForSingleObject (hHandle=0x320, dwMilliseconds=0xffffffff) 

Thread:
	id = 57
	os_tid = 0x5f4

	[0109.235] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x340fff38, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x340fff38*=0x324) returned 1
	[0109.235] VirtualQuery (in: lpAddress=0x340fff48, lpBuffer=0x340fff48, dwLength=0x1c | out: lpBuffer=0x340fff48*(BaseAddress=0x340ff000, AllocationBase=0x34000000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0109.235] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x30c
	[0109.235] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0109.411] SetEvent (hEvent=0x320) returned 1
	[0109.411] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0112.841] SetEvent (hEvent=0x11c) returned 1
	[0112.842] SetEvent (hEvent=0x2f4) returned 1
	[0112.842] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0112.886] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0112.894] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0113.023] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0113.023] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0113.023] SetEvent (hEvent=0x11c) returned 1
	[0113.023] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0113.089] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0113.091] GetFileType (hFile=0x304) returned 0x1
	[0113.091] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.091] WriteFile (in: hFile=0x304, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0113.091] GetFileType (hFile=0x304) returned 0x1
	[0113.091] SetFilePointerEx (in: hFile=0x304, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0113.092] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0113.092] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0113.092] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0113.092] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0113.093] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0113.093] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0113.093] WriteFile (in: hFile=0x328, lpBuffer=0x12774500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12774500*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0113.150] CloseHandle (hObject=0x328) returned 1
	[0114.497] CloseHandle (hObject=0x304) returned 1
	[0114.499] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0019-0409-1000-0000000FF1CE}-C\\PubLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0019-0409-1000-0000000ff1ce}-c\\publr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0114.501] SetEvent (hEvent=0x68) returned 1
	[0114.501] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0114.536] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.536] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0114.570] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.570] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0114.570] SetEvent (hEvent=0x11c) returned 1
	[0114.570] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0114.635] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0114.636] GetFileType (hFile=0x2fc) returned 0x1
	[0114.636] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0114.636] WriteFile (in: hFile=0x2fc, lpBuffer=0x12644a80*, nNumberOfBytesToWrite=0x978, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12644a80*, lpNumberOfBytesWritten=0x12429d00*=0x978, lpOverlapped=0x12429d0c) returned 1
	[0114.870] GetFileType (hFile=0x2fc) returned 0x1
	[0114.870] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x978, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0114.870] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0114.870] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0114.870] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0114.871] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744110 | out: pbBuffer=0x12744110) returned 1
	[0114.871] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0114.871] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0114.871] WriteFile (in: hFile=0x33c, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0114.871] CloseHandle (hObject=0x33c) returned 1
	[0114.873] CloseHandle (hObject=0x2fc) returned 1
	[0114.873] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0114.874] SetEvent (hEvent=0x2f4) returned 1
	[0114.874] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0114.874] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0114.874] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc8a9170, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x708)) returned 1
	[0114.874] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0114.875] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744138 | out: pbBuffer=0x12744138) returned 1
	[0114.875] ReadFile (in: hFile=0x2fc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x708, lpOverlapped=0x0) returned 1
	[0114.944] GetFileType (hFile=0x2fc) returned 0x1
	[0114.944] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0114.945] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263a000*, nNumberOfBytesToWrite=0x708, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1263a000*, lpNumberOfBytesWritten=0x12429d00*=0x708, lpOverlapped=0x12429d0c) returned 1
	[0114.945] GetFileType (hFile=0x2fc) returned 0x1
	[0114.945] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x708, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0114.945] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0114.945] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0114.945] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0114.946] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441f0 | out: pbBuffer=0x127441f0) returned 1
	[0114.946] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0114.946] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0114.946] WriteFile (in: hFile=0x340, lpBuffer=0x12780500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12780500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0114.946] CloseHandle (hObject=0x340) returned 1
	[0114.947] CloseHandle (hObject=0x2fc) returned 1
	[0114.947] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-001B-0409-1000-0000000FF1CE}-C\\WordMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-001b-0409-1000-0000000ff1ce}-c\\wordmui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0114.948] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0115.681] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0116.154] SetEvent (hEvent=0x68) returned 1
	[0116.154] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proof.es\\Proof.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proof.es\\proof.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5af4 | out: lpFileInformation=0x124f5af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf4e5c7f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd7200)) returned 1
	[0116.155] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0116.514] SetEvent (hEvent=0x2f4) returned 1
	[0116.515] SetEvent (hEvent=0x2e4) returned 1
	[0116.515] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0116.582] SetEvent (hEvent=0x2f4) returned 1
	[0116.582] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0116.992] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.149] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.390] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0117.509] SetEvent (hEvent=0x2e4) returned 1
	[0117.510] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Proofing.msi" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\proofing.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40650500, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x40650500, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf0126df0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0117.510] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0119.695] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0119.804] SetEvent (hEvent=0x2e4) returned 1
	[0119.804] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-002C-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-002c-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42c75f00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x42c75f00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xf58c6830, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x16fc)) returned 1
	[0119.805] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0120.154] SetEvent (hEvent=0x2e4) returned 1
	[0120.157] SetEvent (hEvent=0x308) returned 1
	[0120.157] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0120.213] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0120.213] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0120.213] SetEvent (hEvent=0x308) returned 1
	[0120.213] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0120.285] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0120.285] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0043-0409-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{90140000-0043-0409-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5b58 | out: lpFileInformation=0x124f5b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43f88c00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x43f88c00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfc3e4630, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1
	[0120.285] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0120.864] SetEvent (hEvent=0x308) returned 1
	[0120.864] SetEvent (hEvent=0x2f4) returned 1
	[0120.864] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0120.968] SetEvent (hEvent=0x11c) returned 1
	[0120.969] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0120.972] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0120.972] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0120.973] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x30a2b7b0, ftCreationTime.dwHighDateTime=0x1cbe56c, ftLastAccessTime.dwLowDateTime=0x30a2b7b0, ftLastAccessTime.dwHighDateTime=0x1cbe56c, ftLastWriteTime.dwLowDateTime=0xa5b2ebe0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1
	[0120.973] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0120.973] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0120.973] ReadFile (in: hFile=0x2cc, lpBuffer=0x127ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesRead=0x1242bd1c*=0x5ac, lpOverlapped=0x0) returned 1
	[0120.975] GetFileType (hFile=0x2cc) returned 0x1
	[0120.975] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.975] WriteFile (in: hFile=0x2cc, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x5ac, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x1242bd00*=0x5ac, lpOverlapped=0x1242bd0c) returned 1
	[0120.975] GetFileType (hFile=0x2cc) returned 0x1
	[0120.975] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x5ac, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0120.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0120.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0120.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0120.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0120.976] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0120.976] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0120.976] WriteFile (in: hFile=0x340, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0120.976] CloseHandle (hObject=0x340) returned 1
	[0120.977] CloseHandle (hObject=0x2cc) returned 1
	[0120.977] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00B4-0409-1000-0000000FF1CE}-C\\ProjectMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00b4-0409-1000-0000000ff1ce}-c\\projectmui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0120.984] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.059] SetEvent (hEvent=0x11c) returned 1
	[0121.059] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.060] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0121.060] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec1a700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbec1a700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xee38cbf0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x391)) returned 1
	[0121.060] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0121.060] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0121.060] ReadFile (in: hFile=0x2cc, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x1242bd1c*=0x391, lpOverlapped=0x0) returned 1
	[0121.078] GetFileType (hFile=0x2cc) returned 0x1
	[0121.078] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.078] WriteFile (in: hFile=0x2cc, lpBuffer=0x12498400*, nNumberOfBytesToWrite=0x391, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12498400*, lpNumberOfBytesWritten=0x1242bd00*=0x391, lpOverlapped=0x1242bd0c) returned 1
	[0121.078] GetFileType (hFile=0x2cc) returned 0x1
	[0121.078] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x391, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.078] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0121.078] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0121.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0121.079] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0121.079] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.079] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0121.079] WriteFile (in: hFile=0x328, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.079] CloseHandle (hObject=0x328) returned 1
	[0121.080] CloseHandle (hObject=0x2cc) returned 1
	[0121.080] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-00BA-0409-1000-0000000FF1CE}-C\\GrooveMUI.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-00ba-0409-1000-0000000ff1ce}-c\\groovemui.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.081] SetEvent (hEvent=0x70) returned 1
	[0121.081] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.105] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.105] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0121.105] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a35700, ftCreationTime.dwHighDateTime=0x1cac9d7, ftLastAccessTime.dwLowDateTime=0x6a35700, ftLastAccessTime.dwHighDateTime=0x1cac9d7, ftLastWriteTime.dwLowDateTime=0xe8691090, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1a588)) returned 1
	[0121.105] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322c0 | out: pbBuffer=0x127322c0) returned 1
	[0121.105] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744110 | out: pbBuffer=0x12744110) returned 1
	[0121.105] ReadFile (in: hFile=0x328, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1242bd1c*=0x1a588, lpOverlapped=0x0) returned 1
	[0121.117] GetFileType (hFile=0x328) returned 0x1
	[0121.117] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.117] WriteFile (in: hFile=0x328, lpBuffer=0x12878000*, nNumberOfBytesToWrite=0x1a588, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12878000*, lpNumberOfBytesWritten=0x1242bd00*=0x1a588, lpOverlapped=0x1242bd0c) returned 1
	[0121.117] GetFileType (hFile=0x328) returned 0x1
	[0121.118] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x1a588, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0121.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0121.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0121.118] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441c8 | out: pbBuffer=0x127441c8) returned 1
	[0121.118] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x304
	[0121.118] GetConsoleMode (in: hConsoleHandle=0x304, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0121.118] WriteFile (in: hFile=0x304, lpBuffer=0x1276e500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1276e500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.119] CloseHandle (hObject=0x304) returned 1
	[0121.119] CloseHandle (hObject=0x328) returned 1
	[0121.119] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\1033\\dwintl20.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\1033\\dwintl20.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.120] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.120] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.120] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\DW20.EXE" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\dw20.exe"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa26c9d00, ftCreationTime.dwHighDateTime=0x1cac9ae, ftLastAccessTime.dwLowDateTime=0xa26c9d00, ftLastAccessTime.dwHighDateTime=0x1cac9ae, ftLastWriteTime.dwLowDateTime=0xe85142d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xccb88)) returned 1
	[0121.120] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324e0 | out: pbBuffer=0x127324e0) returned 1
	[0121.120] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441e0 | out: pbBuffer=0x127441e0) returned 1
	[0121.120] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0121.136] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.136] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0121.136] SetEvent (hEvent=0xa0) returned 1
	[0121.137] SetEvent (hEvent=0x70) returned 1
	[0121.137] ReadFile (in: hFile=0x328, lpBuffer=0x12894000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12894000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.143] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.147] SetEvent (hEvent=0x68) returned 1
	[0121.147] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.147] SetEvent (hEvent=0x68) returned 1
	[0121.147] SetEvent (hEvent=0x2e8) returned 1
	[0121.147] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.147] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.148] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e3ad0 | out: lpFileInformation=0x126e3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ba05100, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3ba05100, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7e3b3f0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd79282)) returned 1
	[0121.148] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0121.148] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0121.148] ReadFile (in: hFile=0x2cc, lpBuffer=0x127ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesRead=0x126e3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.159] GetFileType (hFile=0x2cc) returned 0x1
	[0121.159] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.159] WriteFile (in: hFile=0x2cc, lpBuffer=0x126ec000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e3d00, lpOverlapped=0x126e3d0c | out: lpBuffer=0x126ec000*, lpNumberOfBytesWritten=0x126e3d00*=0x20000, lpOverlapped=0x126e3d0c) returned 1
	[0121.160] GetFileType (hFile=0x2cc) returned 0x1
	[0121.160] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.160] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0121.161] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0121.161] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0121.161] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104a0 | out: pbBuffer=0x124104a0) returned 1
	[0121.161] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0121.161] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.161] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126e3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.180] CloseHandle (hObject=0x33c) returned 1
	[0121.180] CloseHandle (hObject=0x2cc) returned 1
	[0121.180] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeLR.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officelr.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.181] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.182] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.182] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), fInfoLevelId=0x0, lpFileInformation=0x126e3ad0 | out: lpFileInformation=0x126e3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xe7b68970, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0121.182] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e6a0 | out: pbBuffer=0x1240e6a0) returned 1
	[0121.182] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104e8 | out: pbBuffer=0x124104e8) returned 1
	[0121.182] ReadFile (in: hFile=0x2cc, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x126e3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.202] GetFileType (hFile=0x2cc) returned 0x1
	[0121.203] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.203] WriteFile (in: hFile=0x2cc, lpBuffer=0x125ba000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e3d00, lpOverlapped=0x126e3d0c | out: lpBuffer=0x125ba000*, lpNumberOfBytesWritten=0x126e3d00*=0x20000, lpOverlapped=0x126e3d0c) returned 1
	[0121.203] GetFileType (hFile=0x2cc) returned 0x1
	[0121.203] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.204] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0121.204] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0121.204] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0121.204] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0121.204] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\OfficeMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\officemuiset.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.204] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.204] WriteFile (in: hFile=0x338, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x126e3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.214] CloseHandle (hObject=0x338) returned 1
	[0121.214] CloseHandle (hObject=0x2cc) returned 1
	[0121.214] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.222] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.226] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.226] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.226] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xe84c60d0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1
	[0121.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e660 | out: pbBuffer=0x1240e660) returned 1
	[0121.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0121.226] ReadFile (in: hFile=0x338, lpBuffer=0x127ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.232] GetFileType (hFile=0x338) returned 0x1
	[0121.232] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.232] WriteFile (in: hFile=0x338, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0121.233] GetFileType (hFile=0x338) returned 0x1
	[0121.233] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.233] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0121.233] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0121.234] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0121.234] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410590 | out: pbBuffer=0x12410590) returned 1
	[0121.234] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.234] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.234] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.237] CloseHandle (hObject=0x340) returned 1
	[0121.238] CloseHandle (hObject=0x338) returned 1
	[0121.238] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\branding.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\branding.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.255] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.267] SetEvent (hEvent=0x70) returned 1
	[0121.267] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.267] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.267] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8c333b00, ftCreationTime.dwHighDateTime=0x1cacc53, ftLastAccessTime.dwLowDateTime=0x8c333b00, ftLastAccessTime.dwHighDateTime=0x1cacc53, ftLastWriteTime.dwLowDateTime=0xe86b5a80, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xa0200)) returned 1
	[0121.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0121.267] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0121.267] ReadFile (in: hFile=0x328, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.273] GetFileType (hFile=0x328) returned 0x1
	[0121.273] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.273] WriteFile (in: hFile=0x328, lpBuffer=0x12694000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12694000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0121.274] GetFileType (hFile=0x328) returned 0x1
	[0121.274] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0121.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0121.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0121.274] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0121.275] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.275] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.275] WriteFile (in: hFile=0x340, lpBuffer=0x127de000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127de000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.277] CloseHandle (hObject=0x340) returned 1
	[0121.278] CloseHandle (hObject=0x328) returned 1
	[0121.279] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\msvcr90.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\msvcr90.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.298] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.299] SetEvent (hEvent=0x70) returned 1
	[0121.299] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.300] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.300] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), fInfoLevelId=0x0, lpFileInformation=0x126e3ad0 | out: lpFileInformation=0x126e3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cab9f00, ftCreationTime.dwHighDateTime=0x1cac8ad, ftLastAccessTime.dwLowDateTime=0x7cab9f00, ftLastAccessTime.dwHighDateTime=0x1cac8ad, ftLastWriteTime.dwLowDateTime=0xe8728670, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10676)) returned 1
	[0121.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c280 | out: pbBuffer=0x1244c280) returned 1
	[0121.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0121.300] ReadFile (in: hFile=0x328, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x126e3d1c*=0x10676, lpOverlapped=0x0) returned 1
	[0121.305] GetFileType (hFile=0x328) returned 0x1
	[0121.305] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.305] WriteFile (in: hFile=0x328, lpBuffer=0x128b8000*, nNumberOfBytesToWrite=0x10676, lpNumberOfBytesWritten=0x126e3d00, lpOverlapped=0x126e3d0c | out: lpBuffer=0x128b8000*, lpNumberOfBytesWritten=0x126e3d00*=0x10676, lpOverlapped=0x126e3d0c) returned 1
	[0121.306] GetFileType (hFile=0x328) returned 0x1
	[0121.306] SetFilePointerEx (in: hFile=0x328, liDistanceToMove=0x10676, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0121.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0121.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0121.306] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0121.306] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.307] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.307] WriteFile (in: hFile=0x340, lpBuffer=0x127de500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127de500*, lpNumberOfBytesWritten=0x126e3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.307] CloseHandle (hObject=0x340) returned 1
	[0121.313] CloseHandle (hObject=0x328) returned 1
	[0121.316] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0115-0409-1000-0000000FF1CE}-C\\setup.chm.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0115-0409-1000-0000000ff1ce}-c\\setup.chm.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.332] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.332] SetEvent (hEvent=0x80) returned 1
	[0121.332] SetEvent (hEvent=0x68) returned 1
	[0121.332] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\AccessMUI.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\accessmui.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4529b900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x4529b900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa5fe940, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x545)) returned 1
	[0121.335] SetEvent (hEvent=0x68) returned 1
	[0121.335] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1
	[0121.338] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\AccessMUISet.msi" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\accessmuiset.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f33d800, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x3f33d800, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xfa160f00, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0xd4200)) returned 1
	[0121.339] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.339] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.339] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e3ad0 | out: lpFileInformation=0x126e3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11e8ef00, ftCreationTime.dwHighDateTime=0x1cacdea, ftLastAccessTime.dwLowDateTime=0x11e8ef00, ftLastAccessTime.dwHighDateTime=0x1cacdea, ftLastWriteTime.dwLowDateTime=0xfc0c60c0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x91975)) returned 1
	[0121.339] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0121.339] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0121.339] ReadFile (in: hFile=0x340, lpBuffer=0x1292a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1292a000*, lpNumberOfBytesRead=0x126e3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.391] GetFileType (hFile=0x340) returned 0x1
	[0121.391] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.391] WriteFile (in: hFile=0x340, lpBuffer=0x12878000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e3d00, lpOverlapped=0x126e3d0c | out: lpBuffer=0x12878000*, lpNumberOfBytesWritten=0x126e3d00*=0x20000, lpOverlapped=0x126e3d0c) returned 1
	[0121.392] GetFileType (hFile=0x340) returned 0x1
	[0121.392] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.392] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0121.393] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0121.393] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0121.393] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0f0 | out: pbBuffer=0x1251e0f0) returned 1
	[0121.393] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0121.393] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e3d0c | out: lpMode=0x126e3d0c) returned 0
	[0121.393] WriteFile (in: hFile=0x33c, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x126e3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.428] CloseHandle (hObject=0x33c) returned 1
	[0121.428] CloseHandle (hObject=0x340) returned 1
	[0121.429] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{90140000-0117-0409-1000-0000000FF1CE}-C\\Access.en-us\\branding.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{90140000-0117-0409-1000-0000000ff1ce}-c\\access.en-us\\branding.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.429] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0121.430] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0121.430] FindFirstFileW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0xfe09ced0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0x18179b90, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x18179b90, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.msi", cAlternateFileName="OFFICE~1.MSI")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office32WW.xml", cAlternateFileName="OFFICE~1.XML")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf885a000, ftCreationTime.dwHighDateTime=0x1cac4d7, ftLastAccessTime.dwLowDateTime=0xf885a000, ftLastAccessTime.dwHighDateTime=0x1cac4d7, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x2a968, dwReserved0=0x0, dwReserved1=0x0, cFileName="ose.exe", cAlternateFileName="")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd900f00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbd900f00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x16854390, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x709768, dwReserved0=0x0, dwReserved1=0x0, cFileName="osetup.dll", cAlternateFileName="")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWOW32WW.cab", cAlternateFileName="")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510, dwReserved0=0x0, dwReserved1=0x0, cFileName="PidGenX.dll", cAlternateFileName="")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.msi", cAlternateFileName="PROPLU~1.MSI")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x41d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPlusrWW.xml", cAlternateFileName="PROPLU~1.XML")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW.cab", cAlternateFileName="")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbf14900, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbf14900, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0xc96ff40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xd49ee31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProPrWW2.cab", cAlternateFileName="")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbec13c00, ftCreationTime.dwHighDateTime=0x1cac15b, ftLastAccessTime.dwLowDateTime=0xbec13c00, ftLastAccessTime.dwHighDateTime=0x1cac15b, ftLastWriteTime.dwLowDateTime=0x1682d290, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x150578, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.xml", cAlternateFileName="")) returned 1
	[0121.443] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0121.444] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0121.452] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0121.453] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0121.453] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\# M0rphine Help #.hta" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.454] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0121.454] WriteFile (in: hFile=0x328, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0121.455] CloseHandle (hObject=0x328) returned 1
	[0121.456] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x147e5b00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x147e5b00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xff654fc0, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0121.461] SetEvent (hEvent=0x320) returned 1
	[0121.461] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x34ae1a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x34ae1a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe0c2860, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x1e6600)) returned 1
	[0121.466] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x940c2a00, ftCreationTime.dwHighDateTime=0x1cad01b, ftLastAccessTime.dwLowDateTime=0x940c2a00, ftLastAccessTime.dwHighDateTime=0x1cad01b, ftLastWriteTime.dwLowDateTime=0xfe09b760, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0121.466] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\PidGenX.dll" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pidgenx.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3a02e00, ftCreationTime.dwHighDateTime=0x1cac5f7, ftLastAccessTime.dwLowDateTime=0xe3a02e00, ftLastAccessTime.dwHighDateTime=0x1cac5f7, ftLastWriteTime.dwLowDateTime=0x17e0dbf0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x165510)) returned 1
	[0121.602] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPlusrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proplusrww.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb2e2000, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbb2e2000, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x170fe40, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x1a41c00)) returned 1
	[0121.615] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.621] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.634] SetEvent (hEvent=0x80) returned 1
	[0121.635] GetFileType (hFile=0x2cc) returned 0x1
	[0121.635] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.635] WriteFile (in: hFile=0x2cc, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0121.636] GetFileType (hFile=0x2cc) returned 0x1
	[0121.636] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.636] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0121.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0121.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0121.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441a0 | out: pbBuffer=0x127441a0) returned 1
	[0121.637] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0121.637] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.637] WriteFile (in: hFile=0x32c, lpBuffer=0x12620500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12620500*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.658] CloseHandle (hObject=0x32c) returned 1
	[0121.659] CloseHandle (hObject=0x2cc) returned 1
	[0121.659] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Office32WW.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\office32ww.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.685] SetEvent (hEvent=0x2e8) returned 1
	[0121.685] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.685] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.685] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e7ad0 | out: lpFileInformation=0x126e7ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x262b2700, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0x262b2700, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x1ffd0c0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xa97cbdb)) returned 1
	[0121.685] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c460 | out: pbBuffer=0x1244c460) returned 1
	[0121.685] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0121.686] ReadFile (in: hFile=0x2cc, lpBuffer=0x1286a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e7d1c, lpOverlapped=0x0 | out: lpBuffer=0x1286a000*, lpNumberOfBytesRead=0x126e7d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.703] GetFileType (hFile=0x2cc) returned 0x1
	[0121.703] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.703] WriteFile (in: hFile=0x2cc, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x126e7d00*=0x20000, lpOverlapped=0x126e7d0c) returned 1
	[0121.704] GetFileType (hFile=0x2cc) returned 0x1
	[0121.704] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0121.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0121.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0121.704] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0121.705] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0121.705] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0121.705] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.709] CloseHandle (hObject=0x340) returned 1
	[0121.709] CloseHandle (hObject=0x2cc) returned 1
	[0121.710] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\ProPrWW.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\proprww.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.737] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.738] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.738] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbd907a00, ftCreationTime.dwHighDateTime=0x1cad04a, ftLastAccessTime.dwLowDateTime=0xbd907a00, ftLastAccessTime.dwHighDateTime=0x1cad04a, ftLastWriteTime.dwLowDateTime=0x18177c50, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x7976)) returned 1
	[0121.738] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6a0 | out: pbBuffer=0x1244c6a0) returned 1
	[0121.738] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0121.738] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0121.739] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0121.739] SetEvent (hEvent=0xa0) returned 1
	[0121.739] SetEvent (hEvent=0x80) returned 1
	[0121.739] ReadFile (in: hFile=0x2cc, lpBuffer=0x128ca000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x128ca000*, lpNumberOfBytesRead=0x124f3d1c*=0x7976, lpOverlapped=0x0) returned 1
	[0121.743] GetFileType (hFile=0x2cc) returned 0x1
	[0121.743] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.743] WriteFile (in: hFile=0x2cc, lpBuffer=0x128aa000*, nNumberOfBytesToWrite=0x7976, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x128aa000*, lpNumberOfBytesWritten=0x124f3d00*=0x7976, lpOverlapped=0x124f3d0c) returned 1
	[0121.744] GetFileType (hFile=0x2cc) returned 0x1
	[0121.744] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x7976, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0121.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0121.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0121.744] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0121.745] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.745] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0121.745] WriteFile (in: hFile=0x328, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.745] CloseHandle (hObject=0x328) returned 1
	[0121.746] SwitchToThread () returned 1
	[0121.746] CloseHandle (hObject=0x2cc) returned 1
	[0121.747] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\Setup.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\setup.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.798] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0121.815] SetEvent (hEvent=0x80) returned 1
	[0121.815] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.816] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.816] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe06a9500, ftCreationTime.dwHighDateTime=0x1cac7e5, ftLastAccessTime.dwLowDateTime=0xe06a9500, ftLastAccessTime.dwHighDateTime=0x1cac7e5, ftLastWriteTime.dwLowDateTime=0x17c42c30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0121.816] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0121.816] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0121.816] ReadFile (in: hFile=0x338, lpBuffer=0x127ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.823] GetFileType (hFile=0x338) returned 0x1
	[0121.823] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.824] WriteFile (in: hFile=0x338, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0121.824] GetFileType (hFile=0x338) returned 0x1
	[0121.824] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.824] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0121.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0121.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0121.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0121.825] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.825] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0121.825] WriteFile (in: hFile=0x328, lpBuffer=0x127ea000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ea000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.828] CloseHandle (hObject=0x328) returned 1
	[0121.829] CloseHandle (hObject=0x338) returned 1
	[0121.829] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0011-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0011-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.855] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.855] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0121.855] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8238e540, ftCreationTime.dwHighDateTime=0x1cb147f, ftLastAccessTime.dwLowDateTime=0x8238e540, ftLastAccessTime.dwHighDateTime=0x1cb147f, ftLastWriteTime.dwLowDateTime=0xa5ddcc70, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x228df5c)) returned 1
	[0121.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0121.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0121.855] ReadFile (in: hFile=0x338, lpBuffer=0x1292a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1292a000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.867] GetFileType (hFile=0x338) returned 0x1
	[0121.867] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.867] WriteFile (in: hFile=0x338, lpBuffer=0x1296a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1296a000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0121.868] GetFileType (hFile=0x338) returned 0x1
	[0121.868] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0121.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0121.869] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0121.869] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441b0 | out: pbBuffer=0x127441b0) returned 1
	[0121.869] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0121.869] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0121.869] WriteFile (in: hFile=0x2cc, lpBuffer=0x127ea500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ea500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.878] CloseHandle (hObject=0x2cc) returned 1
	[0121.878] CloseHandle (hObject=0x338) returned 1
	[0121.878] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\OWOW32WW.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\owow32ww.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.911] SetEvent (hEvent=0x2e8) returned 1
	[0121.911] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.911] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0121.911] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c1614f0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x7c1614f0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa60fd8f0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0xa4c400)) returned 1
	[0121.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0121.911] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410040 | out: pbBuffer=0x12410040) returned 1
	[0121.911] ReadFile (in: hFile=0x338, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0121.923] GetFileType (hFile=0x338) returned 0x1
	[0121.923] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.923] WriteFile (in: hFile=0x338, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0121.924] GetFileType (hFile=0x338) returned 0x1
	[0121.924] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0121.924] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0121.924] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0121.924] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0121.925] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c8 | out: pbBuffer=0x124103c8) returned 1
	[0121.925] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0121.925] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0121.925] WriteFile (in: hFile=0x328, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0121.928] CloseHandle (hObject=0x328) returned 1
	[0121.929] CloseHandle (hObject=0x338) returned 1
	[0121.931] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjProrWW.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprorww.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0121.939] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0121.939] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0121.939] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6c87b0c0, ftCreationTime.dwHighDateTime=0x1cb148c, ftLastAccessTime.dwLowDateTime=0x6c87b0c0, ftLastAccessTime.dwHighDateTime=0x1cb148c, ftLastWriteTime.dwLowDateTime=0xa6b67930, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x9b6ba9f)) returned 1
	[0121.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0121.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d0 | out: pbBuffer=0x124104d0) returned 1
	[0121.939] ReadFile (in: hFile=0x338, lpBuffer=0x1270c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x1270c000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.012] GetFileType (hFile=0x338) returned 0x1
	[0122.012] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.012] WriteFile (in: hFile=0x338, lpBuffer=0x12858000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x12858000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0122.013] GetFileType (hFile=0x338) returned 0x1
	[0122.013] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0122.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0122.013] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0122.014] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0122.014] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0122.014] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.014] WriteFile (in: hFile=0x328, lpBuffer=0x12526000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12526000*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.080] CloseHandle (hObject=0x328) returned 1
	[0122.080] CloseHandle (hObject=0x338) returned 1
	[0122.081] SetEvent (hEvent=0x318) returned 1
	[0122.081] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0122.100] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0122.100] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0122.101] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0122.101] SetEvent (hEvent=0x320) returned 1
	[0122.101] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0122.103] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-003B-0000-1000-0000000FF1CE}-C\\PrjPrrWW.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-003b-0000-1000-0000000ff1ce}-c\\prjprrww.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.156] SetEvent (hEvent=0x2e8) returned 1
	[0122.156] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.156] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.157] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x16771fb0, ftCreationTime.dwHighDateTime=0x1cb12b4, ftLastAccessTime.dwLowDateTime=0x16771fb0, ftLastAccessTime.dwHighDateTime=0x1cb12b4, ftLastWriteTime.dwLowDateTime=0x46536400, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x10b2)) returned 1
	[0122.157] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0122.157] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0122.157] ReadFile (in: hFile=0x2fc, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x126e9d1c*=0x10b2, lpOverlapped=0x0) returned 1
	[0122.171] GetFileType (hFile=0x2fc) returned 0x1
	[0122.171] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.171] WriteFile (in: hFile=0x2fc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x10b2, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x126e9d00*=0x10b2, lpOverlapped=0x126e9d0c) returned 1
	[0122.171] GetFileType (hFile=0x2fc) returned 0x1
	[0122.172] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x10b2, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0122.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0122.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0122.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0122.172] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0122.172] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.173] WriteFile (in: hFile=0x338, lpBuffer=0x125fe500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe500*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.173] CloseHandle (hObject=0x338) returned 1
	[0122.173] CloseHandle (hObject=0x2fc) returned 1
	[0122.173] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\Office32WW.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\office32ww.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.196] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.196] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.196] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749b0240, ftCreationTime.dwHighDateTime=0x1cb1486, ftLastAccessTime.dwLowDateTime=0x749b0240, ftLastAccessTime.dwHighDateTime=0x1cb1486, ftLastWriteTime.dwLowDateTime=0x46a46a30, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xb9fa2f7)) returned 1
	[0122.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c480 | out: pbBuffer=0x1244c480) returned 1
	[0122.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0122.197] ReadFile (in: hFile=0x2fc, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.211] GetFileType (hFile=0x2fc) returned 0x1
	[0122.212] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.212] WriteFile (in: hFile=0x2fc, lpBuffer=0x12938000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x12938000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0122.213] GetFileType (hFile=0x2fc) returned 0x1
	[0122.213] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0122.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0122.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0122.214] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0122.214] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.214] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.214] WriteFile (in: hFile=0x33c, lpBuffer=0x125fea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fea00*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.217] CloseHandle (hObject=0x33c) returned 1
	[0122.217] CloseHandle (hObject=0x2fc) returned 1
	[0122.219] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\VisiorWW.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\visiorww.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.224] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0122.224] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.224] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde72fbf0, ftCreationTime.dwHighDateTime=0x1cb0d0b, ftLastAccessTime.dwLowDateTime=0xde72fbf0, ftLastAccessTime.dwHighDateTime=0x1cb0d0b, ftLastWriteTime.dwLowDateTime=0x49c902c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x709768)) returned 1
	[0122.224] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6a0 | out: pbBuffer=0x1244c6a0) returned 1
	[0122.224] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0122.224] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0122.227] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0122.227] SetEvent (hEvent=0xa0) returned 1
	[0122.227] SetEvent (hEvent=0x320) returned 1
	[0122.227] SetEvent (hEvent=0x318) returned 1
	[0122.228] ReadFile (in: hFile=0x32c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.234] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0122.236] SetEvent (hEvent=0x320) returned 1
	[0122.236] GetFileType (hFile=0x32c) returned 0x1
	[0122.237] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.237] WriteFile (in: hFile=0x32c, lpBuffer=0x12858000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x12858000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0122.237] GetFileType (hFile=0x32c) returned 0x1
	[0122.237] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.238] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0122.238] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0122.238] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0122.238] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0122.238] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.238] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.238] WriteFile (in: hFile=0x33c, lpBuffer=0x125ff400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ff400*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.244] CloseHandle (hObject=0x33c) returned 1
	[0122.244] CloseHandle (hObject=0x32c) returned 1
	[0122.244] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\osetup.dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\osetup.dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.245] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0122.246] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\setup.exe" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e7af0, ftCreationTime.dwHighDateTime=0x1cb04a9, ftLastAccessTime.dwLowDateTime=0xeb7e7af0, ftLastAccessTime.dwHighDateTime=0x1cb04a9, ftLastWriteTime.dwLowDateTime=0x49c691c0, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x150578)) returned 1
	[0122.253] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0122.253] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.253] GetFileAttributesExW (in: lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95261510, ftCreationTime.dwHighDateTime=0x1cb048a, ftLastAccessTime.dwLowDateTime=0x95261510, ftLastAccessTime.dwHighDateTime=0x1cb048a, ftLastWriteTime.dwLowDateTime=0x4a6ac100, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0xaec3a)) returned 1
	[0122.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e020 | out: pbBuffer=0x1252e020) returned 1
	[0122.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410040 | out: pbBuffer=0x12410040) returned 1
	[0122.254] ReadFile (in: hFile=0x340, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.289] GetFileType (hFile=0x340) returned 0x1
	[0122.289] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.290] WriteFile (in: hFile=0x340, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0122.290] GetFileType (hFile=0x340) returned 0x1
	[0122.290] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0122.291] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0122.291] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0122.291] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c8 | out: pbBuffer=0x124103c8) returned 1
	[0122.291] CreateFileW (lpFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0122.291] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.291] WriteFile (in: hFile=0x2cc, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.314] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0122.327] CloseHandle (hObject=0x2cc) returned 1
	[0122.333] CloseHandle (hObject=0x340) returned 1
	[0122.337] MoveFileExW (lpExistingFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms"), lpNewFileName="C:\\MSOCache\\All Users\\{91140000-0057-0000-1000-0000000FF1CE}-C\\pkeyconfig-office.xrm-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\msocache\\all users\\{91140000-0057-0000-1000-0000000ff1ce}-c\\pkeyconfig-office.xrm-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.449] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a)) returned 1
	[0122.450] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x26353250, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x3944)) returned 1
	[0122.450] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0122.451] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.451] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), fInfoLevelId=0x0, lpFileInformation=0x126e9ad0 | out: lpFileInformation=0x126e9ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x24534c56, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xae45604d, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0xae45604d, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x79f1a)) returned 1
	[0122.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e260 | out: pbBuffer=0x1252e260) returned 1
	[0122.451] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410408 | out: pbBuffer=0x12410408) returned 1
	[0122.451] ReadFile (in: hFile=0x2cc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e9d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x126e9d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0122.482] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0122.483] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0122.483] SetEvent (hEvent=0xa0) returned 1
	[0122.484] SetEvent (hEvent=0x318) returned 1
	[0122.484] SetEvent (hEvent=0x320) returned 1
	[0122.486] GetFileType (hFile=0x2cc) returned 0x1
	[0122.486] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.486] WriteFile (in: hFile=0x2cc, lpBuffer=0x128b8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e9d00, lpOverlapped=0x126e9d0c | out: lpBuffer=0x128b8000*, lpNumberOfBytesWritten=0x126e9d00*=0x20000, lpOverlapped=0x126e9d0c) returned 1
	[0122.487] GetFileType (hFile=0x2cc) returned 0x1
	[0122.487] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e9ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.487] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0122.487] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0122.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0122.488] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105a0 | out: pbBuffer=0x124105a0) returned 1
	[0122.488] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0122.488] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x126e9d0c | out: lpMode=0x126e9d0c) returned 0
	[0122.488] WriteFile (in: hFile=0x32c, lpBuffer=0x12456a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e9d0c, lpOverlapped=0x0 | out: lpBuffer=0x12456a00*, lpNumberOfBytesWritten=0x126e9d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.492] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0122.493] SetEvent (hEvent=0x318) returned 1
	[0122.493] CloseHandle (hObject=0x32c) returned 1
	[0122.493] CloseHandle (hObject=0x2cc) returned 1
	[0122.494] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), lpNewFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.494] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0122.495] SetEvent (hEvent=0x318) returned 1
	[0122.495] SetEvent (hEvent=0x70) returned 1
	[0122.495] GetFileType (hFile=0x33c) returned 0x1
	[0122.495] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.495] WriteFile (in: hFile=0x33c, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x3944, lpNumberOfBytesWritten=0x126e7d00, lpOverlapped=0x126e7d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x126e7d00*=0x3944, lpOverlapped=0x126e7d0c) returned 1
	[0122.495] GetFileType (hFile=0x33c) returned 0x1
	[0122.496] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3944, lpNewFilePointer=0x0, dwMoveMethod=0x126e7ce4 | out: lpNewFilePointer=0x0) returned 1
	[0122.496] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0122.496] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0122.496] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0122.496] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0122.496] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0122.496] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e7d0c | out: lpMode=0x126e7d0c) returned 0
	[0122.496] WriteFile (in: hFile=0x2cc, lpBuffer=0x12456000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e7d0c, lpOverlapped=0x0 | out: lpBuffer=0x12456000*, lpNumberOfBytesWritten=0x126e7d0c*=0x276, lpOverlapped=0x0) returned 1
	[0122.497] CloseHandle (hObject=0x2cc) returned 1
	[0122.497] CloseHandle (hObject=0x33c) returned 1
	[0122.497] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), lpNewFileName="C:\\ProgramData\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0122.498] WriteFile (in: hFile=0x2fc, lpBuffer=0x12619300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12619300*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0122.499] CloseHandle (hObject=0x2fc) returned 1
	[0122.499] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.500] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.500] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.500] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd943744, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.501] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.501] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.501] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.501] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.501] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.501] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0122.501] WriteFile (in: hFile=0x2fc, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0122.509] CloseHandle (hObject=0x2fc) returned 1
	[0122.509] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys" (normalized: "c:\\programdata\\microsoft\\crypto\\keys"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.517] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys" (normalized: "c:\\programdata\\microsoft\\crypto\\keys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.517] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.518] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.518] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.518] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.518] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.518] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.518] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0122.520] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0122.520] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261a600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x1261a600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0122.522] CloseHandle (hObject=0x2cc) returned 1
	[0122.522] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.522] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.522] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.523] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfc65d150, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc65d150, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.523] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0122.523] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0122.523] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.523] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.523] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.523] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.523] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.527] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0122.527] WriteFile (in: hFile=0x2fc, lpBuffer=0x1261b900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x1261b900*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0122.529] CloseHandle (hObject=0x2fc) returned 1
	[0122.529] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.529] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.529] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xb66d81ea, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.529] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.530] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.530] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.530] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.530] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.530] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0122.530] WriteFile (in: hFile=0x2fc, lpBuffer=0x1261cc00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x1261cc00*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0122.532] CloseHandle (hObject=0x2fc) returned 1
	[0122.532] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.534] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.534] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.534] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xfc65d150, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.534] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="6D14E4~1")) returned 1
	[0122.534] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f", cAlternateFileName="D42CC0~1")) returned 1
	[0122.534] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.534] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.534] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.535] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.535] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.537] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0122.537] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0122.539] CloseHandle (hObject=0x33c) returned 1
	[0122.539] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\6d14e4b1d8ca773bab785d1be032546e_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xfc767af0, ftCreationTime.dwHighDateTime=0x1d2dda1, ftLastAccessTime.dwLowDateTime=0xfc767af0, ftLastAccessTime.dwHighDateTime=0x1d2dda1, ftLastWriteTime.dwLowDateTime=0xfc767af0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0x2f)) returned 1
	[0122.539] SetEvent (hEvent=0x318) returned 1
	[0122.539] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\d42cc0c3858a58db2db37658219e6400_0303d5b4-ffe9-470e-9dd8-7d9ec416e53f"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5bc2f0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe5bc2f0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0xe5bc2f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x41d)) returned 1
	[0122.540] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM" (normalized: "c:\\programdata\\microsoft\\drm"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.548] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM" (normalized: "c:\\programdata\\microsoft\\drm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.549] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.549] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.549] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1
	[0122.549] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.549] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.549] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\drm\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.549] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\drm\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.549] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\drm\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.551] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0122.551] WriteFile (in: hFile=0x2fc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0122.553] CloseHandle (hObject=0x2fc) returned 1
	[0122.553] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server" (normalized: "c:\\programdata\\microsoft\\drm\\server"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.553] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server" (normalized: "c:\\programdata\\microsoft\\drm\\server"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.553] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.553] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xba6f6d7d, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.553] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.553] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.554] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\drm\\server\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.554] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\drm\\server\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.554] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\drm\\server\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.554] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0122.554] WriteFile (in: hFile=0x2fc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0122.556] CloseHandle (hObject=0x2fc) returned 1
	[0122.556] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage" (normalized: "c:\\programdata\\microsoft\\device stage"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.556] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage" (normalized: "c:\\programdata\\microsoft\\device stage"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.556] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.558] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.558] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1
	[0122.558] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1
	[0122.558] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.558] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.558] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.558] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.558] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0122.559] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0122.559] WriteFile (in: hFile=0x2fc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0122.560] CloseHandle (hObject=0x2fc) returned 1
	[0122.561] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device" (normalized: "c:\\programdata\\microsoft\\device stage\\device"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.566] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device" (normalized: "c:\\programdata\\microsoft\\device stage\\device"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.566] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.566] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.566] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1
	[0122.566] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1
	[0122.566] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.566] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.566] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.566] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.567] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.589] SetEvent (hEvent=0xa0) returned 1
	[0122.589] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0122.589] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0122.591] CloseHandle (hObject=0x33c) returned 1
	[0122.591] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.591] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.591] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0122.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
	[0122.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1
	[0122.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1
	[0122.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1
	[0122.612] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.613] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.614] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.615] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.615] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.616] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0122.616] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0122.617] CloseHandle (hObject=0x33c) returned 1
	[0122.618] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1)) returned 1
	[0122.619] SetEvent (hEvent=0x318) returned 1
	[0122.620] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7c5b0d9, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0xc7c5b0d9, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0xc7c5b0d9, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xb61)) returned 1
	[0122.621] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f07a66f, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f07a66f, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76b3ce5, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xadc8)) returned 1
	[0122.621] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0a07cc, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0a07cc, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1)) returned 1
	[0122.621] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0c6929, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0c6929, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc76d9e43, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x99d3)) returned 1
	[0122.623] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.624] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.624] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.624] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd96989e, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd96989e, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.624] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0122.624] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
	[0122.624] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1
	[0122.624] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.624] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.624] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.624] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.625] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.637] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0122.637] WriteFile (in: hFile=0x33c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0122.638] CloseHandle (hObject=0x33c) returned 1
	[0122.639] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c0af2f7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x9c0af2f7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x9c0af2f7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1)) returned 1
	[0122.639] SetEvent (hEvent=0x318) returned 1
	[0122.639] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2feb941, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2feb941, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x769)) returned 1
	[0122.639] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3011a9e, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd3011a9e, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x9c0d5455, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x70c1)) returned 1
	[0122.639] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task" (normalized: "c:\\programdata\\microsoft\\device stage\\task"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.639] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task" (normalized: "c:\\programdata\\microsoft\\device stage\\task"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.640] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd98f9f8, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1
	[0122.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1
	[0122.640] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.640] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.640] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.640] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.640] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.655] SetEvent (hEvent=0xa0) returned 1
	[0122.655] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0122.655] WriteFile (in: hFile=0x33c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0122.656] CloseHandle (hObject=0x33c) returned 1
	[0122.656] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.658] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.658] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.660] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd96989e, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.660] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0122.660] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0122.660] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1
	[0122.660] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1
	[0122.661] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0122.661] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1
	[0122.661] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1
	[0122.661] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1
	[0122.661] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
	[0122.661] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1
	[0122.661] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.661] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.662] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.663] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.663] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.671] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0122.671] WriteFile (in: hFile=0x33c, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0122.673] CloseHandle (hObject=0x33c) returned 1
	[0122.673] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.674] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.674] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.674] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.674] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0122.674] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.674] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.674] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.674] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.675] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.676] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0122.676] WriteFile (in: hFile=0x33c, lpBuffer=0x12767300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12767300*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0122.677] CloseHandle (hObject=0x33c) returned 1
	[0122.677] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x932b6af, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x95b44f8, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x932b6af, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x536)) returned 1
	[0122.678] SetEvent (hEvent=0x80) returned 1
	[0122.679] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c7f9e6, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c7f9e6, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3)) returned 1
	[0122.679] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2db04ce, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2db04ce, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c0e93d7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x72ee)) returned 1
	[0122.679] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2ca5b43, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2ca5b43, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c10f535, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x14668)) returned 1
	[0122.679] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2c59889, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2c59889, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1cdc0b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x536)) returned 1
	[0122.681] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2cf1dfd, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2cf1dfd, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9)) returned 1
	[0122.681] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d17f5a, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d17f5a, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c1f3d69, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10850)) returned 1
	[0122.682] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d3e0b7, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d3e0b7, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xc04b)) returned 1
	[0122.682] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c219ec7, ftCreationTime.dwHighDateTime=0x1c9ea0e, ftLastAccessTime.dwLowDateTime=0x7c219ec7, ftLastAccessTime.dwHighDateTime=0x1c9ea0e, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x3473)) returned 1
	[0122.684] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2d64214, ftCreationTime.dwHighDateTime=0x1ca0407, ftLastAccessTime.dwLowDateTime=0xd2d64214, ftLastAccessTime.dwHighDateTime=0x1ca0407, ftLastWriteTime.dwLowDateTime=0x7c219ec7, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4)) returned 1
	[0122.684] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.684] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.685] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x1d91b669, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0122.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0122.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1
	[0122.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1
	[0122.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1
	[0122.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1
	[0122.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1
	[0122.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1
	[0122.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
	[0122.688] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.688] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.689] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.690] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.690] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.691] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0122.691] WriteFile (in: hFile=0x33c, lpBuffer=0x12768600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12768600*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0122.692] CloseHandle (hObject=0x33c) returned 1
	[0122.693] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.693] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.693] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d91b669, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x22f23962, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0x1d91b669, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0122.693] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.693] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.694] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.694] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.694] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.694] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0122.694] WriteFile (in: hFile=0x33c, lpBuffer=0x12769900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12769900*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0122.699] CloseHandle (hObject=0x33c) returned 1
	[0122.700] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2a152a, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0xb5e9110, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xb2a152a, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0x5e8)) returned 1
	[0122.701] SetEvent (hEvent=0x318) returned 1
	[0122.701] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78a2eab, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3)) returned 1
	[0122.701] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8)) returned 1
	[0122.701] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f0eca86, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f0eca86, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc78c9009, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xebb8)) returned 1
	[0122.702] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f112be3, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f112be3, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7be8cbf, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xdff5)) returned 1
	[0122.704] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xec75)) returned 1
	[0122.704] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f15ee9d, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f15ee9d, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c0ee1d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x10654)) returned 1
	[0122.704] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f138d40, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f138d40, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7c34f7b, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2)) returned 1
	[0122.704] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f054512, ftCreationTime.dwHighDateTime=0x1ca040c, ftLastAccessTime.dwLowDateTime=0x5f054512, ftLastAccessTime.dwHighDateTime=0x1ca040c, ftLastWriteTime.dwLowDateTime=0xc7d3f90d, ftLastWriteTime.dwHighDateTime=0x1c9ea0e, nFileSizeHigh=0x0, nFileSizeLow=0x2c64)) returned 1
	[0122.705] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.705] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.705] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.705] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml\\*", lpFindFileData=0x124f1a44 | out: lpFindFileData=0x124f1a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0122.705] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync" (normalized: "c:\\programdata\\microsoft\\devicesync"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.705] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync" (normalized: "c:\\programdata\\microsoft\\devicesync"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.705] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.706] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd98f9f8, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xd789d88f, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.706] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.706] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.706] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\devicesync\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.706] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\devicesync\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.706] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\devicesync\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.709] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0122.709] WriteFile (in: hFile=0x33c, lpBuffer=0x1276ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1276ac00*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0122.711] CloseHandle (hObject=0x33c) returned 1
	[0122.711] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer" (normalized: "c:\\programdata\\microsoft\\event viewer"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.713] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer" (normalized: "c:\\programdata\\microsoft\\event viewer"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.713] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.713] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3a6c7630, ftLastAccessTime.dwHighDateTime=0x1d3aaba, ftLastWriteTime.dwLowDateTime=0x3a6c7630, ftLastWriteTime.dwHighDateTime=0x1d3aaba, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.713] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1
	[0122.713] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.713] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.713] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\event viewer\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.713] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\event viewer\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.714] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\event viewer\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.714] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0122.714] WriteFile (in: hFile=0x33c, lpBuffer=0x126d4000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0122.715] CloseHandle (hObject=0x33c) returned 1
	[0122.716] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" (normalized: "c:\\programdata\\microsoft\\event viewer\\views"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.954] SetEvent (hEvent=0xa0) returned 1
	[0122.955] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views" (normalized: "c:\\programdata\\microsoft\\event viewer\\views"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.955] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.956] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.956] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1
	[0122.956] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.956] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.956] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.956] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.956] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.957] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0122.957] WriteFile (in: hFile=0x33c, lpBuffer=0x126d5300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x126d5300*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0122.960] CloseHandle (hObject=0x33c) returned 1
	[0122.960] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.960] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.960] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.961] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3235c810, ftCreationTime.dwHighDateTime=0x1d2fa9b, ftLastAccessTime.dwLowDateTime=0x3235c810, ftLastAccessTime.dwHighDateTime=0x1d2fa9b, ftLastWriteTime.dwLowDateTime=0x3235c810, ftLastWriteTime.dwHighDateTime=0x1d2fa9b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.961] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.961] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.961] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.961] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.961] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0122.962] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0122.962] WriteFile (in: hFile=0x33c, lpBuffer=0x126d6600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x126d6600*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0122.963] CloseHandle (hObject=0x33c) returned 1
	[0122.964] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL" (normalized: "c:\\programdata\\microsoft\\identitycrl"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0122.965] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL" (normalized: "c:\\programdata\\microsoft\\identitycrl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0122.966] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0122.966] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd98f9f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0122.966] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1
	[0122.966] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlui.dll", cAlternateFileName="")) returned 1
	[0122.966] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0122.966] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0122.966] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\identitycrl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0122.966] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\identitycrl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0122.966] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\identitycrl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0123.094] SetEvent (hEvent=0xa0) returned 1
	[0123.094] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0123.094] WriteFile (in: hFile=0x33c, lpBuffer=0x126d7900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x126d7900*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0123.095] CloseHandle (hObject=0x33c) returned 1
	[0123.096] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlconfig.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd591378b, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd591378b, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac29de1, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3d00)) returned 1
	[0123.096] SetEvent (hEvent=0x318) returned 1
	[0123.096] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\programdata\\microsoft\\identitycrl\\ppcrlui.dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd582ef5d, ftCreationTime.dwHighDateTime=0x1ca042b, ftLastAccessTime.dwLowDateTime=0xd582ef5d, ftLastAccessTime.dwHighDateTime=0x1ca042b, ftLastWriteTime.dwLowDateTime=0x6ac4ff3f, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3e108)) returned 1
	[0123.100] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF" (normalized: "c:\\programdata\\microsoft\\mf"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.100] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF" (normalized: "c:\\programdata\\microsoft\\mf"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.100] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.100] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7fffaad0, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x80340916, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x80340916, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.100] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1
	[0123.100] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1
	[0123.100] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.101] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.101] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\mf\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.101] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\mf\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.101] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\mf\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0123.101] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0123.101] WriteFile (in: hFile=0x2fc, lpBuffer=0x126d8c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x126d8c00*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0123.102] CloseHandle (hObject=0x2fc) returned 1
	[0123.103] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7beaaeb8, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7beaaeb8, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c)) returned 1
	[0123.103] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80340916, ftCreationTime.dwHighDateTime=0x1ca0444, ftLastAccessTime.dwLowDateTime=0x7bed1018, ftLastAccessTime.dwHighDateTime=0x1ca0444, ftLastWriteTime.dwLowDateTime=0x7bed1018, ftLastWriteTime.dwHighDateTime=0x1ca0444, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c)) returned 1
	[0123.103] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN" (normalized: "c:\\programdata\\microsoft\\msdn"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.107] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN" (normalized: "c:\\programdata\\microsoft\\msdn"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.107] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.107] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.107] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8.0", cAlternateFileName="")) returned 1
	[0123.107] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.107] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.107] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\msdn\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.107] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\msdn\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.107] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\msdn\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0123.108] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0123.108] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245e000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1245e000*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0123.109] CloseHandle (hObject=0x2cc) returned 1
	[0123.110] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0" (normalized: "c:\\programdata\\microsoft\\msdn\\8.0"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.110] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0" (normalized: "c:\\programdata\\microsoft\\msdn\\8.0"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.110] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x50ea0e30, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x50ea0e30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x50ea0e30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.110] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.110] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.110] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\msdn\\8.0\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.111] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\msdn\\8.0\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.111] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MSDN\\8.0\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\msdn\\8.0\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0123.111] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0123.111] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x1245f300*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0123.112] CloseHandle (hObject=0x2cc) returned 1
	[0123.112] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player" (normalized: "c:\\programdata\\microsoft\\media player"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.113] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Media Player" (normalized: "c:\\programdata\\microsoft\\media player"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.113] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee349fc, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x3ee349fc, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x3ee349fc, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.113] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.113] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.113] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\media player\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.113] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\media player\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.113] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Media Player\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\media player\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0123.121] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0123.121] WriteFile (in: hFile=0x32c, lpBuffer=0x12460600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12460600*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0123.122] CloseHandle (hObject=0x32c) returned 1
	[0123.122] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework" (normalized: "c:\\programdata\\microsoft\\netframework"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.123] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework" (normalized: "c:\\programdata\\microsoft\\netframework"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.123] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.124] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.124] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1
	[0123.124] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.124] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.124] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\netframework\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.124] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\netframework\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.124] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\netframework\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0123.124] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0123.124] WriteFile (in: hFile=0x32c, lpBuffer=0x12461900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12461900*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0123.126] CloseHandle (hObject=0x32c) returned 1
	[0123.126] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.126] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.126] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.126] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ac2f60, ftCreationTime.dwHighDateTime=0x1d2e676, ftLastAccessTime.dwLowDateTime=0x56ac2f60, ftLastAccessTime.dwHighDateTime=0x1d2e676, ftLastWriteTime.dwLowDateTime=0x56ac2f60, ftLastWriteTime.dwHighDateTime=0x1d2e676, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.126] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.127] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.127] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.127] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.127] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0123.212] SetEvent (hEvent=0xa0) returned 1
	[0123.212] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0123.212] WriteFile (in: hFile=0x32c, lpBuffer=0x12462c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12462c00*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0123.213] CloseHandle (hObject=0x32c) returned 1
	[0123.214] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network" (normalized: "c:\\programdata\\microsoft\\network"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.214] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network" (normalized: "c:\\programdata\\microsoft\\network"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.214] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.214] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd9b5b52, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.214] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0123.214] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1
	[0123.214] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.214] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.215] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\network\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.215] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\network\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.215] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\network\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0123.215] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0123.215] WriteFile (in: hFile=0x32c, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0123.216] CloseHandle (hObject=0x32c) returned 1
	[0123.217] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections" (normalized: "c:\\programdata\\microsoft\\network\\connections"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.217] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections" (normalized: "c:\\programdata\\microsoft\\network\\connections"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.217] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd9b5b52, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xa68726b4, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.217] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.217] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.217] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\network\\connections\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.217] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\network\\connections\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.217] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\network\\connections\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0123.221] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0123.221] WriteFile (in: hFile=0x32c, lpBuffer=0x125db300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x125db300*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0123.222] CloseHandle (hObject=0x32c) returned 1
	[0123.222] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader" (normalized: "c:\\programdata\\microsoft\\network\\downloader"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0123.223] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader" (normalized: "c:\\programdata\\microsoft\\network\\downloader"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0123.223] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0123.223] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd9b5b52, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x7606ea15, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0123.223] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr0.dat", cAlternateFileName="")) returned 1
	[0123.223] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr1.dat", cAlternateFileName="")) returned 1
	[0123.223] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0123.223] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0123.223] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0123.223] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0123.223] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0123.224] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0123.224] WriteFile (in: hFile=0x32c, lpBuffer=0x125dc600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x125dc600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0123.225] CloseHandle (hObject=0x32c) returned 1
	[0123.225] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1
	[0123.225] SetEvent (hEvent=0x2e8) returned 1
	[0123.225] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr1.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xdd404870, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1
	[0123.225] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0123.226] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0123.226] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7606ea15, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x7606ea15, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0xe0118910, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x400000)) returned 1
	[0123.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732580 | out: pbBuffer=0x12732580) returned 1
	[0123.226] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251f1f0 | out: pbBuffer=0x1251f1f0) returned 1
	[0123.226] ReadFile (in: hFile=0x32c, lpBuffer=0x127ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0123.943] GetFileType (hFile=0x32c) returned 0x1
	[0123.943] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.943] WriteFile (in: hFile=0x32c, lpBuffer=0x128d8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x128d8000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0123.944] GetFileType (hFile=0x32c) returned 0x1
	[0123.944] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0123.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0123.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d81 | out: pbBuffer=0x127e8d81) returned 1
	[0123.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e81 | out: pbBuffer=0x127e8e81) returned 1
	[0123.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788440 | out: pbBuffer=0x12788440) returned 1
	[0123.944] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x328
	[0123.944] GetConsoleMode (in: hConsoleHandle=0x328, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0123.944] WriteFile (in: hFile=0x328, lpBuffer=0x12786000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12786000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0123.947] CloseHandle (hObject=0x328) returned 1
	[0123.947] CloseHandle (hObject=0x32c) returned 1
	[0123.947] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr0.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr0.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0123.948] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x17960)) returned 1
	[0124.223] SetEvent (hEvent=0x2e8) returned 1
	[0124.224] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f53ca00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x9f53ca00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2ced60)) returned 1
	[0124.236] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.239] SetEvent (hEvent=0x318) returned 1
	[0124.239] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xaa381000, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xaa381000, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360)) returned 1
	[0124.252] SetEvent (hEvent=0x70) returned 1
	[0124.252] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x7b60)) returned 1
	[0124.261] SetEvent (hEvent=0x2e8) returned 1
	[0124.261] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7337cc00, ftCreationTime.dwHighDateTime=0x1cacf6a, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7337cc00, ftLastWriteTime.dwHighDateTime=0x1cacf6a, nFileSizeHigh=0x0, nFileSizeLow=0x3fb60)) returned 1
	[0124.275] SetEvent (hEvent=0xa0) returned 1
	[0124.275] SetEvent (hEvent=0x2e4) returned 1
	[0124.275] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef4d890, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x37560)) returned 1
	[0124.288] SetEvent (hEvent=0x70) returned 1
	[0124.288] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab87a00, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1ab87a00, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0xa6560)) returned 1
	[0124.302] SetEvent (hEvent=0x2e8) returned 1
	[0124.302] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1be9a700, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeef739f0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1be9a700, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x2b60)) returned 1
	[0124.308] SetEvent (hEvent=0x2e4) returned 1
	[0124.308] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0xcd60)) returned 1
	[0124.313] SetEvent (hEvent=0x70) returned 1
	[0124.313] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cef6000, ftCreationTime.dwHighDateTime=0x1cac803, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x7cef6000, ftLastWriteTime.dwHighDateTime=0x1cac803, nFileSizeHigh=0x0, nFileSizeLow=0x45f60)) returned 1
	[0124.316] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa3b09500, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xa3b09500, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a360)) returned 1
	[0124.323] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.457] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.478] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.479] SetEvent (hEvent=0x70) returned 1
	[0124.479] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.648] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.661] SetEvent (hEvent=0x80) returned 1
	[0124.661] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.663] SetEvent (hEvent=0x80) returned 1
	[0124.663] SetEvent (hEvent=0x68) returned 1
	[0124.663] SwitchToThread () returned 1
	[0124.663] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.671] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.692] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.708] SetEvent (hEvent=0x68) returned 1
	[0124.708] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.708] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.708] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x302da400, ftCreationTime.dwHighDateTime=0x1caca12, ftLastAccessTime.dwLowDateTime=0xeee1cd90, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x302da400, ftLastWriteTime.dwHighDateTime=0x1caca12, nFileSizeHigh=0x0, nFileSizeLow=0x47d60)) returned 1
	[0124.708] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0124.708] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0124.709] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.720] GetFileType (hFile=0x33c) returned 0x1
	[0124.720] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.720] WriteFile (in: hFile=0x33c, lpBuffer=0x1257a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1257a000*, lpNumberOfBytesWritten=0x124f5d00*=0x20000, lpOverlapped=0x124f5d0c) returned 1
	[0124.721] GetFileType (hFile=0x33c) returned 0x1
	[0124.721] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0124.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0124.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0124.721] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0124.722] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.722] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.722] WriteFile (in: hFile=0x338, lpBuffer=0x127dc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x127dc000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.733] CloseHandle (hObject=0x338) returned 1
	[0124.734] CloseHandle (hObject=0x33c) returned 1
	[0124.734] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.735] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60)) returned 1
	[0124.735] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25bbdc00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeeeb5310, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x25bbdc00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x2b2560)) returned 1
	[0124.735] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.736] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0124.736] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x248aaf00, ftCreationTime.dwHighDateTime=0x1caca0b, ftLastAccessTime.dwLowDateTime=0xeee42ef0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x248aaf00, ftLastWriteTime.dwHighDateTime=0x1caca0b, nFileSizeHigh=0x0, nFileSizeLow=0x16f60)) returned 1
	[0124.736] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e300 | out: pbBuffer=0x1252e300) returned 1
	[0124.736] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0124.736] ReadFile (in: hFile=0x33c, lpBuffer=0x125da000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125da000*, lpNumberOfBytesRead=0x124f5d1c*=0x16f60, lpOverlapped=0x0) returned 1
	[0124.745] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.755] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.756] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.757] SetEvent (hEvent=0x2e4) returned 1
	[0124.757] SetEvent (hEvent=0x70) returned 1
	[0124.757] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.758] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.758] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3564d600, ftCreationTime.dwHighDateTime=0x1cac7fb, ftLastAccessTime.dwLowDateTime=0xeef27730, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x3564d600, ftLastWriteTime.dwHighDateTime=0x1cac7fb, nFileSizeHigh=0x0, nFileSizeLow=0xb360)) returned 1
	[0124.758] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0124.758] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0124.758] ReadFile (in: hFile=0x340, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x126ebd1c*=0xb360, lpOverlapped=0x0) returned 1
	[0124.786] GetFileType (hFile=0x340) returned 0x1
	[0124.786] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.786] WriteFile (in: hFile=0x340, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0xb360, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x126ebd00*=0xb360, lpOverlapped=0x126ebd0c) returned 1
	[0124.787] GetFileType (hFile=0x340) returned 0x1
	[0124.787] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xb360, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0124.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0124.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0124.788] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0124.788] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0124.788] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0124.788] WriteFile (in: hFile=0x338, lpBuffer=0x12740000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12740000*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.788] CloseHandle (hObject=0x338) returned 1
	[0124.789] CloseHandle (hObject=0x340) returned 1
	[0124.789] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.791] GetFileType (hFile=0x32c) returned 0x1
	[0124.791] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.791] WriteFile (in: hFile=0x32c, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0124.792] GetFileType (hFile=0x32c) returned 0x1
	[0124.792] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.792] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0124.793] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0124.793] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0124.793] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104e0 | out: pbBuffer=0x124104e0) returned 1
	[0124.793] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.793] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.793] WriteFile (in: hFile=0x340, lpBuffer=0x12740500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12740500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.836] CloseHandle (hObject=0x340) returned 1
	[0124.837] CloseHandle (hObject=0x32c) returned 1
	[0124.837] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.838] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.838] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.838] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4a9400, ftCreationTime.dwHighDateTime=0x1cac804, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x1a4a9400, ftLastWriteTime.dwHighDateTime=0x1cac804, nFileSizeHigh=0x0, nFileSizeLow=0xd160)) returned 1
	[0124.838] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e520 | out: pbBuffer=0x1252e520) returned 1
	[0124.838] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104f8 | out: pbBuffer=0x124104f8) returned 1
	[0124.838] ReadFile (in: hFile=0x32c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f3d1c*=0xd160, lpOverlapped=0x0) returned 1
	[0124.852] GetFileType (hFile=0x32c) returned 0x1
	[0124.852] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.852] WriteFile (in: hFile=0x32c, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0xd160, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x124f3d00*=0xd160, lpOverlapped=0x124f3d0c) returned 1
	[0124.852] GetFileType (hFile=0x32c) returned 0x1
	[0124.852] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0xd160, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.852] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0124.853] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0124.853] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0124.853] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e770 | out: pbBuffer=0x1251e770) returned 1
	[0124.853] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.853] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.853] WriteFile (in: hFile=0x340, lpBuffer=0x1245a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.853] CloseHandle (hObject=0x340) returned 1
	[0124.854] CloseHandle (hObject=0x32c) returned 1
	[0124.854] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.855] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0124.855] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.855] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x58968200, ftCreationTime.dwHighDateTime=0x1cac809, ftLastAccessTime.dwLowDateTime=0xef00bf70, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x58968200, ftLastWriteTime.dwHighDateTime=0x1cac809, nFileSizeHigh=0x0, nFileSizeLow=0x1a560)) returned 1
	[0124.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f400 | out: pbBuffer=0x1240f400) returned 1
	[0124.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e7b8 | out: pbBuffer=0x1251e7b8) returned 1
	[0124.855] ReadFile (in: hFile=0x32c, lpBuffer=0x128e6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e6000*, lpNumberOfBytesRead=0x124f3d1c*=0x1a560, lpOverlapped=0x0) returned 1
	[0124.867] GetFileType (hFile=0x32c) returned 0x1
	[0124.867] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.867] WriteFile (in: hFile=0x32c, lpBuffer=0x12926000*, nNumberOfBytesToWrite=0x1a560, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12926000*, lpNumberOfBytesWritten=0x124f3d00*=0x1a560, lpOverlapped=0x124f3d0c) returned 1
	[0124.868] GetFileType (hFile=0x32c) returned 0x1
	[0124.868] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x1a560, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0124.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0124.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0124.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744280 | out: pbBuffer=0x12744280) returned 1
	[0124.869] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0124.869] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0124.869] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.869] CloseHandle (hObject=0x340) returned 1
	[0124.869] CloseHandle (hObject=0x32c) returned 1
	[0124.869] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.870] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.882] SetEvent (hEvent=0x318) returned 1
	[0124.882] GetFileType (hFile=0x2fc) returned 0x1
	[0124.883] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.883] WriteFile (in: hFile=0x2fc, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x126e5d00*=0x2d60, lpOverlapped=0x126e5d0c) returned 1
	[0124.883] GetFileType (hFile=0x2fc) returned 0x1
	[0124.884] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x2d60, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0124.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0124.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0124.884] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0124.885] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0124.885] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.885] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.885] CloseHandle (hObject=0x2cc) returned 1
	[0124.885] CloseHandle (hObject=0x2fc) returned 1
	[0124.886] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.887] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.887] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.887] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2720b500, ftCreationTime.dwHighDateTime=0x1cac80f, ftLastAccessTime.dwLowDateTime=0xef0320d0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x2720b500, ftLastWriteTime.dwHighDateTime=0x1cac80f, nFileSizeHigh=0x0, nFileSizeLow=0x57f60)) returned 1
	[0124.887] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c240 | out: pbBuffer=0x1244c240) returned 1
	[0124.887] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440d8 | out: pbBuffer=0x127440d8) returned 1
	[0124.887] ReadFile (in: hFile=0x2fc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.913] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.932] SetEvent (hEvent=0x68) returned 1
	[0124.932] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0124.945] SetEvent (hEvent=0x318) returned 1
	[0124.946] SetEvent (hEvent=0x70) returned 1
	[0124.946] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0124.952] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0124.957] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0124.957] SetEvent (hEvent=0x68) returned 1
	[0124.957] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0124.958] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0124.958] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0124.959] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0124.959] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0124.959] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0124.959] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.959] WriteFile (in: hFile=0x33c, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0124.973] CloseHandle (hObject=0x33c) returned 1
	[0124.974] CloseHandle (hObject=0x2fc) returned 1
	[0124.974] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0124.975] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760)) returned 1
	[0124.975] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd7e38000, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xd7e38000, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x3960)) returned 1
	[0124.975] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0124.975] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0124.975] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x61df1900, ftCreationTime.dwHighDateTime=0x1cac820, ftLastAccessTime.dwLowDateTime=0xef116910, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0x61df1900, ftLastWriteTime.dwHighDateTime=0x1cac820, nFileSizeHigh=0x0, nFileSizeLow=0x126760)) returned 1
	[0124.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ed80 | out: pbBuffer=0x1240ed80) returned 1
	[0124.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0124.975] ReadFile (in: hFile=0x2fc, lpBuffer=0x127ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesRead=0x126e5d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0124.998] GetFileType (hFile=0x2fc) returned 0x1
	[0124.998] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.998] WriteFile (in: hFile=0x2fc, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x126e5d00*=0x20000, lpOverlapped=0x126e5d0c) returned 1
	[0124.999] GetFileType (hFile=0x2fc) returned 0x1
	[0124.999] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0124.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0124.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0124.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0124.999] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e710 | out: pbBuffer=0x1251e710) returned 1
	[0124.999] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.000] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0125.000] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a500*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.024] CloseHandle (hObject=0x2cc) returned 1
	[0125.024] CloseHandle (hObject=0x2fc) returned 1
	[0125.024] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), lpNewFileName="C:\\ProgramData\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.025] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.031] SetEvent (hEvent=0x68) returned 1
	[0125.031] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.031] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0125.031] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), fInfoLevelId=0x0, lpFileInformation=0x126ebad0 | out: lpFileInformation=0x126ebad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9de525d0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x9de525d0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x2caa5f40, ftLastWriteTime.dwHighDateTime=0x1d4d597, nFileSizeHigh=0x0, nFileSizeLow=0x40270)) returned 1
	[0125.031] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c2c0 | out: pbBuffer=0x1244c2c0) returned 1
	[0125.031] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744108 | out: pbBuffer=0x12744108) returned 1
	[0125.031] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0125.032] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0125.032] SetEvent (hEvent=0xa0) returned 1
	[0125.032] SetEvent (hEvent=0x68) returned 1
	[0125.032] ReadFile (in: hFile=0x2fc, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126ebd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x126ebd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0125.039] GetFileType (hFile=0x2fc) returned 0x1
	[0125.039] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.039] WriteFile (in: hFile=0x2fc, lpBuffer=0x128a6000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x126ebd00, lpOverlapped=0x126ebd0c | out: lpBuffer=0x128a6000*, lpNumberOfBytesWritten=0x126ebd00*=0x20000, lpOverlapped=0x126ebd0c) returned 1
	[0125.040] GetFileType (hFile=0x2fc) returned 0x1
	[0125.040] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x126ebce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.040] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0125.040] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0125.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0125.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127441c0 | out: pbBuffer=0x127441c0) returned 1
	[0125.041] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.041] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x126ebd0c | out: lpMode=0x126ebd0c) returned 0
	[0125.041] WriteFile (in: hFile=0x2cc, lpBuffer=0x12638500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126ebd0c, lpOverlapped=0x0 | out: lpBuffer=0x12638500*, lpNumberOfBytesWritten=0x126ebd0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.051] CloseHandle (hObject=0x2cc) returned 1
	[0125.051] CloseHandle (hObject=0x2fc) returned 1
	[0125.052] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.052] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.129] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.138] SetEvent (hEvent=0x2e4) returned 1
	[0125.138] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.138] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacMetaData.dat\\*", lpFindFileData=0x126eba44 | out: lpFindFileData=0x126eba44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.138] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\programdata\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.139] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\StateData\\RacDatabase.sdf\\*", lpFindFileData=0x126e5a44 | out: lpFindFileData=0x126e5a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0125.139] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7B95.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7b95.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.139] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.139] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7B95.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7b95.tmp"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xef5e840, ftCreationTime.dwHighDateTime=0x1d62440, ftLastAccessTime.dwLowDateTime=0xef5e840, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xefaab00, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1
	[0125.139] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c020 | out: pbBuffer=0x1244c020) returned 1
	[0125.139] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744020 | out: pbBuffer=0x12744020) returned 1
	[0125.139] ReadFile (in: hFile=0x338, lpBuffer=0x12882000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12882000*, lpNumberOfBytesRead=0x124f3d1c*=0x5000, lpOverlapped=0x0) returned 1
	[0125.147] GetFileType (hFile=0x338) returned 0x1
	[0125.147] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.148] WriteFile (in: hFile=0x338, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x5000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x124f3d00*=0x5000, lpOverlapped=0x124f3d0c) returned 1
	[0125.148] GetFileType (hFile=0x338) returned 0x1
	[0125.148] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x5000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.148] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0125.148] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0125.148] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0125.149] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0125.149] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7B95.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7b95.tmp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.149] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.149] WriteFile (in: hFile=0x2cc, lpBuffer=0x12638000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12638000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.149] CloseHandle (hObject=0x2cc) returned 1
	[0125.149] CloseHandle (hObject=0x338) returned 1
	[0125.150] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7B95.tmp" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7b95.tmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\RAC\\Temp\\sql7B95.tmp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft\\rac\\temp\\sql7b95.tmp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 0
	[0125.150] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.254] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.299] SetEvent (hEvent=0x2e8) returned 1
	[0125.299] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.299] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0125.300] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), fInfoLevelId=0x0, lpFileInformation=0x126e5ad0 | out: lpFileInformation=0x126e5ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x896b9210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x896b9210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0xe8b8c220, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0125.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c280 | out: pbBuffer=0x1244c280) returned 1
	[0125.300] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441e8 | out: pbBuffer=0x127441e8) returned 1
	[0125.300] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0125.301] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.301] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0125.301] SetEvent (hEvent=0xa0) returned 1
	[0125.301] SetEvent (hEvent=0x2e8) returned 1
	[0125.302] ReadFile (in: hFile=0x2fc, lpBuffer=0x125ce000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x126e5d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ce000*, lpNumberOfBytesRead=0x126e5d1c*=0x186, lpOverlapped=0x0) returned 1
	[0125.303] GetFileType (hFile=0x2fc) returned 0x1
	[0125.304] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.304] WriteFile (in: hFile=0x2fc, lpBuffer=0x126109c0*, nNumberOfBytesToWrite=0x186, lpNumberOfBytesWritten=0x126e5d00, lpOverlapped=0x126e5d0c | out: lpBuffer=0x126109c0*, lpNumberOfBytesWritten=0x126e5d00*=0x186, lpOverlapped=0x126e5d0c) returned 1
	[0125.304] GetFileType (hFile=0x2fc) returned 0x1
	[0125.304] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x186, lpNewFilePointer=0x0, dwMoveMethod=0x126e5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.304] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0125.304] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0125.304] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0125.305] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127442a0 | out: pbBuffer=0x127442a0) returned 1
	[0125.305] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.305] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x126e5d0c | out: lpMode=0x126e5d0c) returned 0
	[0125.305] WriteFile (in: hFile=0x338, lpBuffer=0x12638a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x126e5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12638a00*, lpNumberOfBytesWritten=0x126e5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.305] CloseHandle (hObject=0x338) returned 1
	[0125.305] CloseHandle (hObject=0x2fc) returned 1
	[0125.306] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\hx.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.307] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0125.308] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0125.308] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0125.308] SetEvent (hEvent=0x2e4) returned 1
	[0125.308] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0125.310] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.311] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.311] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfa72fc10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfa72fc10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfa7a2030, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0125.311] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0125.311] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0125.311] ReadFile (in: hFile=0x2fc, lpBuffer=0x128a6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x128a6000*, lpNumberOfBytesRead=0x124f3d1c*=0x146, lpOverlapped=0x0) returned 1
	[0125.312] GetFileType (hFile=0x2fc) returned 0x1
	[0125.312] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.312] WriteFile (in: hFile=0x2fc, lpBuffer=0x1247c580*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1247c580*, lpNumberOfBytesWritten=0x124f3d00*=0x146, lpOverlapped=0x124f3d0c) returned 1
	[0125.313] GetFileType (hFile=0x2fc) returned 0x1
	[0125.313] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x146, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0125.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0125.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0125.313] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0125.313] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.314] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.314] WriteFile (in: hFile=0x338, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.314] CloseHandle (hObject=0x338) returned 1
	[0125.314] CloseHandle (hObject=0x2fc) returned 1
	[0125.314] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.331] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.332] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.332] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xfd789af0, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xfd789af0, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xfd822070, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x14c)) returned 1
	[0125.332] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0125.332] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0125.332] ReadFile (in: hFile=0x2fc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f5d1c*=0x14c, lpOverlapped=0x0) returned 1
	[0125.335] GetFileType (hFile=0x2fc) returned 0x1
	[0125.335] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.335] WriteFile (in: hFile=0x2fc, lpBuffer=0x1247c6e0*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1247c6e0*, lpNumberOfBytesWritten=0x124f5d00*=0x14c, lpOverlapped=0x124f5d0c) returned 1
	[0125.335] GetFileType (hFile=0x2fc) returned 0x1
	[0125.335] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x14c, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0125.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0125.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0125.336] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0125.336] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.336] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.336] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.337] CloseHandle (hObject=0x340) returned 1
	[0125.338] CloseHandle (hObject=0x2fc) returned 1
	[0125.338] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.353] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.355] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.355] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1262bd0c | out: lpMode=0x1262bd0c) returned 0
	[0125.355] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x1262bad0 | out: lpFileInformation=0x1262bad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x15f8e210, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x15f8e210, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1604c8f0, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1
	[0125.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0125.355] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0125.355] ReadFile (in: hFile=0x2cc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1262bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1262bd1c*=0x158, lpOverlapped=0x0) returned 1
	[0125.359] GetFileType (hFile=0x2cc) returned 0x1
	[0125.359] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1262bce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.359] WriteFile (in: hFile=0x2cc, lpBuffer=0x1247c840*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x1262bd00, lpOverlapped=0x1262bd0c | out: lpBuffer=0x1247c840*, lpNumberOfBytesWritten=0x1262bd00*=0x158, lpOverlapped=0x1262bd0c) returned 1
	[0125.359] GetFileType (hFile=0x2cc) returned 0x1
	[0125.359] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x158, lpNewFilePointer=0x0, dwMoveMethod=0x1262bce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0125.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0125.359] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0125.360] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e720 | out: pbBuffer=0x1251e720) returned 1
	[0125.360] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.360] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1262bd0c | out: lpMode=0x1262bd0c) returned 0
	[0125.360] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1262bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1262bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.360] CloseHandle (hObject=0x340) returned 1
	[0125.361] CloseHandle (hObject=0x2cc) returned 1
	[0125.361] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.377] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.379] SetEvent (hEvent=0x80) returned 1
	[0125.379] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.379] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.379] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1beeb370, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1beeb370, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1bf5d790, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1
	[0125.379] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4e0 | out: pbBuffer=0x1240f4e0) returned 1
	[0125.379] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e868 | out: pbBuffer=0x1251e868) returned 1
	[0125.379] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0125.380] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.380] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0125.380] SetEvent (hEvent=0xa0) returned 1
	[0125.380] SetEvent (hEvent=0x80) returned 1
	[0125.380] ReadFile (in: hFile=0x2cc, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x12429d1c*=0x146, lpOverlapped=0x0) returned 1
	[0125.382] GetFileType (hFile=0x2cc) returned 0x1
	[0125.382] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.382] WriteFile (in: hFile=0x2cc, lpBuffer=0x1247cb00*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1247cb00*, lpNumberOfBytesWritten=0x12429d00*=0x146, lpOverlapped=0x12429d0c) returned 1
	[0125.382] GetFileType (hFile=0x2cc) returned 0x1
	[0125.383] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x146, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9081 | out: pbBuffer=0x127e9081) returned 1
	[0125.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9181 | out: pbBuffer=0x127e9181) returned 1
	[0125.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9281 | out: pbBuffer=0x127e9281) returned 1
	[0125.383] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e940 | out: pbBuffer=0x1251e940) returned 1
	[0125.383] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.384] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.384] WriteFile (in: hFile=0x340, lpBuffer=0x125dc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.384] CloseHandle (hObject=0x340) returned 1
	[0125.385] CloseHandle (hObject=0x2cc) returned 1
	[0125.386] SwitchToThread () returned 1
	[0125.387] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.403] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.449] SetEvent (hEvent=0x318) returned 1
	[0125.449] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.449] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.449] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x13a)) returned 1
	[0125.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0125.449] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e010 | out: pbBuffer=0x1251e010) returned 1
	[0125.450] ReadFile (in: hFile=0x338, lpBuffer=0x126e0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126e0000*, lpNumberOfBytesRead=0x124f3d1c*=0x13a, lpOverlapped=0x0) returned 1
	[0125.451] GetFileType (hFile=0x338) returned 0x1
	[0125.451] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.451] WriteFile (in: hFile=0x338, lpBuffer=0x12648000*, nNumberOfBytesToWrite=0x13a, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12648000*, lpNumberOfBytesWritten=0x124f3d00*=0x13a, lpOverlapped=0x124f3d0c) returned 1
	[0125.451] GetFileType (hFile=0x338) returned 0x1
	[0125.451] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x13a, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.452] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0125.452] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0125.452] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0125.452] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e8 | out: pbBuffer=0x1251e0e8) returned 1
	[0125.452] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.452] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.452] WriteFile (in: hFile=0x340, lpBuffer=0x125dc500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc500*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.453] CloseHandle (hObject=0x340) returned 1
	[0125.453] CloseHandle (hObject=0x338) returned 1
	[0125.454] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.468] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.469] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.469] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.469] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x25328b0, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x25328b0, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x26af670, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1
	[0125.469] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e640 | out: pbBuffer=0x1240e640) returned 1
	[0125.469] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e100 | out: pbBuffer=0x1251e100) returned 1
	[0125.469] ReadFile (in: hFile=0x338, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x124f5d1c*=0x16a, lpOverlapped=0x0) returned 1
	[0125.471] GetFileType (hFile=0x338) returned 0x1
	[0125.471] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.471] WriteFile (in: hFile=0x338, lpBuffer=0x124f8000*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124f8000*, lpNumberOfBytesWritten=0x124f5d00*=0x16a, lpOverlapped=0x124f5d0c) returned 1
	[0125.471] GetFileType (hFile=0x338) returned 0x1
	[0125.471] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x16a, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0125.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0125.472] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0125.472] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e538 | out: pbBuffer=0x1251e538) returned 1
	[0125.472] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.472] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.472] WriteFile (in: hFile=0x340, lpBuffer=0x125dca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125dca00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.472] CloseHandle (hObject=0x340) returned 1
	[0125.474] CloseHandle (hObject=0x338) returned 1
	[0125.475] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.496] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.499] SetEvent (hEvent=0x68) returned 1
	[0125.499] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.499] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.499] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xef377f10, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xef377f10, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xef3ea330, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0125.499] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0125.499] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881d8 | out: pbBuffer=0x127881d8) returned 1
	[0125.499] ReadFile (in: hFile=0x338, lpBuffer=0x128a2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128a2000*, lpNumberOfBytesRead=0x124f1d1c*=0x152, lpOverlapped=0x0) returned 1
	[0125.501] GetFileType (hFile=0x338) returned 0x1
	[0125.501] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.502] WriteFile (in: hFile=0x338, lpBuffer=0x1247c840*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1247c840*, lpNumberOfBytesWritten=0x124f1d00*=0x152, lpOverlapped=0x124f1d0c) returned 1
	[0125.502] GetFileType (hFile=0x338) returned 0x1
	[0125.502] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x152, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.502] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0125.502] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0125.502] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0125.502] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788290 | out: pbBuffer=0x12788290) returned 1
	[0125.502] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.503] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0125.503] WriteFile (in: hFile=0x340, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.503] CloseHandle (hObject=0x340) returned 1
	[0125.516] SetEvent (hEvent=0xa0) returned 1
	[0125.516] CloseHandle (hObject=0x338) returned 1
	[0125.517] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.542] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.543] SetEvent (hEvent=0x68) returned 1
	[0125.543] SetEvent (hEvent=0x70) returned 1
	[0125.543] SwitchToThread () returned 1
	[0125.544] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.545] SetEvent (hEvent=0x70) returned 1
	[0125.545] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.546] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.546] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x523a6340, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0x523a6340, ftLastAccessTime.dwHighDateTime=0x1d305eb, ftLastWriteTime.dwLowDateTime=0x52738440, ftLastWriteTime.dwHighDateTime=0x1d305eb, nFileSizeHigh=0x0, nFileSizeLow=0x188)) returned 1
	[0125.546] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0125.546] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0125.546] ReadFile (in: hFile=0x2cc, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12429d1c*=0x188, lpOverlapped=0x0) returned 1
	[0125.547] GetFileType (hFile=0x2cc) returned 0x1
	[0125.547] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.547] WriteFile (in: hFile=0x2cc, lpBuffer=0x12456000*, nNumberOfBytesToWrite=0x188, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12456000*, lpNumberOfBytesWritten=0x12429d00*=0x188, lpOverlapped=0x12429d0c) returned 1
	[0125.548] GetFileType (hFile=0x2cc) returned 0x1
	[0125.548] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0125.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0125.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0125.548] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0125.549] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.549] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0125.549] WriteFile (in: hFile=0x340, lpBuffer=0x12462000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12462000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.549] CloseHandle (hObject=0x340) returned 1
	[0125.551] CloseHandle (hObject=0x2cc) returned 1
	[0125.551] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.592] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.593] SetEvent (hEvent=0x70) returned 1
	[0125.593] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.594] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.594] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0xaf766ee0, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0xaf766ee0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xaf7d9300, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1
	[0125.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c480 | out: pbBuffer=0x1244c480) returned 1
	[0125.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127441b8 | out: pbBuffer=0x127441b8) returned 1
	[0125.594] ReadFile (in: hFile=0x2fc, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0x152, lpOverlapped=0x0) returned 1
	[0125.595] GetFileType (hFile=0x2fc) returned 0x1
	[0125.595] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.595] WriteFile (in: hFile=0x2fc, lpBuffer=0x1247c6e0*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1247c6e0*, lpNumberOfBytesWritten=0x124f3d00*=0x152, lpOverlapped=0x124f3d0c) returned 1
	[0125.595] GetFileType (hFile=0x2fc) returned 0x1
	[0125.595] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x152, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.596] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0125.596] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0125.596] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0125.596] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744270 | out: pbBuffer=0x12744270) returned 1
	[0125.596] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.596] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0125.596] WriteFile (in: hFile=0x340, lpBuffer=0x12462a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12462a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.597] CloseHandle (hObject=0x340) returned 1
	[0125.598] CloseHandle (hObject=0x2fc) returned 1
	[0125.598] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.613] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.615] SetEvent (hEvent=0x70) returned 1
	[0125.615] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.615] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.615] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x1e67e130, ftCreationTime.dwHighDateTime=0x1d301bf, ftLastAccessTime.dwLowDateTime=0x1e67e130, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x1e6f0550, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1
	[0125.615] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244caa0 | out: pbBuffer=0x1244caa0) returned 1
	[0125.615] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127444e8 | out: pbBuffer=0x127444e8) returned 1
	[0125.615] ReadFile (in: hFile=0x2fc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f5d1c*=0x16a, lpOverlapped=0x0) returned 1
	[0125.617] GetFileType (hFile=0x2fc) returned 0x1
	[0125.617] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.617] WriteFile (in: hFile=0x2fc, lpBuffer=0x12898000*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12898000*, lpNumberOfBytesWritten=0x124f5d00*=0x16a, lpOverlapped=0x124f5d0c) returned 1
	[0125.617] GetFileType (hFile=0x2fc) returned 0x1
	[0125.617] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x16a, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0125.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401a81 | out: pbBuffer=0x12401a81) returned 1
	[0125.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401b81 | out: pbBuffer=0x12401b81) returned 1
	[0125.618] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401c81 | out: pbBuffer=0x12401c81) returned 1
	[0125.618] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445a0 | out: pbBuffer=0x127445a0) returned 1
	[0125.618] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0125.618] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0125.618] WriteFile (in: hFile=0x340, lpBuffer=0x12463900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12463900*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0125.618] CloseHandle (hObject=0x340) returned 1
	[0125.620] CloseHandle (hObject=0x2fc) returned 1
	[0125.620] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0125.653] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.813] SetEvent (hEvent=0x318) returned 1
	[0125.813] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.832] SetEvent (hEvent=0x70) returned 1
	[0125.832] SetEvent (hEvent=0x2e4) returned 1
	[0125.832] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.847] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.850] SetEvent (hEvent=0x70) returned 1
	[0125.850] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0125.851] SetEvent (hEvent=0x70) returned 1
	[0125.851] SetEvent (hEvent=0x318) returned 1
	[0125.851] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.851] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa938e870, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0125.851] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.851] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.852] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.852] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.852] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.853] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.853] WriteFile (in: hFile=0x338, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.854] CloseHandle (hObject=0x338) returned 1
	[0125.854] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.854] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.855] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Patch", cAlternateFileName="")) returned 1
	[0125.855] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.855] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.855] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.855] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.855] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.869] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.869] WriteFile (in: hFile=0x338, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.870] CloseHandle (hObject=0x338) returned 1
	[0125.870] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.872] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.872] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x64", cAlternateFileName="")) returned 1
	[0125.872] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.872] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.872] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.872] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.873] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.873] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0125.873] WriteFile (in: hFile=0x338, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0125.875] CloseHandle (hObject=0x338) returned 1
	[0125.875] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.875] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.875] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\*", lpFindFileData=0x124f7968 | out: lpFindFileData=0x124f7968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.875] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa989d730, ftCreationTime.dwHighDateTime=0x1d2fab4, ftLastAccessTime.dwLowDateTime=0xa989d730, ftLastAccessTime.dwHighDateTime=0x1d2fab4, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.875] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0125.875] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f79ac | out: lpFindFileData=0x124f79ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.875] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.876] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7630 | out: lpFileInformation=0x124f7630*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.876] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.876] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.876] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7840 | out: lpMode=0x124f7840) returned 0
	[0125.876] WriteFile (in: hFile=0x338, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7840, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7840*=0x1180, lpOverlapped=0x0) returned 1
	[0125.878] CloseHandle (hObject=0x338) returned 1
	[0125.878] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\programdata\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ab54b00, ftCreationTime.dwHighDateTime=0x1d1a02d, ftLastAccessTime.dwLowDateTime=0x9ab54b00, ftLastAccessTime.dwHighDateTime=0x1d1a02d, ftLastWriteTime.dwLowDateTime=0x9ab54b00, ftLastWriteTime.dwHighDateTime=0x1d1a02d, nFileSizeHigh=0x0, nFileSizeLow=0xfc93c)) returned 1
	[0125.879] SetEvent (hEvent=0x318) returned 1
	[0125.879] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.885] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.885] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.885] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb49460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.885] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0125.885] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.886] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.886] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.886] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.886] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.887] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.887] WriteFile (in: hFile=0x2fc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.889] CloseHandle (hObject=0x2fc) returned 1
	[0125.889] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.900] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.901] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.901] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcb95720, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcb95720, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.901] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0125.901] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.901] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.901] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.901] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.901] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.902] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.902] WriteFile (in: hFile=0x2cc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.906] CloseHandle (hObject=0x2cc) returned 1
	[0125.907] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.907] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.907] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.907] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb95720, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0xcbbb880, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0xcbbb880, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.907] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0125.907] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0125.907] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.908] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.908] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.908] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.908] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.921] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0125.921] WriteFile (in: hFile=0x2cc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0125.922] CloseHandle (hObject=0x2cc) returned 1
	[0125.923] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0xf36be)) returned 1
	[0125.923] SetEvent (hEvent=0x318) returned 1
	[0125.923] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc6500, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x50cc6500, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x50cc6500, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0125.924] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.925] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.925] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.925] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xecd314a0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.925] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0125.925] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
	[0125.925] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.925] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.925] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.925] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.925] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.938] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.938] WriteFile (in: hFile=0x2fc, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.940] CloseHandle (hObject=0x2fc) returned 1
	[0125.940] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd314a0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd314a0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xf08b3aa0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x28e)) returned 1
	[0125.957] SetEvent (hEvent=0x70) returned 1
	[0125.957] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecd0b340, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xecd0b340, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xd3ea4f80, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x6f428)) returned 1
	[0125.957] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.968] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.968] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.968] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.968] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0125.968] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.968] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.969] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.969] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.969] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0125.969] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0125.969] WriteFile (in: hFile=0x2fc, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f796c, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x124f796c*=0x1180, lpOverlapped=0x0) returned 1
	[0125.972] CloseHandle (hObject=0x2fc) returned 1
	[0125.972] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages"), fInfoLevelId=0x0, lpFileInformation=0x124f7b58 | out: lpFileInformation=0x124f7b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.983] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.983] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x124f7a30 | out: lpFindFileData=0x124f7a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfabe4080, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfabe4080, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0125.983] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a74 | out: lpFindFileData=0x124f7a74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.983] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.983] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f76f8 | out: lpFileInformation=0x124f76f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.984] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.984] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0125.984] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x124f7908 | out: lpMode=0x124f7908) returned 0
	[0125.984] WriteFile (in: hFile=0x338, lpBuffer=0x12619300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12619300*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0125.986] CloseHandle (hObject=0x338) returned 1
	[0125.986] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0125.987] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0125.987] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x124f79cc | out: lpFindFileData=0x124f79cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0125.987] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfabe4080, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xfac0a1e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xfac0a1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0125.987] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0125.987] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0125.987] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7a10 | out: lpFindFileData=0x124f7a10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0125.987] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0125.987] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7694 | out: lpFileInformation=0x124f7694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0125.987] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0125.988] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0125.993] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f78a4 | out: lpMode=0x124f78a4) returned 0
	[0125.994] WriteFile (in: hFile=0x2cc, lpBuffer=0x1261a600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f78a4, lpOverlapped=0x0 | out: lpBuffer=0x1261a600*, lpNumberOfBytesWritten=0x124f78a4*=0x1180, lpOverlapped=0x0) returned 1
	[0125.996] CloseHandle (hObject=0x2cc) returned 1
	[0125.996] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87bcb00, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0xa87bcb00, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0xa87bcb00, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0x588124)) returned 1
	[0125.997] SetEvent (hEvent=0x318) returned 1
	[0125.997] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f7a90 | out: lpFileInformation=0x124f7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4374a500, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x4374a500, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x4374a500, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1
	[0126.005] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0126.017] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0126.018] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x124f7a94 | out: lpFindFileData=0x124f7a94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0126.018] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1a127460, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0126.018] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0126.018] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
	[0126.018] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ad8 | out: lpFindFileData=0x124f7ad8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0126.018] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0126.018] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f775c | out: lpFileInformation=0x124f775c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0126.018] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0126.019] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\# M0rphine Help #.hta" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.029] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f796c | out: lpMode=0x124f796c) returned 0
	[0126.029] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.034] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.036] SetEvent (hEvent=0x70) returned 1
	[0126.036] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.036] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0126.036] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a127460, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a127460, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1c821ca0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x29a)) returned 1
	[0126.036] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0126.036] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0126.036] ReadFile (in: hFile=0x2cc, lpBuffer=0x127ac000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127ac000*, lpNumberOfBytesRead=0x1242bd1c*=0x29a, lpOverlapped=0x0) returned 1
	[0126.038] GetFileType (hFile=0x2cc) returned 0x1
	[0126.038] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.038] WriteFile (in: hFile=0x2cc, lpBuffer=0x12600000*, nNumberOfBytesToWrite=0x29a, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12600000*, lpNumberOfBytesWritten=0x1242bd00*=0x29a, lpOverlapped=0x1242bd0c) returned 1
	[0126.038] GetFileType (hFile=0x2cc) returned 0x1
	[0126.038] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x29a, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0126.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0126.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0126.039] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0126.039] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.039] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0126.039] WriteFile (in: hFile=0x338, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.040] CloseHandle (hObject=0x338) returned 1
	[0126.040] CloseHandle (hObject=0x2cc) returned 1
	[0126.040] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.041] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.041] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0126.041] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a0db1a0, ftCreationTime.dwHighDateTime=0x1d2e621, ftLastAccessTime.dwLowDateTime=0x1a0db1a0, ftLastAccessTime.dwHighDateTime=0x1d2e621, ftLastWriteTime.dwLowDateTime=0x1073de80, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x710a8)) returned 1
	[0126.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0126.041] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0126.041] ReadFile (in: hFile=0x2cc, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.059] GetFileType (hFile=0x2cc) returned 0x1
	[0126.059] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.059] WriteFile (in: hFile=0x2cc, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0126.060] GetFileType (hFile=0x2cc) returned 0x1
	[0126.060] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.060] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0126.060] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0126.060] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0126.061] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0126.061] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.061] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0126.061] WriteFile (in: hFile=0x338, lpBuffer=0x12612500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.068] CloseHandle (hObject=0x338) returned 1
	[0126.068] CloseHandle (hObject=0x2cc) returned 1
	[0126.068] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.069] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.070] SetEvent (hEvent=0x70) returned 1
	[0126.070] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.070] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0126.071] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e8b00, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd15e8b00, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd15e8b00, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x13babb)) returned 1
	[0126.071] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebc0 | out: pbBuffer=0x1240ebc0) returned 1
	[0126.071] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0126.071] ReadFile (in: hFile=0x2cc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.084] GetFileType (hFile=0x2cc) returned 0x1
	[0126.084] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.084] WriteFile (in: hFile=0x2cc, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0126.085] GetFileType (hFile=0x2cc) returned 0x1
	[0126.085] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.085] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0126.085] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0126.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0126.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0126.086] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.086] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0126.086] WriteFile (in: hFile=0x2fc, lpBuffer=0x12612a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12612a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.108] CloseHandle (hObject=0x2fc) returned 1
	[0126.108] CloseHandle (hObject=0x2cc) returned 1
	[0126.108] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.109] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.165] SetEvent (hEvent=0x70) returned 1
	[0126.165] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.165] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0126.165] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e)) returned 1
	[0126.165] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c4a0 | out: pbBuffer=0x1244c4a0) returned 1
	[0126.166] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744240 | out: pbBuffer=0x12744240) returned 1
	[0126.166] ReadFile (in: hFile=0x2cc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.188] GetFileType (hFile=0x2cc) returned 0x1
	[0126.188] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.188] WriteFile (in: hFile=0x2cc, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0126.189] GetFileType (hFile=0x2cc) returned 0x1
	[0126.189] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0126.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec901 | out: pbBuffer=0x124ec901) returned 1
	[0126.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca01 | out: pbBuffer=0x124eca01) returned 1
	[0126.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127442f8 | out: pbBuffer=0x127442f8) returned 1
	[0126.189] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0126.190] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0126.190] WriteFile (in: hFile=0x338, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.206] CloseHandle (hObject=0x338) returned 1
	[0126.206] CloseHandle (hObject=0x2cc) returned 1
	[0126.207] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.208] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.216] SetEvent (hEvent=0x70) returned 1
	[0126.216] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.216] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0126.216] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3c0e500, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xd3c0e500, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xd3c0e500, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x165257)) returned 1
	[0126.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c6c0 | out: pbBuffer=0x1244c6c0) returned 1
	[0126.216] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744310 | out: pbBuffer=0x12744310) returned 1
	[0126.217] ReadFile (in: hFile=0x2cc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.227] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0126.232] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.232] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0126.232] SetEvent (hEvent=0xa0) returned 1
	[0126.232] SetEvent (hEvent=0x318) returned 1
	[0126.233] GetFileType (hFile=0x2cc) returned 0x1
	[0126.233] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.233] WriteFile (in: hFile=0x2cc, lpBuffer=0x128b8000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x128b8000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0126.234] GetFileType (hFile=0x2cc) returned 0x1
	[0126.234] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.234] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd01 | out: pbBuffer=0x124ecd01) returned 1
	[0126.235] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece01 | out: pbBuffer=0x124ece01) returned 1
	[0126.235] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf01 | out: pbBuffer=0x124ecf01) returned 1
	[0126.235] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744478 | out: pbBuffer=0x12744478) returned 1
	[0126.235] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.235] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0126.235] WriteFile (in: hFile=0x2fc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.239] CloseHandle (hObject=0x2fc) returned 1
	[0126.239] CloseHandle (hObject=0x2cc) returned 1
	[0126.239] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.240] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0126.241] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0126.241] SetEvent (hEvent=0x70) returned 1
	[0126.241] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0126.252] GetFileType (hFile=0x338) returned 0x1
	[0126.252] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.252] WriteFile (in: hFile=0x338, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0126.253] GetFileType (hFile=0x338) returned 0x1
	[0126.253] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0126.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0126.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0126.253] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0126.253] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.254] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0126.254] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.254] CloseHandle (hObject=0x2cc) returned 1
	[0126.254] CloseHandle (hObject=0x338) returned 1
	[0126.254] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.255] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.265] SetEvent (hEvent=0x2e8) returned 1
	[0126.265] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.265] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0126.265] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0126.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e5c0 | out: pbBuffer=0x1240e5c0) returned 1
	[0126.266] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0e8 | out: pbBuffer=0x1251e0e8) returned 1
	[0126.266] ReadFile (in: hFile=0x2cc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.284] GetFileType (hFile=0x2cc) returned 0x1
	[0126.284] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.284] WriteFile (in: hFile=0x2cc, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0126.285] GetFileType (hFile=0x2cc) returned 0x1
	[0126.285] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0126.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0126.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0126.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e500 | out: pbBuffer=0x1251e500) returned 1
	[0126.286] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0126.286] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0126.286] WriteFile (in: hFile=0x32c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.286] CloseHandle (hObject=0x32c) returned 1
	[0126.306] CloseHandle (hObject=0x2cc) returned 1
	[0126.307] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.308] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.308] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0126.308] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a38c100, ftCreationTime.dwHighDateTime=0x1cf3dd2, ftLastAccessTime.dwLowDateTime=0x7a38c100, ftLastAccessTime.dwHighDateTime=0x1cf3dd2, ftLastWriteTime.dwLowDateTime=0x7a38c100, ftLastWriteTime.dwHighDateTime=0x1cf3dd2, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1
	[0126.308] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0126.308] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e538 | out: pbBuffer=0x1251e538) returned 1
	[0126.309] ReadFile (in: hFile=0x2cc, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.336] GetFileType (hFile=0x2cc) returned 0x1
	[0126.336] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.336] WriteFile (in: hFile=0x2cc, lpBuffer=0x126f4000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x126f4000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0126.337] GetFileType (hFile=0x2cc) returned 0x1
	[0126.337] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0126.337] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0126.338] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0126.338] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e710 | out: pbBuffer=0x1251e710) returned 1
	[0126.338] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0126.338] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0126.338] WriteFile (in: hFile=0x2fc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.338] CloseHandle (hObject=0x2fc) returned 1
	[0126.338] CloseHandle (hObject=0x2cc) returned 1
	[0126.339] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.339] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.492] SetEvent (hEvent=0x2e8) returned 1
	[0126.492] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0126.493] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0126.493] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48395900, ftCreationTime.dwHighDateTime=0x1ced4da, ftLastAccessTime.dwLowDateTime=0x48395900, ftLastAccessTime.dwHighDateTime=0x1ced4da, ftLastWriteTime.dwLowDateTime=0x48395900, ftLastWriteTime.dwHighDateTime=0x1ced4da, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1
	[0126.493] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0126.493] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e728 | out: pbBuffer=0x1251e728) returned 1
	[0126.493] ReadFile (in: hFile=0x2cc, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0126.556] GetFileType (hFile=0x2cc) returned 0x1
	[0126.556] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.556] WriteFile (in: hFile=0x2cc, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x1242bd00*=0x20000, lpOverlapped=0x1242bd0c) returned 1
	[0126.558] GetFileType (hFile=0x2cc) returned 0x1
	[0126.558] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0126.558] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0126.558] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0126.559] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0126.559] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e830 | out: pbBuffer=0x1251e830) returned 1
	[0126.559] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.559] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0126.559] WriteFile (in: hFile=0x340, lpBuffer=0x12456000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12456000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0126.560] CloseHandle (hObject=0x340) returned 1
	[0126.560] CloseHandle (hObject=0x2cc) returned 1
	[0126.560] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0126.561] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.732] SetEvent (hEvent=0x70) returned 1
	[0126.732] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.781] SetEvent (hEvent=0x2e8) returned 1
	[0126.781] SetEvent (hEvent=0x318) returned 1
	[0126.781] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.869] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0126.946] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0126.947] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0126.947] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x969a2800, ftCreationTime.dwHighDateTime=0x1ced4d9, ftLastAccessTime.dwLowDateTime=0x969a2800, ftLastAccessTime.dwHighDateTime=0x1ced4d9, ftLastWriteTime.dwLowDateTime=0x969a2800, ftLastWriteTime.dwHighDateTime=0x1ced4d9, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25)) returned 1
	[0126.947] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0126.947] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0126.947] ReadFile (in: hFile=0x340, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12429d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0127.005] GetFileType (hFile=0x340) returned 0x1
	[0127.006] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.006] WriteFile (in: hFile=0x340, lpBuffer=0x127ac000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127ac000*, lpNumberOfBytesWritten=0x12429d00*=0x20000, lpOverlapped=0x12429d0c) returned 1
	[0127.006] GetFileType (hFile=0x340) returned 0x1
	[0127.006] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0127.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0127.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0127.007] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0127.007] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0127.007] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0127.007] WriteFile (in: hFile=0x2cc, lpBuffer=0x12724000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12724000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0127.057] CloseHandle (hObject=0x2cc) returned 1
	[0127.058] CloseHandle (hObject=0x340) returned 1
	[0127.058] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0127.058] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0127.093] SetEvent (hEvent=0x2e4) returned 1
	[0127.093] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0127.093] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0127.093] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdae7f300, ftCreationTime.dwHighDateTime=0x1d28824, ftLastAccessTime.dwLowDateTime=0xdae7f300, ftLastAccessTime.dwHighDateTime=0x1d28824, ftLastWriteTime.dwLowDateTime=0xdae7f300, ftLastWriteTime.dwHighDateTime=0x1d28824, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5)) returned 1
	[0127.094] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0127.094] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0127.094] ReadFile (in: hFile=0x340, lpBuffer=0x128f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128f8000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0127.142] GetFileType (hFile=0x340) returned 0x1
	[0127.142] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.142] WriteFile (in: hFile=0x340, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0127.142] GetFileType (hFile=0x340) returned 0x1
	[0127.143] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0127.143] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0127.143] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0127.143] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0127.143] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0127.143] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0127.143] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0127.144] WriteFile (in: hFile=0x2fc, lpBuffer=0x12724500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12724500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0127.245] CloseHandle (hObject=0x2fc) returned 1
	[0127.245] CloseHandle (hObject=0x340) returned 1
	[0127.245] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0127.246] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0127.349] SetEvent (hEvent=0x2e4) returned 1
	[0127.349] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0127.350] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0127.350] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x532ebf00, ftCreationTime.dwHighDateTime=0x1cf3dd3, ftLastAccessTime.dwLowDateTime=0x532ebf00, ftLastAccessTime.dwHighDateTime=0x1cf3dd3, ftLastWriteTime.dwLowDateTime=0x532ebf00, ftLastWriteTime.dwHighDateTime=0x1cf3dd3, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520)) returned 1
	[0127.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732740 | out: pbBuffer=0x12732740) returned 1
	[0127.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788278 | out: pbBuffer=0x12788278) returned 1
	[0127.350] ReadFile (in: hFile=0x340, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x1242bd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0127.393] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0127.515] SetEvent (hEvent=0x2e4) returned 1
	[0127.515] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0127.932] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0127.984] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0128.517] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.517] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0128.517] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf93efac0, ftCreationTime.dwHighDateTime=0x1d2fc27, ftLastAccessTime.dwLowDateTime=0xf93efac0, ftLastAccessTime.dwHighDateTime=0x1d2fc27, ftLastWriteTime.dwLowDateTime=0x6601040, ftLastWriteTime.dwHighDateTime=0x1d2fc28, nFileSizeHigh=0x0, nFileSizeLow=0x2fe)) returned 1
	[0128.517] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0128.517] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0128.518] ReadFile (in: hFile=0x2cc, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x12429d1c*=0x2fe, lpOverlapped=0x0) returned 1
	[0128.549] GetFileType (hFile=0x2cc) returned 0x1
	[0128.549] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.550] WriteFile (in: hFile=0x2cc, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x2fe, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x12429d00*=0x2fe, lpOverlapped=0x12429d0c) returned 1
	[0128.550] GetFileType (hFile=0x2cc) returned 0x1
	[0128.550] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x2fe, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.550] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0128.550] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0128.555] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0128.555] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0128.555] SetEvent (hEvent=0xa0) returned 1
	[0128.555] SetEvent (hEvent=0x318) returned 1
	[0128.555] SetEvent (hEvent=0x68) returned 1
	[0128.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0128.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0128.557] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0128.557] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0128.557] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0128.557] WriteFile (in: hFile=0x32c, lpBuffer=0x12714000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12714000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.557] CloseHandle (hObject=0x32c) returned 1
	[0128.557] CloseHandle (hObject=0x2cc) returned 1
	[0128.557] MoveFileExW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.559] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0128.560] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0128.560] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0128.560] SetEvent (hEvent=0x2e4) returned 1
	[0128.560] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0128.565] WriteFile (in: hFile=0x340, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7908, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7908*=0x1180, lpOverlapped=0x0) returned 1
	[0128.566] CloseHandle (hObject=0x340) returned 1
	[0128.566] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), fInfoLevelId=0x0, lpFileInformation=0x124f7af4 | out: lpFileInformation=0x124f7af4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x803771e0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x77)) returned 1
	[0128.567] SetEvent (hEvent=0x318) returned 1
	[0128.567] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Templates" (normalized: "c:\\programdata\\templates"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307753b3, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307753b3, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307753b3, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.568] CreateFileW (lpFileName="C:\\ProgramData\\Templates" (normalized: "c:\\programdata\\templates"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x340
	[0128.568] GetFileInformationByHandle (in: hFile=0x340, lpFileInformation=0x124f7bb0 | out: lpFileInformation=0x124f7bb0) returned 1
	[0128.568] GetFileInformationByHandleEx (in: hFile=0x340, FileInformationClass=0x9, lpFileInformation=0x124f7ba8, dwBufferSize=0x8 | out: lpFileInformation=0x124f7ba8) returned 1
	[0128.568] CloseHandle (hObject=0x340) returned 1
	[0128.568] GetFileAttributesExW (in: lpFileName="C:\\Recovery" (normalized: "c:\\recovery"), fInfoLevelId=0x0, lpFileInformation=0x124f7c84 | out: lpFileInformation=0x124f7c84*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.574] CreateFileW (lpFileName="C:\\Recovery" (normalized: "c:\\recovery"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.574] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x124f7b5c | out: lpFindFileData=0x124f7b5c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.574] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.574] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9e23962-4a25-11e7-88e8-91fb2ec43f0b", cAlternateFileName="E9E239~1")) returned 1
	[0128.574] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7ba0 | out: lpFindFileData=0x124f7ba0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.575] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.575] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\# M0rphine Help #.hta" (normalized: "c:\\recovery\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7824 | out: lpFileInformation=0x124f7824*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.575] CreateFileW (lpFileName="C:\\Recovery\\# M0rphine Help #.hta" (normalized: "c:\\recovery\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.575] CreateFileW (lpFileName="C:\\Recovery\\# M0rphine Help #.hta" (normalized: "c:\\recovery\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0128.575] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f7a34 | out: lpMode=0x124f7a34) returned 0
	[0128.575] WriteFile (in: hFile=0x32c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7a34, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7a34*=0x1180, lpOverlapped=0x0) returned 1
	[0128.577] CloseHandle (hObject=0x32c) returned 1
	[0128.577] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b"), fInfoLevelId=0x0, lpFileInformation=0x124f7c20 | out: lpFileInformation=0x124f7c20*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0128.577] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.577] FindFirstFileW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\*", lpFindFileData=0x124f7af8 | out: lpFindFileData=0x124f7af8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0128.577] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27c2fae0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0128.577] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000, dwReserved0=0x0, dwReserved1=0x0, cFileName="boot.sdi", cAlternateFileName="")) returned 1
	[0128.577] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012, dwReserved0=0x0, dwReserved1=0x0, cFileName="Winre.wim", cAlternateFileName="")) returned 1
	[0128.578] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7b3c | out: lpFindFileData=0x124f7b3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0128.578] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0128.578] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\# M0rphine Help #.hta" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f77c0 | out: lpFileInformation=0x124f77c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0128.578] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\# M0rphine Help #.hta" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0128.578] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\# M0rphine Help #.hta" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0128.578] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f79d0 | out: lpMode=0x124f79d0) returned 0
	[0128.578] WriteFile (in: hFile=0x32c, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f79d0, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f79d0*=0x1180, lpOverlapped=0x0) returned 1
	[0128.580] CloseHandle (hObject=0x32c) returned 1
	[0128.580] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012)) returned 1
	[0128.583] SetEvent (hEvent=0x70) returned 1
	[0128.583] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), fInfoLevelId=0x0, lpFileInformation=0x124f7bbc | out: lpFileInformation=0x124f7bbc*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x27c2fae0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27c2fae0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x4185decd, ftLastWriteTime.dwHighDateTime=0x1c9ea0f, nFileSizeHigh=0x0, nFileSizeLow=0x306000)) returned 1
	[0128.583] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0128.583] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0128.583] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), fInfoLevelId=0x0, lpFileInformation=0x12629ad0 | out: lpFileInformation=0x12629ad0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0x6496a3c6, ftCreationTime.dwHighDateTime=0x1cbf8ea, ftLastAccessTime.dwLowDateTime=0x64b0e1b9, ftLastAccessTime.dwHighDateTime=0x1cbf8ea, ftLastWriteTime.dwLowDateTime=0xfa6eb761, ftLastWriteTime.dwHighDateTime=0x1cb88d1, nFileSizeHigh=0x0, nFileSizeLow=0xa160012)) returned 1
	[0128.583] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e4e0 | out: pbBuffer=0x1240e4e0) returned 1
	[0128.583] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0d8 | out: pbBuffer=0x1251e0d8) returned 1
	[0128.584] ReadFile (in: hFile=0x32c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12629d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12629d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0128.790] GetFileType (hFile=0x32c) returned 0x1
	[0128.790] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.790] WriteFile (in: hFile=0x32c, lpBuffer=0x12918000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12629d00, lpOverlapped=0x12629d0c | out: lpBuffer=0x12918000*, lpNumberOfBytesWritten=0x12629d00*=0x20000, lpOverlapped=0x12629d0c) returned 1
	[0128.791] GetFileType (hFile=0x32c) returned 0x1
	[0128.791] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.791] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0128.791] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0128.791] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0128.791] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5f0 | out: pbBuffer=0x1251e5f0) returned 1
	[0128.791] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0128.792] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0128.792] WriteFile (in: hFile=0x2fc, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12629d0c, lpOverlapped=0x0 | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x12629d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.807] CloseHandle (hObject=0x2fc) returned 1
	[0128.814] CloseHandle (hObject=0x32c) returned 1
	[0128.815] MoveFileExW (lpExistingFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), lpNewFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.821] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0128.827] SetEvent (hEvent=0x70) returned 1
	[0128.827] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0128.849] SetEvent (hEvent=0x318) returned 1
	[0128.849] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0128.851] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0128.855] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0128.855] SetEvent (hEvent=0x70) returned 1
	[0128.855] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0128.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0128.873] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0128.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst"), fInfoLevelId=0x0, lpFileInformation=0x12629ad0 | out: lpFileInformation=0x12629ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce60f420, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce60f420, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xce719dc0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x49c)) returned 1
	[0128.873] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0128.873] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0128.874] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12629d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12629d1c*=0x49c, lpOverlapped=0x0) returned 1
	[0128.881] GetFileType (hFile=0x33c) returned 0x1
	[0128.881] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.881] WriteFile (in: hFile=0x33c, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x49c, lpNumberOfBytesWritten=0x12629d00, lpOverlapped=0x12629d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x12629d00*=0x49c, lpOverlapped=0x12629d0c) returned 1
	[0128.881] GetFileType (hFile=0x33c) returned 0x1
	[0128.881] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x49c, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.881] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0128.882] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0128.882] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0128.882] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0128.882] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0128.882] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0128.882] WriteFile (in: hFile=0x338, lpBuffer=0x12632500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12629d0c, lpOverlapped=0x0 | out: lpBuffer=0x12632500*, lpNumberOfBytesWritten=0x12629d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.882] CloseHandle (hObject=0x338) returned 1
	[0128.882] CloseHandle (hObject=0x33c) returned 1
	[0128.883] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\adobe\\color\\acecache11.lst.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\application data"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0128.898] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Application Data\\*", lpFindFileData=0x124f3a44 | out: lpFindFileData=0x124f3a44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0128.898] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0128.925] SetEvent (hEvent=0x80) returned 1
	[0128.925] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x338
	[0128.925] GetConsoleMode (in: hConsoleHandle=0x338, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0128.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x12629ad0 | out: lpFileInformation=0x12629ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a295a80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x113f58)) returned 1
	[0128.925] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0128.925] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0128.925] ReadFile (in: hFile=0x338, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12629d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x12629d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0128.936] GetFileType (hFile=0x338) returned 0x1
	[0128.936] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.936] WriteFile (in: hFile=0x338, lpBuffer=0x12576000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x12629d00, lpOverlapped=0x12629d0c | out: lpBuffer=0x12576000*, lpNumberOfBytesWritten=0x12629d00*=0x20000, lpOverlapped=0x12629d0c) returned 1
	[0128.940] GetFileType (hFile=0x338) returned 0x1
	[0128.940] SetFilePointerEx (in: hFile=0x338, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x12629ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0128.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0128.940] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0128.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0128.941] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.941] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12629d0c | out: lpMode=0x12629d0c) returned 0
	[0128.941] WriteFile (in: hFile=0x2cc, lpBuffer=0x127ce500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12629d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ce500*, lpNumberOfBytesWritten=0x12629d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.949] CloseHandle (hObject=0x2cc) returned 1
	[0128.949] CloseHandle (hObject=0x338) returned 1
	[0128.949] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\GoogleUpdateSetup.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\clic...exe_baa8013a79450f71_0001.0003_none_855491bb37a51715\\googleupdatesetup.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.950] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0128.956] SetEvent (hEvent=0x80) returned 1
	[0128.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.957] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3bb970e0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x1141ce)) returned 1
	[0128.957] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c540 | out: pbBuffer=0x1244c540) returned 1
	[0128.957] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744378 | out: pbBuffer=0x12744378) returned 1
	[0128.957] ReadFile (in: hFile=0x2cc, lpBuffer=0x125d6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x125d6000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0128.966] GetFileType (hFile=0x2cc) returned 0x1
	[0128.966] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.966] WriteFile (in: hFile=0x2cc, lpBuffer=0x12878000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12878000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0128.967] GetFileType (hFile=0x2cc) returned 0x1
	[0128.967] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.967] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0128.967] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0128.967] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0128.967] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444d0 | out: pbBuffer=0x127444d0) returned 1
	[0128.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0128.968] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.968] WriteFile (in: hFile=0x33c, lpBuffer=0x127cea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127cea00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.968] CloseHandle (hObject=0x33c) returned 1
	[0128.968] CloseHandle (hObject=0x2cc) returned 1
	[0128.968] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\GoogleUpdateSetup.exe.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\googleupdatesetup.exe.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0128.969] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.969] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a37a2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a37a2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6a37a2c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x354b)) returned 1
	[0128.969] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c7e0 | out: pbBuffer=0x1244c7e0) returned 1
	[0128.969] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744508 | out: pbBuffer=0x12744508) returned 1
	[0128.969] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0128.971] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0128.971] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0128.971] SetEvent (hEvent=0xa0) returned 1
	[0128.971] SetEvent (hEvent=0x318) returned 1
	[0128.971] ReadFile (in: hFile=0x2cc, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f3d1c*=0x354b, lpOverlapped=0x0) returned 1
	[0128.974] GetFileType (hFile=0x2cc) returned 0x1
	[0128.975] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.975] WriteFile (in: hFile=0x2cc, lpBuffer=0x128d8000*, nNumberOfBytesToWrite=0x354b, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x128d8000*, lpNumberOfBytesWritten=0x124f3d00*=0x354b, lpOverlapped=0x124f3d0c) returned 1
	[0128.975] GetFileType (hFile=0x2cc) returned 0x1
	[0128.975] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x354b, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0128.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0128.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0128.975] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0128.976] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e538 | out: pbBuffer=0x1251e538) returned 1
	[0128.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0128.976] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0128.976] WriteFile (in: hFile=0x340, lpBuffer=0x12632a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12632a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0128.976] CloseHandle (hObject=0x340) returned 1
	[0128.976] CloseHandle (hObject=0x2cc) returned 1
	[0128.983] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Apps\\2.0\\DQQ19BCJ.JAX\\YVORLGOR.PNT\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\apps\\2.0\\dqq19bcj.jax\\yvorlgor.pnt\\goog...app_baa8013a79450f71_0001.0003_290679d077f4cfec\\clickonce_bootstrap.exe.manifest.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0128.984] SetEvent (hEvent=0x70) returned 1
	[0128.985] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.047] SetEvent (hEvent=0x68) returned 1
	[0130.047] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.092] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.111] SetEvent (hEvent=0x2e8) returned 1
	[0130.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2fc
	[0130.112] GetConsoleMode (in: hConsoleHandle=0x2fc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x864c72b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x864c72b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86833250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1
	[0130.112] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0130.112] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0130.112] ReadFile (in: hFile=0x2fc, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0xf6, lpOverlapped=0x0) returned 1
	[0130.113] GetFileType (hFile=0x2fc) returned 0x1
	[0130.113] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.114] WriteFile (in: hFile=0x2fc, lpBuffer=0x127e0000*, nNumberOfBytesToWrite=0xf6, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127e0000*, lpNumberOfBytesWritten=0x124f3d00*=0xf6, lpOverlapped=0x124f3d0c) returned 1
	[0130.114] GetFileType (hFile=0x2fc) returned 0x1
	[0130.114] SetFilePointerEx (in: hFile=0x2fc, liDistanceToMove=0xf6, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0130.114] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0130.114] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0130.114] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0130.115] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0130.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0130.115] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0130.115] WriteFile (in: hFile=0x32c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0130.115] CloseHandle (hObject=0x32c) returned 1
	[0130.115] CloseHandle (hObject=0x2fc) returned 1
	[0130.115] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0130.116] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.134] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.155] SetEvent (hEvent=0x2e8) returned 1
	[0130.155] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.162] SetEvent (hEvent=0x2e4) returned 1
	[0130.162] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.276] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.299] SetEvent (hEvent=0x2e8) returned 1
	[0130.299] SetEvent (hEvent=0x68) returned 1
	[0130.300] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.442] SetEvent (hEvent=0x70) returned 1
	[0130.442] SetEvent (hEvent=0x318) returned 1
	[0130.442] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.567] SetEvent (hEvent=0x70) returned 1
	[0130.567] SetEvent (hEvent=0x2e8) returned 1
	[0130.567] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.595] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.677] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86702750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86702750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xfe051a00, ftLastWriteTime.dwHighDateTime=0x1d03f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1
	[0130.678] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.683] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0130.806] SetEvent (hEvent=0x2e8) returned 1
	[0130.806] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0135.967] SetEvent (hEvent=0x2e8) returned 1
	[0135.968] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.400] SetEvent (hEvent=0x70) returned 1
	[0136.400] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.470] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828a0bb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828a0bb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0x32a)) returned 1
	[0136.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0136.471] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0136.471] ReadFile (in: hFile=0x33c, lpBuffer=0x12918000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12918000*, lpNumberOfBytesRead=0x124f5d1c*=0x32a, lpOverlapped=0x0) returned 1
	[0136.497] GetFileType (hFile=0x33c) returned 0x1
	[0136.497] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.497] WriteFile (in: hFile=0x33c, lpBuffer=0x12600000*, nNumberOfBytesToWrite=0x32a, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12600000*, lpNumberOfBytesWritten=0x124f5d00*=0x32a, lpOverlapped=0x124f5d0c) returned 1
	[0136.498] GetFileType (hFile=0x33c) returned 0x1
	[0136.498] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x32a, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.498] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0136.498] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8501 | out: pbBuffer=0x127e8501) returned 1
	[0136.498] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0136.498] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0136.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0136.499] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.499] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.499] CloseHandle (hObject=0x2cc) returned 1
	[0136.499] CloseHandle (hObject=0x33c) returned 1
	[0136.499] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\html\\craw_window.html.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.501] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828af610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x82aab310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aab310, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1109)) returned 1
	[0136.501] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0136.501] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104e8 | out: pbBuffer=0x124104e8) returned 1
	[0136.501] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12429d1c*=0x1109, lpOverlapped=0x0) returned 1
	[0136.512] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.548] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\craw_window.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.551] GetFileType (hFile=0x32c) returned 0x1
	[0136.551] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.552] WriteFile (in: hFile=0x32c, lpBuffer=0x12746000*, nNumberOfBytesToWrite=0x112dc, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12746000*, lpNumberOfBytesWritten=0x1242bd00*=0x112dc, lpOverlapped=0x1242bd0c) returned 1
	[0136.552] GetFileType (hFile=0x32c) returned 0x1
	[0136.552] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x112dc, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0136.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0136.553] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0136.553] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e8 | out: pbBuffer=0x1251e0e8) returned 1
	[0136.553] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.553] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.553] WriteFile (in: hFile=0x34c, lpBuffer=0x125e4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.553] CloseHandle (hObject=0x34c) returned 1
	[0136.553] CloseHandle (hObject=0x32c) returned 1
	[0136.554] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\flapper.gif.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.555] GetFileType (hFile=0x33c) returned 0x1
	[0136.555] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.555] WriteFile (in: hFile=0x33c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1109, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x12429d00*=0x1109, lpOverlapped=0x12429d0c) returned 1
	[0136.556] GetFileType (hFile=0x33c) returned 0x1
	[0136.556] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1109, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0136.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434601 | out: pbBuffer=0x12434601) returned 1
	[0136.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434701 | out: pbBuffer=0x12434701) returned 1
	[0136.556] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0136.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.557] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.557] WriteFile (in: hFile=0x32c, lpBuffer=0x125e4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.557] CloseHandle (hObject=0x32c) returned 1
	[0136.557] CloseHandle (hObject=0x33c) returned 1
	[0136.557] SwitchToThread () returned 1
	[0136.558] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\icon_128.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_close.png"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828cf1e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d18f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xfc)) returned 1
	[0136.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d6710, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d6710, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1
	[0136.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_maximize.png"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828d8e20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828d8e20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa6)) returned 1
	[0136.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1
	[0136.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826545a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e2a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aa3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1
	[0136.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.561] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x828ddc40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828ddc40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xe7591500, ftLastWriteTime.dwHighDateTime=0x1ce931e, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1
	[0136.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c900 | out: pbBuffer=0x1244c900) returned 1
	[0136.562] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0136.562] ReadFile (in: hFile=0x33c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x12429d1c*=0xa0, lpOverlapped=0x0) returned 1
	[0136.563] GetFileType (hFile=0x33c) returned 0x1
	[0136.563] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.563] WriteFile (in: hFile=0x33c, lpBuffer=0x1249a5a0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1249a5a0*, lpNumberOfBytesWritten=0x12429d00*=0xa0, lpOverlapped=0x12429d0c) returned 1
	[0136.564] GetFileType (hFile=0x33c) returned 0x1
	[0136.564] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xa0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.564] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434801 | out: pbBuffer=0x12434801) returned 1
	[0136.564] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434901 | out: pbBuffer=0x12434901) returned 1
	[0136.564] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0136.564] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e720 | out: pbBuffer=0x1251e720) returned 1
	[0136.564] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.565] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.565] WriteFile (in: hFile=0x32c, lpBuffer=0x125e4f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e4f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.565] CloseHandle (hObject=0x32c) returned 1
	[0136.565] CloseHandle (hObject=0x33c) returned 1
	[0136.565] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\images\\topbar_floating_button_pressed.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.566] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.567] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826545a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x828e2a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82aa3de0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1
	[0136.567] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cb20 | out: pbBuffer=0x1244cb20) returned 1
	[0136.567] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e738 | out: pbBuffer=0x1251e738) returned 1
	[0136.567] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12429d1c*=0x52a, lpOverlapped=0x0) returned 1
	[0136.591] GetFileType (hFile=0x33c) returned 0x1
	[0136.591] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.591] WriteFile (in: hFile=0x33c, lpBuffer=0x12626000*, nNumberOfBytesToWrite=0x52a, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12626000*, lpNumberOfBytesWritten=0x12429d00*=0x52a, lpOverlapped=0x12429d0c) returned 1
	[0136.591] GetFileType (hFile=0x33c) returned 0x1
	[0136.591] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x52a, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.591] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0136.592] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0136.592] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d01 | out: pbBuffer=0x12434d01) returned 1
	[0136.593] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e840 | out: pbBuffer=0x1251e840) returned 1
	[0136.593] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.593] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.593] WriteFile (in: hFile=0x32c, lpBuffer=0x125e5400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e5400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.593] CloseHandle (hObject=0x32c) returned 1
	[0136.593] CloseHandle (hObject=0x33c) returned 1
	[0136.594] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\nmmhkkegccagdldgiimedpiccmgmieda\\1.0.0.2_0\\manifest.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.595] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.610] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.653] SetEvent (hEvent=0x68) returned 1
	[0136.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.654] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x124)) returned 1
	[0136.655] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cd40 | out: pbBuffer=0x1244cd40) returned 1
	[0136.655] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e868 | out: pbBuffer=0x1251e868) returned 1
	[0136.655] ReadFile (in: hFile=0x32c, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x1242bd1c*=0x124, lpOverlapped=0x0) returned 1
	[0136.656] GetFileType (hFile=0x32c) returned 0x1
	[0136.656] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.656] WriteFile (in: hFile=0x32c, lpBuffer=0x1244a8c0*, nNumberOfBytesToWrite=0x124, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1244a8c0*, lpNumberOfBytesWritten=0x1242bd00*=0x124, lpOverlapped=0x1242bd0c) returned 1
	[0136.657] GetFileType (hFile=0x32c) returned 0x1
	[0136.657] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x124, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.657] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e01 | out: pbBuffer=0x12434e01) returned 1
	[0136.657] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f01 | out: pbBuffer=0x12434f01) returned 1
	[0136.657] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435001 | out: pbBuffer=0x12435001) returned 1
	[0136.657] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ea80 | out: pbBuffer=0x1251ea80) returned 1
	[0136.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.658] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0136.658] WriteFile (in: hFile=0x33c, lpBuffer=0x125e5900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125e5900*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.658] CloseHandle (hObject=0x33c) returned 1
	[0136.658] CloseHandle (hObject=0x32c) returned 1
	[0136.658] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\bg\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.660] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.727] SetEvent (hEvent=0x68) returned 1
	[0136.727] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.734] SetEvent (hEvent=0x68) returned 1
	[0136.734] SetEvent (hEvent=0x80) returned 1
	[0136.734] SetEvent (hEvent=0x2e4) returned 1
	[0136.734] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.811] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.812] SetEvent (hEvent=0x68) returned 1
	[0136.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0136.813] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1
	[0136.813] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0136.813] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0136.813] ReadFile (in: hFile=0x32c, lpBuffer=0x12938000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12938000*, lpNumberOfBytesRead=0x124f5d1c*=0x100, lpOverlapped=0x0) returned 1
	[0136.814] GetFileType (hFile=0x32c) returned 0x1
	[0136.814] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.814] WriteFile (in: hFile=0x32c, lpBuffer=0x1263c000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1263c000*, lpNumberOfBytesWritten=0x124f5d00*=0x100, lpOverlapped=0x124f5d0c) returned 1
	[0136.814] GetFileType (hFile=0x32c) returned 0x1
	[0136.814] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.815] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0136.815] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0136.815] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0136.815] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0136.815] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.815] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0136.815] WriteFile (in: hFile=0x33c, lpBuffer=0x125ea000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ea000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.816] CloseHandle (hObject=0x33c) returned 1
	[0136.816] CloseHandle (hObject=0x32c) returned 1
	[0136.816] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\fi\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.818] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.860] SetEvent (hEvent=0x2e4) returned 1
	[0136.860] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.904] SetEvent (hEvent=0x2e4) returned 1
	[0136.904] SetEvent (hEvent=0x68) returned 1
	[0136.904] SwitchToThread () returned 1
	[0136.905] SetEvent (hEvent=0x2e4) returned 1
	[0136.905] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.928] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0136.941] SetEvent (hEvent=0x2e4) returned 1
	[0136.941] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.942] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1
	[0136.942] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0136.942] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0136.942] ReadFile (in: hFile=0x33c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f1d1c*=0x100, lpOverlapped=0x0) returned 1
	[0136.943] GetFileType (hFile=0x33c) returned 0x1
	[0136.944] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.944] WriteFile (in: hFile=0x33c, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f1d00*=0x100, lpOverlapped=0x124f1d0c) returned 1
	[0136.944] GetFileType (hFile=0x33c) returned 0x1
	[0136.944] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0136.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0136.945] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0136.945] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0136.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.945] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0136.945] WriteFile (in: hFile=0x34c, lpBuffer=0x127dc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x127dc000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.945] CloseHandle (hObject=0x34c) returned 1
	[0136.945] CloseHandle (hObject=0x33c) returned 1
	[0136.946] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\it\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.947] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.947] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12989d0c | out: lpMode=0x12989d0c) returned 0
	[0136.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12989ad0 | out: lpFileInformation=0x12989ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86aba9b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86abb180, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1
	[0136.947] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0136.947] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0136.947] ReadFile (in: hFile=0x33c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12989d1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x12989d1c*=0x10f, lpOverlapped=0x0) returned 1
	[0136.949] GetFileType (hFile=0x33c) returned 0x1
	[0136.949] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12989ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.949] WriteFile (in: hFile=0x33c, lpBuffer=0x1248ad80*, nNumberOfBytesToWrite=0x10f, lpNumberOfBytesWritten=0x12989d00, lpOverlapped=0x12989d0c | out: lpBuffer=0x1248ad80*, lpNumberOfBytesWritten=0x12989d00*=0x10f, lpOverlapped=0x12989d0c) returned 1
	[0136.950] GetFileType (hFile=0x33c) returned 0x1
	[0136.950] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x10f, lpNewFilePointer=0x0, dwMoveMethod=0x12989ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0136.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0136.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0136.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0136.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.951] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12989d0c | out: lpMode=0x12989d0c) returned 0
	[0136.951] WriteFile (in: hFile=0x34c, lpBuffer=0x127dca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12989d0c, lpOverlapped=0x0 | out: lpBuffer=0x127dca00*, lpNumberOfBytesWritten=0x12989d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.952] CloseHandle (hObject=0x34c) returned 1
	[0136.952] CloseHandle (hObject=0x33c) returned 1
	[0136.952] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ja\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0136.953] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x86a6e6f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x86a6f690, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86d1bfb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1
	[0136.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0136.953] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0136.954] ReadFile (in: hFile=0x33c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x12429d1c*=0x100, lpOverlapped=0x0) returned 1
	[0136.955] GetFileType (hFile=0x33c) returned 0x1
	[0136.955] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.955] WriteFile (in: hFile=0x33c, lpBuffer=0x12784100*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12784100*, lpNumberOfBytesWritten=0x12429d00*=0x100, lpOverlapped=0x12429d0c) returned 1
	[0136.955] GetFileType (hFile=0x33c) returned 0x1
	[0136.955] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x100, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0136.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0136.956] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0136.956] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0136.956] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0136.956] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0136.956] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0136.956] WriteFile (in: hFile=0x34c, lpBuffer=0x127dcf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x127dcf00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0136.957] CloseHandle (hObject=0x34c) returned 1
	[0136.957] CloseHandle (hObject=0x33c) returned 1
	[0136.957] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pjkljhegncpnkpknbcohdijeoejaedia\\8.1_0\\_locales\\ko\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0136.958] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.006] SetEvent (hEvent=0x2e4) returned 1
	[0137.006] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.013] SetEvent (hEvent=0x68) returned 1
	[0137.013] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.181] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.264] SetEvent (hEvent=0x2e4) returned 1
	[0137.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.265] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83406360, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83408a70, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8397f940, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4b63)) returned 1
	[0137.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0137.265] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0137.265] ReadFile (in: hFile=0x34c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f1d1c*=0x4b63, lpOverlapped=0x0) returned 1
	[0137.300] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.306] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.324] SetEvent (hEvent=0x70) returned 1
	[0137.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.325] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0137.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277fad0 | out: lpFileInformation=0x1277fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8341c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83421110, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83982050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4029)) returned 1
	[0137.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0137.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0137.325] ReadFile (in: hFile=0x32c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1277fd1c*=0x4029, lpOverlapped=0x0) returned 1
	[0137.345] GetFileType (hFile=0x32c) returned 0x1
	[0137.345] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.345] WriteFile (in: hFile=0x32c, lpBuffer=0x1278a000*, nNumberOfBytesToWrite=0x4029, lpNumberOfBytesWritten=0x1277fd00, lpOverlapped=0x1277fd0c | out: lpBuffer=0x1278a000*, lpNumberOfBytesWritten=0x1277fd00*=0x4029, lpOverlapped=0x1277fd0c) returned 1
	[0137.346] GetFileType (hFile=0x32c) returned 0x1
	[0137.346] SetFilePointerEx (in: hFile=0x32c, liDistanceToMove=0x4029, lpNewFilePointer=0x0, dwMoveMethod=0x1277fce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0137.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0137.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0137.346] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0137.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0137.346] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1277fd0c | out: lpMode=0x1277fd0c) returned 0
	[0137.346] WriteFile (in: hFile=0x344, lpBuffer=0x128f0500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277fd0c, lpOverlapped=0x0 | out: lpBuffer=0x128f0500*, lpNumberOfBytesWritten=0x1277fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.347] CloseHandle (hObject=0x344) returned 1
	[0137.347] CloseHandle (hObject=0x32c) returned 1
	[0137.347] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\cs\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.348] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.367] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.386] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.395] SetEvent (hEvent=0x70) returned 1
	[0137.395] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.398] SetEvent (hEvent=0x2e8) returned 1
	[0137.398] SetEvent (hEvent=0x80) returned 1
	[0137.398] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.407] SetEvent (hEvent=0x2e8) returned 1
	[0137.407] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.412] SetEvent (hEvent=0x2e8) returned 1
	[0137.412] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.413] SetEvent (hEvent=0x2e8) returned 1
	[0137.413] SetEvent (hEvent=0x80) returned 1
	[0137.413] GetFileType (hFile=0x33c) returned 0x1
	[0137.413] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.413] WriteFile (in: hFile=0x33c, lpBuffer=0x12462000*, nNumberOfBytesToWrite=0x3e85, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12462000*, lpNumberOfBytesWritten=0x124f1d00*=0x3e85, lpOverlapped=0x124f1d0c) returned 1
	[0137.413] GetFileType (hFile=0x33c) returned 0x1
	[0137.413] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x3e85, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.414] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0137.414] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0137.414] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0137.414] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0137.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.414] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.414] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.415] CloseHandle (hObject=0x34c) returned 1
	[0137.415] CloseHandle (hObject=0x33c) returned 1
	[0137.415] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\et\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0137.434] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83478f50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83478f50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x419f)) returned 1
	[0137.434] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0137.434] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744388 | out: pbBuffer=0x12744388) returned 1
	[0137.435] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f1d1c*=0x419f, lpOverlapped=0x0) returned 1
	[0137.473] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.556] GetFileType (hFile=0x33c) returned 0x1
	[0137.556] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.556] WriteFile (in: hFile=0x33c, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0x419f, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x124f1d00*=0x419f, lpOverlapped=0x124f1d0c) returned 1
	[0137.556] GetFileType (hFile=0x33c) returned 0x1
	[0137.557] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x419f, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.557] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0137.557] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0137.557] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0137.557] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744500 | out: pbBuffer=0x12744500) returned 1
	[0137.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.557] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.557] WriteFile (in: hFile=0x34c, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.558] CloseHandle (hObject=0x34c) returned 1
	[0137.558] CloseHandle (hObject=0x33c) returned 1
	[0137.558] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\fr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.559] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.791] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.793] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0137.793] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1277dad0 | out: lpFileInformation=0x1277dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834a7580, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834a7580, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83986e70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f0c)) returned 1
	[0137.793] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732540 | out: pbBuffer=0x12732540) returned 1
	[0137.793] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788338 | out: pbBuffer=0x12788338) returned 1
	[0137.793] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0137.793] SetEvent (hEvent=0x68) returned 1
	[0137.794] ReadFile (in: hFile=0x34c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1277dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1277dd1c*=0x3f0c, lpOverlapped=0x0) returned 1
	[0137.834] GetFileType (hFile=0x34c) returned 0x1
	[0137.834] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.834] WriteFile (in: hFile=0x34c, lpBuffer=0x125ec000*, nNumberOfBytesToWrite=0x3f0c, lpNumberOfBytesWritten=0x1277dd00, lpOverlapped=0x1277dd0c | out: lpBuffer=0x125ec000*, lpNumberOfBytesWritten=0x1277dd00*=0x3f0c, lpOverlapped=0x1277dd0c) returned 1
	[0137.834] GetFileType (hFile=0x34c) returned 0x1
	[0137.834] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x3f0c, lpNewFilePointer=0x0, dwMoveMethod=0x1277dce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.834] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0137.834] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0137.835] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0137.835] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446c0 | out: pbBuffer=0x127446c0) returned 1
	[0137.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0137.835] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1277dd0c | out: lpMode=0x1277dd0c) returned 0
	[0137.835] WriteFile (in: hFile=0x32c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1277dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1277dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.835] CloseHandle (hObject=0x32c) returned 1
	[0137.836] CloseHandle (hObject=0x34c) returned 1
	[0137.836] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\it\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.837] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0137.921] SetEvent (hEvent=0x2e8) returned 1
	[0137.921] SetEvent (hEvent=0x68) returned 1
	[0137.921] GetFileType (hFile=0x344) returned 0x1
	[0137.922] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.922] WriteFile (in: hFile=0x344, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x40d4, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x124f1d00*=0x40d4, lpOverlapped=0x124f1d0c) returned 1
	[0137.922] GetFileType (hFile=0x344) returned 0x1
	[0137.922] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x40d4, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0137.922] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0137.922] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0137.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0137.923] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0137.923] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0137.923] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0137.923] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0137.923] CloseHandle (hObject=0x34c) returned 1
	[0137.923] CloseHandle (hObject=0x344) returned 1
	[0137.924] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\hu\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0137.925] SwitchToThread () returned 1
	[0137.967] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0138.009] SetEvent (hEvent=0x68) returned 1
	[0138.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0138.010] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x125cdd0c | out: lpMode=0x125cdd0c) returned 0
	[0138.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x125cdad0 | out: lpFileInformation=0x125cdad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834b11c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834b38d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x5074)) returned 1
	[0138.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0138.010] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744388 | out: pbBuffer=0x12744388) returned 1
	[0138.010] ReadFile (in: hFile=0x33c, lpBuffer=0x1294c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x125cdd1c, lpOverlapped=0x0 | out: lpBuffer=0x1294c000*, lpNumberOfBytesRead=0x125cdd1c*=0x5074, lpOverlapped=0x0) returned 1
	[0138.071] GetFileType (hFile=0x33c) returned 0x1
	[0138.071] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x125cdce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.071] WriteFile (in: hFile=0x33c, lpBuffer=0x124a1500*, nNumberOfBytesToWrite=0x5074, lpNumberOfBytesWritten=0x125cdd00, lpOverlapped=0x125cdd0c | out: lpBuffer=0x124a1500*, lpNumberOfBytesWritten=0x125cdd00*=0x5074, lpOverlapped=0x125cdd0c) returned 1
	[0138.071] GetFileType (hFile=0x33c) returned 0x1
	[0138.072] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x5074, lpNewFilePointer=0x0, dwMoveMethod=0x125cdce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.072] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0138.072] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0138.072] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0138.072] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744500 | out: pbBuffer=0x12744500) returned 1
	[0138.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0138.072] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x125cdd0c | out: lpMode=0x125cdd0c) returned 0
	[0138.072] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x125cdd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x125cdd0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.073] CloseHandle (hObject=0x344) returned 1
	[0138.073] CloseHandle (hObject=0x33c) returned 1
	[0138.073] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\iw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0138.074] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0138.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834c7150, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834c9860, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83989580, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x55a3)) returned 1
	[0138.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e680 | out: pbBuffer=0x1252e680) returned 1
	[0138.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127445a8 | out: pbBuffer=0x127445a8) returned 1
	[0138.075] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f1d1c*=0x55a3, lpOverlapped=0x0) returned 1
	[0138.126] GetFileType (hFile=0x33c) returned 0x1
	[0138.126] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.126] WriteFile (in: hFile=0x33c, lpBuffer=0x12714000*, nNumberOfBytesToWrite=0x55a3, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12714000*, lpNumberOfBytesWritten=0x124f1d00*=0x55a3, lpOverlapped=0x124f1d0c) returned 1
	[0138.126] GetFileType (hFile=0x33c) returned 0x1
	[0138.126] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x55a3, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0138.126] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0138.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0138.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0138.127] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410568 | out: pbBuffer=0x12410568) returned 1
	[0138.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0138.127] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0138.127] WriteFile (in: hFile=0x32c, lpBuffer=0x12720000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12720000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0138.127] CloseHandle (hObject=0x32c) returned 1
	[0138.127] CloseHandle (hObject=0x33c) returned 1
	[0138.127] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\kn\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0138.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.129] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.129] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834e9430, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ebb40, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.129] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.129] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.129] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.129] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0138.130] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.130] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.132] CloseHandle (hObject=0x33c) returned 1
	[0138.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ebb40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ebb40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x583f)) returned 1
	[0138.178] SetEvent (hEvent=0x68) returned 1
	[0138.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.178] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.178] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834f0960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834f3070, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.179] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.179] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.179] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.179] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.180] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.180] WriteFile (in: hFile=0x2cc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.182] CloseHandle (hObject=0x2cc) returned 1
	[0138.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834f3070, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834f3070, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398bc90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5224)) returned 1
	[0138.268] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0138.409] SetEvent (hEvent=0x2e8) returned 1
	[0138.409] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0138.444] SetEvent (hEvent=0x2e8) returned 1
	[0138.444] SetEvent (hEvent=0x80) returned 1
	[0138.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.445] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.445] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x834fccb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x834ff3c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.445] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.445] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.445] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0138.446] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.446] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.448] CloseHandle (hObject=0x344) returned 1
	[0138.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x834ff3c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x834ff3c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f8b)) returned 1
	[0138.489] SetEvent (hEvent=0x80) returned 1
	[0138.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.489] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.489] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835041e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835068f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.490] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.490] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.490] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.490] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.491] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.491] WriteFile (in: hFile=0x2cc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.492] CloseHandle (hObject=0x2cc) returned 1
	[0138.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835068f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835068f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3ebc)) returned 1
	[0138.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.493] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.493] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835794e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8357bbf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.493] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.493] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.494] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.495] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.495] WriteFile (in: hFile=0x2cc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.496] CloseHandle (hObject=0x2cc) returned 1
	[0138.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8357bbf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8357bbf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3f45)) returned 1
	[0138.541] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.541] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.541] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83580a10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83583120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.541] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.541] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.542] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.605] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.605] WriteFile (in: hFile=0x34c, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.607] CloseHandle (hObject=0x34c) returned 1
	[0138.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83583120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83583120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8398e3a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd7)) returned 1
	[0138.607] SetEvent (hEvent=0x80) returned 1
	[0138.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8358f470, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359b7c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8359b7c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.608] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.608] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.609] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.609] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.611] CloseHandle (hObject=0x34c) returned 1
	[0138.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8359b7c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8359ded0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1
	[0138.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.657] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.657] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835969a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a05e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.657] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.657] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.657] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.659] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.659] WriteFile (in: hFile=0x2cc, lpBuffer=0x12478600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12478600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.661] CloseHandle (hObject=0x2cc) returned 1
	[0138.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a05e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a05e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1
	[0138.661] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.661] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.661] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835990b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835a5400, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.661] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.662] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.662] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.662] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0138.663] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.663] WriteFile (in: hFile=0x2cc, lpBuffer=0x12479900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12479900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.664] CloseHandle (hObject=0x2cc) returned 1
	[0138.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835a5400, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835a5400, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1
	[0138.712] SetEvent (hEvent=0x80) returned 1
	[0138.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.712] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.712] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835aa220, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b1750, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b1750, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.713] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.713] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.713] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.714] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.714] WriteFile (in: hFile=0x34c, lpBuffer=0x1247ac00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1247ac00*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.715] CloseHandle (hObject=0x34c) returned 1
	[0138.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b1750, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b3e60, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83990ab0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40db)) returned 1
	[0138.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.716] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.716] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835b6570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835b8c80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835b8c80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.716] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.717] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.717] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.718] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.718] WriteFile (in: hFile=0x34c, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.719] CloseHandle (hObject=0x34c) returned 1
	[0138.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835b8c80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835bb390, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x490e)) returned 1
	[0138.807] SetEvent (hEvent=0x80) returned 1
	[0138.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.808] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.808] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c01b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c01b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.808] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.808] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.808] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.808] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.808] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.809] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.809] WriteFile (in: hFile=0x34c, lpBuffer=0x12625300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12625300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.811] CloseHandle (hObject=0x34c) returned 1
	[0138.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c01b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c28c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x40fd)) returned 1
	[0138.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0138.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0138.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0138.812] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835c4fd0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835c9df0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0138.812] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0138.812] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0138.812] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0138.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0138.812] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0138.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0138.813] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0138.813] WriteFile (in: hFile=0x34c, lpBuffer=0x12626600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12626600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0138.815] CloseHandle (hObject=0x34c) returned 1
	[0138.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835c9df0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835c9df0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x407a)) returned 1
	[0138.856] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0138.990] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0139.082] SetEvent (hEvent=0x2e4) returned 1
	[0139.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0139.083] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0139.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835cec10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835d1320, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839931c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x49c1)) returned 1
	[0139.083] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0139.083] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0139.084] ReadFile (in: hFile=0x2cc, lpBuffer=0x128d8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128d8000*, lpNumberOfBytesRead=0x1242bd1c*=0x49c1, lpOverlapped=0x0) returned 1
	[0139.134] GetFileType (hFile=0x2cc) returned 0x1
	[0139.134] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.134] WriteFile (in: hFile=0x2cc, lpBuffer=0x127ce000*, nNumberOfBytesToWrite=0x49c1, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127ce000*, lpNumberOfBytesWritten=0x1242bd00*=0x49c1, lpOverlapped=0x1242bd0c) returned 1
	[0139.134] GetFileType (hFile=0x2cc) returned 0x1
	[0139.134] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x49c1, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.134] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0139.135] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0139.135] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0139.135] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0139.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0139.135] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0139.135] WriteFile (in: hFile=0x33c, lpBuffer=0x12526000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12526000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.135] CloseHandle (hObject=0x33c) returned 1
	[0139.135] CloseHandle (hObject=0x2cc) returned 1
	[0139.136] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0139.138] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0139.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1276bad0 | out: lpFileInformation=0x1276bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835dfd80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835dfd80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839958d0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3e8b)) returned 1
	[0139.138] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0139.138] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0139.138] ReadFile (in: hFile=0x2cc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1276bd1c*=0x3e8b, lpOverlapped=0x0) returned 1
	[0139.189] GetFileType (hFile=0x2cc) returned 0x1
	[0139.189] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.189] WriteFile (in: hFile=0x2cc, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x3e8b, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x1276bd00*=0x3e8b, lpOverlapped=0x1276bd0c) returned 1
	[0139.189] GetFileType (hFile=0x2cc) returned 0x1
	[0139.189] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x3e8b, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0139.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0139.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0139.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0139.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0139.190] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0139.190] WriteFile (in: hFile=0x32c, lpBuffer=0x12526500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12526500*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.190] CloseHandle (hObject=0x32c) returned 1
	[0139.190] CloseHandle (hObject=0x2cc) returned 1
	[0139.190] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\sw\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.192] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.192] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835f5d10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835f8420, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835f8420, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.192] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f8420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835fab30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4f64, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0139.192] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.192] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.192] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0139.193] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0139.193] WriteFile (in: hFile=0x2cc, lpBuffer=0x12634000*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12634000*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0139.194] CloseHandle (hObject=0x2cc) returned 1
	[0139.195] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835f8420, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835fab30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x4f64)) returned 1
	[0139.239] SetEvent (hEvent=0x80) returned 1
	[0139.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.239] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.239] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.239] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x835fd240, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x835ff950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x835ff950, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.239] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835ff950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83602060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0139.240] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.240] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0139.241] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0139.241] WriteFile (in: hFile=0x33c, lpBuffer=0x12635300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12635300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0139.243] CloseHandle (hObject=0x33c) returned 1
	[0139.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835ff950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83602060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404e)) returned 1
	[0139.243] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.244] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.244] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8360bca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8360e3b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8360e3b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.244] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8360e3b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83610ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0139.244] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.244] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0139.246] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0139.246] WriteFile (in: hFile=0x33c, lpBuffer=0x12636600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12636600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0139.247] CloseHandle (hObject=0x33c) returned 1
	[0139.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8360e3b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83610ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x48f1)) returned 1
	[0139.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.286] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.286] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.286] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836158e0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83617ff0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.286] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83617ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x426b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0139.286] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.286] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.288] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0139.288] WriteFile (in: hFile=0x34c, lpBuffer=0x12637900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12637900*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0139.290] CloseHandle (hObject=0x34c) returned 1
	[0139.290] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0139.324] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0139.325] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0139.325] SetEvent (hEvent=0xa0) returned 1
	[0139.325] SetEvent (hEvent=0x2e4) returned 1
	[0139.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83617ff0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83617ff0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x426b)) returned 1
	[0139.326] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0139.373] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0139.373] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0139.405] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0139.405] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0139.405] SetEvent (hEvent=0x2e4) returned 1
	[0139.405] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0139.443] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0139.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.444] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0139.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x835ff950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83602060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x83997fe0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x404e)) returned 1
	[0139.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0139.444] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0139.444] ReadFile (in: hFile=0x34c, lpBuffer=0x12816000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12816000*, lpNumberOfBytesRead=0x12429d1c*=0x404e, lpOverlapped=0x0) returned 1
	[0139.484] GetFileType (hFile=0x34c) returned 0x1
	[0139.484] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.485] WriteFile (in: hFile=0x34c, lpBuffer=0x127f8000*, nNumberOfBytesToWrite=0x404e, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127f8000*, lpNumberOfBytesWritten=0x12429d00*=0x404e, lpOverlapped=0x12429d0c) returned 1
	[0139.485] GetFileType (hFile=0x34c) returned 0x1
	[0139.485] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x404e, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0139.485] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0139.485] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0139.485] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0139.486] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0139.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x32c
	[0139.486] GetConsoleMode (in: hConsoleHandle=0x32c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0139.486] WriteFile (in: hFile=0x32c, lpBuffer=0x1257a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0139.486] CloseHandle (hObject=0x32c) returned 1
	[0139.486] CloseHandle (hObject=0x34c) returned 1
	[0139.487] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\tr\\messages.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0139.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.489] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.489] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8361ce10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8361f520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.489] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8361f520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d11, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0139.489] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.489] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.489] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0139.490] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0139.490] WriteFile (in: hFile=0x34c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0139.492] CloseHandle (hObject=0x34c) returned 1
	[0139.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8361f520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8361f520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d11)) returned 1
	[0139.531] SetEvent (hEvent=0x80) returned 1
	[0139.531] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.531] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\*", lpFindFileData=0x124f76ac | out: lpFindFileData=0x124f76ac*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.532] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x83624340, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8362b870, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.532] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8362b870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1
	[0139.532] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f76f0 | out: lpFindFileData=0x124f76f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.532] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7374 | out: lpFileInformation=0x124f7374*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.532] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0139.533] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7584 | out: lpMode=0x124f7584) returned 0
	[0139.533] WriteFile (in: hFile=0x2cc, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7584, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7584*=0x1180, lpOverlapped=0x0) returned 1
	[0139.534] CloseHandle (hObject=0x2cc) returned 1
	[0139.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x124f7770 | out: lpFileInformation=0x124f7770*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8362b870, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8362b870, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8399a6f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3d72)) returned 1
	[0139.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0139.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0139.573] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\*", lpFindFileData=0x124f7710 | out: lpFindFileData=0x124f7710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0139.573] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x836ddc00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0139.573] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x839fe880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7299, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1
	[0139.573] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836e0310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1
	[0139.573] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7754 | out: lpFindFileData=0x124f7754*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0139.573] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0139.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f73d8 | out: lpFileInformation=0x124f73d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0139.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0139.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0141.859] SetEvent (hEvent=0xa0) returned 1
	[0141.859] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f75e8 | out: lpMode=0x124f75e8) returned 0
	[0141.859] WriteFile (in: hFile=0x34c, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f75e8, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f75e8*=0x1180, lpOverlapped=0x0) returned 1
	[0141.860] CloseHandle (hObject=0x34c) returned 1
	[0141.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x839fe880, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x839fe880, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x839fe880, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x7299)) returned 1
	[0141.865] SetEvent (hEvent=0x68) returned 1
	[0141.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x124f77d4 | out: lpFileInformation=0x124f77d4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836e0310, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836e0310, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3e39)) returned 1
	[0141.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\angular.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83637bc0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8363f0f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0bf)) returned 1
	[0141.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xa89c)) returned 1
	[0141.907] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_game_sender.js"), fInfoLevelId=0x0, lpFileInformation=0x124f7838 | out: lpFileInformation=0x124f7838*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83646620, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83648d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x181aa)) returned 1
	[0141.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0141.908] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0141.908] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83641800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83643f10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xa89c)) returned 1
	[0141.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240efa0 | out: pbBuffer=0x1240efa0) returned 1
	[0141.908] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0141.909] ReadFile (in: hFile=0x344, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x1276dd1c*=0xa89c, lpOverlapped=0x0) returned 1
	[0142.458] GetFileType (hFile=0x344) returned 0x1
	[0142.458] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.458] WriteFile (in: hFile=0x344, lpBuffer=0x12610000*, nNumberOfBytesToWrite=0xa89c, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12610000*, lpNumberOfBytesWritten=0x1276dd00*=0xa89c, lpOverlapped=0x1276dd0c) returned 1
	[0142.458] GetFileType (hFile=0x344) returned 0x1
	[0142.458] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xa89c, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0142.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0142.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0142.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0142.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x348
	[0142.459] GetConsoleMode (in: hConsoleHandle=0x348, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0142.459] WriteFile (in: hFile=0x348, lpBuffer=0x1245a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.460] CloseHandle (hObject=0x348) returned 1
	[0142.460] CloseHandle (hObject=0x344) returned 1
	[0142.460] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\background_script.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.461] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0142.462] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0142.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83652970, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x83657790, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x3a258)) returned 1
	[0142.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0142.462] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744398 | out: pbBuffer=0x12744398) returned 1
	[0142.462] ReadFile (in: hFile=0x344, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1276dd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0142.522] GetFileType (hFile=0x344) returned 0x1
	[0142.522] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.522] WriteFile (in: hFile=0x344, lpBuffer=0x12582000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12582000*, lpNumberOfBytesWritten=0x1276dd00*=0x20000, lpOverlapped=0x1276dd0c) returned 1
	[0142.523] GetFileType (hFile=0x344) returned 0x1
	[0142.523] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.523] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0142.523] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0142.523] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0142.523] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744520 | out: pbBuffer=0x12744520) returned 1
	[0142.523] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0142.524] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0142.524] WriteFile (in: hFile=0x2cc, lpBuffer=0x1245a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1245a500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.572] CloseHandle (hObject=0x2cc) returned 1
	[0142.783] CloseHandle (hObject=0x344) returned 1
	[0142.784] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\cast_route_details.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0142.785] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0142.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8369bd50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8369bd50, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0xc26)) returned 1
	[0142.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f480 | out: pbBuffer=0x1240f480) returned 1
	[0142.785] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882e8 | out: pbBuffer=0x127882e8) returned 1
	[0142.785] ReadFile (in: hFile=0x344, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x1276dd1c*=0xc26, lpOverlapped=0x0) returned 1
	[0142.828] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0142.831] SetEvent (hEvent=0x70) returned 1
	[0142.831] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0142.832] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0142.832] SetEvent (hEvent=0x80) returned 1
	[0142.832] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0142.832] GetFileType (hFile=0x344) returned 0x1
	[0142.832] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.832] WriteFile (in: hFile=0x344, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0xc26, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x124f1d00*=0xc26, lpOverlapped=0x124f1d0c) returned 1
	[0142.832] GetFileType (hFile=0x344) returned 0x1
	[0142.832] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xc26, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0142.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0142.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0142.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0142.833] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744380 | out: pbBuffer=0x12744380) returned 1
	[0142.833] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0142.833] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0142.833] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0142.833] CloseHandle (hObject=0x33c) returned 1
	[0142.833] CloseHandle (hObject=0x344) returned 1
	[0142.833] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback.css.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0142.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0142.836] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0142.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836a5990, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836a5990, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2b20)) returned 1
	[0142.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0142.836] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443a8 | out: pbBuffer=0x127443a8) returned 1
	[0142.836] ReadFile (in: hFile=0x344, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f1d1c*=0x2b20, lpOverlapped=0x0) returned 1
	[0143.079] SetEvent (hEvent=0xa0) returned 1
	[0143.079] GetFileType (hFile=0x344) returned 0x1
	[0143.079] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.079] WriteFile (in: hFile=0x344, lpBuffer=0x12458000*, nNumberOfBytesToWrite=0x2b20, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12458000*, lpNumberOfBytesWritten=0x124f1d00*=0x2b20, lpOverlapped=0x124f1d0c) returned 1
	[0143.080] GetFileType (hFile=0x344) returned 0x1
	[0143.080] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x2b20, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0143.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0143.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0143.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0143.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.082] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0143.082] WriteFile (in: hFile=0x33c, lpBuffer=0x12608a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12608a00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.082] CloseHandle (hObject=0x33c) returned 1
	[0143.082] CloseHandle (hObject=0x344) returned 1
	[0143.082] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\feedback_script.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.085] SetEvent (hEvent=0x70) returned 1
	[0143.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0143.086] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0143.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x836c2e50, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x836c5560, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1caf9500, ftLastWriteTime.dwHighDateTime=0x1d2c87a, nFileSizeHigh=0x0, nFileSizeLow=0x2adeb)) returned 1
	[0143.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0143.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788288 | out: pbBuffer=0x12788288) returned 1
	[0143.086] ReadFile (in: hFile=0x344, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f1d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0143.114] GetFileType (hFile=0x344) returned 0x1
	[0143.114] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.122] WriteFile (in: hFile=0x344, lpBuffer=0x12898000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12898000*, lpNumberOfBytesWritten=0x124f1d00*=0x20000, lpOverlapped=0x124f1d0c) returned 1
	[0143.123] GetFileType (hFile=0x344) returned 0x1
	[0143.123] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0143.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed081 | out: pbBuffer=0x124ed081) returned 1
	[0143.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed181 | out: pbBuffer=0x124ed181) returned 1
	[0143.124] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788520 | out: pbBuffer=0x12788520) returned 1
	[0143.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.124] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0143.124] WriteFile (in: hFile=0x33c, lpBuffer=0x12609900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12609900*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.124] CloseHandle (hObject=0x33c) returned 1
	[0143.125] CloseHandle (hObject=0x344) returned 1
	[0143.125] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_common.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.127] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0143.127] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0143.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cce2c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80cce2c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80db2b00, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1
	[0143.128] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240fae0 | out: pbBuffer=0x1240fae0) returned 1
	[0143.128] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788538 | out: pbBuffer=0x12788538) returned 1
	[0143.128] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0143.134] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0143.134] SetEvent (hEvent=0xa0) returned 1
	[0143.134] SetEvent (hEvent=0x80) returned 1
	[0143.134] ReadFile (in: hFile=0x344, lpBuffer=0x128b8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128b8000*, lpNumberOfBytesRead=0x124f1d1c*=0x5000, lpOverlapped=0x0) returned 1
	[0143.283] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0143.472] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0143.499] SetEvent (hEvent=0x80) returned 1
	[0143.499] SetEvent (hEvent=0x68) returned 1
	[0143.501] GetFileType (hFile=0x340) returned 0x1
	[0143.501] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.502] WriteFile (in: hFile=0x340, lpBuffer=0x1259a000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x1276bd00, lpOverlapped=0x1276bd0c | out: lpBuffer=0x1259a000*, lpNumberOfBytesWritten=0x1276bd00*=0x20000, lpOverlapped=0x1276bd0c) returned 1
	[0143.502] GetFileType (hFile=0x340) returned 0x1
	[0143.502] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x1276bce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.503] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0143.521] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0143.521] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0143.521] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0143.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.522] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276bd0c | out: lpMode=0x1276bd0c) returned 0
	[0143.522] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.569] CloseHandle (hObject=0x33c) returned 1
	[0143.569] CloseHandle (hObject=0x340) returned 1
	[0143.569] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\5817.313.0.5_0\\mirroring_hangouts.js.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A059.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0143.572] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0143.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\JumpListIcons\\A059.tmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\jumplisticons\\a059.tmp"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x96ec4eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x96ec4eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x96ec4eb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.572] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732240 | out: pbBuffer=0x12732240) returned 1
	[0143.572] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744398 | out: pbBuffer=0x12744398) returned 1
	[0143.573] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0143.573] SetEvent (hEvent=0x2f4) returned 1
	[0143.573] ReadFile (in: hFile=0x340, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x12429d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.573] CloseHandle (hObject=0x340) returned 1
	[0143.574] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0143.582] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0143.582] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0143.582] SetEvent (hEvent=0x2f4) returned 1
	[0143.583] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0143.591] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0143.591] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0143.629] SetEvent (hEvent=0x68) returned 1
	[0143.630] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0143.631] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0143.631] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8642cdf0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8642cdf0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8642cdf0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0143.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0143.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0143.631] ReadFile (in: hFile=0x344, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f5d1c*=0x10, lpOverlapped=0x0) returned 1
	[0143.633] GetFileType (hFile=0x344) returned 0x1
	[0143.633] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.633] WriteFile (in: hFile=0x344, lpBuffer=0x12410040*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12410040*, lpNumberOfBytesWritten=0x124f5d00*=0x10, lpOverlapped=0x124f5d0c) returned 1
	[0143.633] GetFileType (hFile=0x344) returned 0x1
	[0143.633] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.633] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0143.633] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0143.634] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0143.634] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103d0 | out: pbBuffer=0x124103d0) returned 1
	[0143.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0143.634] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0143.634] WriteFile (in: hFile=0x340, lpBuffer=0x12460000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12460000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.634] CloseHandle (hObject=0x340) returned 1
	[0143.634] CloseHandle (hObject=0x344) returned 1
	[0143.635] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.846] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1
	[0143.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.848] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0143.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8687f510, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8687f510, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x86a48590, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0143.849] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0143.849] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443b8 | out: pbBuffer=0x127443b8) returned 1
	[0143.849] ReadFile (in: hFile=0x33c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f5d1c*=0x0, lpOverlapped=0x0) returned 1
	[0143.849] CloseHandle (hObject=0x33c) returned 1
	[0143.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0143.850] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0143.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f846500, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f846500, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f846500, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1
	[0143.850] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127325a0 | out: pbBuffer=0x127325a0) returned 1
	[0143.850] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443c8 | out: pbBuffer=0x127443c8) returned 1
	[0143.850] ReadFile (in: hFile=0x33c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f5d1c*=0xb4, lpOverlapped=0x0) returned 1
	[0143.854] GetFileType (hFile=0x33c) returned 0x1
	[0143.854] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.855] WriteFile (in: hFile=0x33c, lpBuffer=0x1248c300*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1248c300*, lpNumberOfBytesWritten=0x124f5d00*=0xb4, lpOverlapped=0x124f5d0c) returned 1
	[0143.855] GetFileType (hFile=0x33c) returned 0x1
	[0143.855] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb4, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0143.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0143.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0143.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0143.856] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744630 | out: pbBuffer=0x12744630) returned 1
	[0143.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0143.856] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0143.856] WriteFile (in: hFile=0x34c, lpBuffer=0x1263aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1263aa00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0143.856] CloseHandle (hObject=0x34c) returned 1
	[0143.857] CloseHandle (hObject=0x33c) returned 1
	[0143.857] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\README.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\readme.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0143.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x857e1690, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c3f38f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c404a60, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8b43)) returned 1
	[0143.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x82271b90, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1
	[0144.306] SetEvent (hEvent=0x2f4) returned 1
	[0144.306] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8218d350, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8218d350, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x822e3fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0145.305] SetEvent (hEvent=0xa0) returned 1
	[0145.305] SetEvent (hEvent=0x68) returned 1
	[0145.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0145.780] SetEvent (hEvent=0xa0) returned 1
	[0145.780] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0145.780] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0145.781] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84251e10, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84251e10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0145.781] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1
	[0145.781] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0145.781] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0145.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0145.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0145.781] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0145.862] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0145.862] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0145.863] CloseHandle (hObject=0x33c) returned 1
	[0145.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0145.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0145.864] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x124f77d8 | out: lpFindFileData=0x124f77d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0145.901] SetEvent (hEvent=0xa0) returned 1
	[0145.901] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x84251e10, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0145.901] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8448d2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1
	[0145.901] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1
	[0145.901] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1
	[0145.901] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x93935fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1
	[0145.901] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1
	[0145.901] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f781c | out: lpFindFileData=0x124f781c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0145.901] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0145.902] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f74a0 | out: lpFileInformation=0x124f74a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0145.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0145.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0145.908] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f76b0 | out: lpMode=0x124f76b0) returned 0
	[0145.908] WriteFile (in: hFile=0x33c, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f76b0, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f76b0*=0x1180, lpOverlapped=0x0) returned 1
	[0145.909] CloseHandle (hObject=0x33c) returned 1
	[0145.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8448d2b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8448d2b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x8448d2b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0145.910] SetEvent (hEvent=0x2f4) returned 1
	[0145.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0145.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0145.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x93935fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc3)) returned 1
	[0145.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x124f789c | out: lpFileInformation=0x124f789c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0145.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0145.914] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0145.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x93935fb0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xc3)) returned 1
	[0145.914] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e2a0 | out: pbBuffer=0x1252e2a0) returned 1
	[0145.914] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0145.914] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f1d1c*=0xc3, lpOverlapped=0x0) returned 1
	[0145.916] GetFileType (hFile=0x33c) returned 0x1
	[0145.916] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0145.916] WriteFile (in: hFile=0x33c, lpBuffer=0x124ac270*, nNumberOfBytesToWrite=0xc3, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124ac270*, lpNumberOfBytesWritten=0x124f1d00*=0xc3, lpOverlapped=0x124f1d0c) returned 1
	[0145.916] GetFileType (hFile=0x33c) returned 0x1
	[0145.916] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xc3, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0145.916] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0145.916] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0145.917] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0145.917] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e718 | out: pbBuffer=0x1251e718) returned 1
	[0145.917] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0145.917] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0145.917] WriteFile (in: hFile=0x340, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0145.917] CloseHandle (hObject=0x340) returned 1
	[0145.918] CloseHandle (hObject=0x33c) returned 1
	[0145.918] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0145.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0145.927] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0145.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x84254520, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x84254520, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x84254520, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1
	[0145.927] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4e0 | out: pbBuffer=0x1252e4e0) returned 1
	[0145.927] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0145.927] ReadFile (in: hFile=0x33c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f1d1c*=0x29, lpOverlapped=0x0) returned 1
	[0146.000] GetFileType (hFile=0x33c) returned 0x1
	[0146.000] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.000] WriteFile (in: hFile=0x33c, lpBuffer=0x1240a390*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1240a390*, lpNumberOfBytesWritten=0x124f1d00*=0x29, lpOverlapped=0x124f1d0c) returned 1
	[0146.001] GetFileType (hFile=0x33c) returned 0x1
	[0146.001] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x29, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0146.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0146.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0146.001] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e848 | out: pbBuffer=0x1251e848) returned 1
	[0146.002] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.002] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0146.002] WriteFile (in: hFile=0x344, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0146.002] CloseHandle (hObject=0x344) returned 1
	[0146.130] CloseHandle (hObject=0x33c) returned 1
	[0146.144] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0146.185] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0146.197] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0146.201] SetEvent (hEvent=0x2f4) returned 1
	[0146.201] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0146.203] SetEvent (hEvent=0x2f4) returned 1
	[0146.203] SetEvent (hEvent=0x320) returned 1
	[0146.203] SwitchToThread () returned 1
	[0146.206] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0146.300] SetEvent (hEvent=0x2e8) returned 1
	[0146.300] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0146.301] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0146.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000003.log" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80916060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x80916060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x80916060, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0146.301] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0146.301] ReadFile (in: hFile=0x2cc, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x124f1d1c*=0x0, lpOverlapped=0x0) returned 1
	[0146.301] CloseHandle (hObject=0x2cc) returned 1
	[0146.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0146.302] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0146.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x804795c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1
	[0146.302] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0146.302] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788028 | out: pbBuffer=0x12788028) returned 1
	[0146.302] ReadFile (in: hFile=0x2cc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1242bd1c*=0x10, lpOverlapped=0x0) returned 1
	[0146.304] GetFileType (hFile=0x2cc) returned 0x1
	[0146.304] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.304] WriteFile (in: hFile=0x2cc, lpBuffer=0x12788030*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12788030*, lpNumberOfBytesWritten=0x1242bd00*=0x10, lpOverlapped=0x1242bd0c) returned 1
	[0146.304] GetFileType (hFile=0x2cc) returned 0x1
	[0146.304] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x10, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.305] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0146.305] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0146.305] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0146.305] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880f0 | out: pbBuffer=0x127880f0) returned 1
	[0146.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0146.305] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0146.305] WriteFile (in: hFile=0x33c, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0146.305] CloseHandle (hObject=0x33c) returned 1
	[0146.305] CloseHandle (hObject=0x2cc) returned 1
	[0146.305] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0146.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0146.362] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0146.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x802d66a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x802d66a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9ab9e110, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1
	[0146.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0146.362] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0146.362] ReadFile (in: hFile=0x2cc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x124f1d1c*=0xa7, lpOverlapped=0x0) returned 1
	[0146.364] GetFileType (hFile=0x2cc) returned 0x1
	[0146.364] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.364] WriteFile (in: hFile=0x2cc, lpBuffer=0x1273a790*, nNumberOfBytesToWrite=0xa7, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1273a790*, lpNumberOfBytesWritten=0x124f1d00*=0xa7, lpOverlapped=0x124f1d0c) returned 1
	[0146.364] GetFileType (hFile=0x2cc) returned 0x1
	[0146.364] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xa7, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0146.364] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0146.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0146.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0146.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0146.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.365] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0146.365] WriteFile (in: hFile=0x344, lpBuffer=0x1262c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1262c500*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0146.365] CloseHandle (hObject=0x344) returned 1
	[0146.365] CloseHandle (hObject=0x2cc) returned 1
	[0146.365] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0146.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0146.416] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0146.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x804795c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x804795c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x812c19c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.416] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e480 | out: pbBuffer=0x1252e480) returned 1
	[0146.416] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0146.416] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0146.481] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0146.481] SetEvent (hEvent=0x80) returned 1
	[0146.481] ReadFile (in: hFile=0x2cc, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x1242bd1c*=0x0, lpOverlapped=0x0) returned 1
	[0146.482] CloseHandle (hObject=0x2cc) returned 1
	[0146.483] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0146.496] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0146.496] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0146.790] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0146.790] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0146.924] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0146.925] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0146.925] SetEvent (hEvent=0xa0) returned 1
	[0146.925] SetEvent (hEvent=0x80) returned 1
	[0146.925] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0146.984] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0146.984] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0146.984] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0146.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.984] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0146.984] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0146.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0146.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0146.985] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\EVWhitelist\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\evwhitelist\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.986] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0146.986] WriteFile (in: hFile=0x344, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0146.988] CloseHandle (hObject=0x344) returned 1
	[0146.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0146.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0146.989] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0146.989] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0146.989] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0146.989] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0146.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0146.989] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0146.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0146.991] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0146.991] WriteFile (in: hFile=0x344, lpBuffer=0x12640600*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12640600*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0146.992] CloseHandle (hObject=0x344) returned 1
	[0146.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\first run"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7f8b8920, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x7f8b8920, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x7f8b8920, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.013] SetEvent (hEvent=0x80) returned 1
	[0147.013] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\local state"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85749110, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x9c0bcce0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x9c0bf3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1082a)) returned 1
	[0147.014] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.014] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.015] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.015] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.015] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.015] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\origintrials\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0147.016] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0147.016] WriteFile (in: hFile=0x2cc, lpBuffer=0x12641900*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12641900*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0147.017] CloseHandle (hObject=0x2cc) returned 1
	[0147.017] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.018] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.018] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81dfb250, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81dfb250, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81dfb250, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.018] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.019] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.019] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\pepperflash\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0147.020] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0147.020] WriteFile (in: hFile=0x2cc, lpBuffer=0x12642c00*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12642c00*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0147.021] CloseHandle (hObject=0x2cc) returned 1
	[0147.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0147.022] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x124f78a0 | out: lpFindFileData=0x124f78a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0147.022] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x81e213b0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x81e213b0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x81e213b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0147.022] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f78e4 | out: lpFindFileData=0x124f78e4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0147.022] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0147.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7568 | out: lpFileInformation=0x124f7568*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0147.022] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0147.023] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0147.025] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7778 | out: lpMode=0x124f7778) returned 0
	[0147.025] WriteFile (in: hFile=0x2cc, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7778, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x124f7778*=0x1180, lpOverlapped=0x0) returned 1
	[0147.026] CloseHandle (hObject=0x2cc) returned 1
	[0147.026] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f6e8b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1
	[0147.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.028] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), fInfoLevelId=0x0, lpFileInformation=0x124f79c8 | out: lpFileInformation=0x124f79c8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1
	[0147.033] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0147.034] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0147.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Channel IDs-journal" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing channel ids-journal"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85e6fa20, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x85e6fa20, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x97f94a10, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0147.034] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e300 | out: pbBuffer=0x1240e300) returned 1
	[0147.034] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788170 | out: pbBuffer=0x12788170) returned 1
	[0147.035] ReadFile (in: hFile=0x2cc, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1276dd1c*=0x0, lpOverlapped=0x0) returned 1
	[0147.035] CloseHandle (hObject=0x2cc) returned 1
	[0147.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0147.036] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0147.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8582d950, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x8582d950, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x85cca3f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1
	[0147.036] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e3a0 | out: pbBuffer=0x1240e3a0) returned 1
	[0147.036] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788180 | out: pbBuffer=0x12788180) returned 1
	[0147.036] ReadFile (in: hFile=0x2cc, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1276dd1c*=0x1c00, lpOverlapped=0x0) returned 1
	[0147.087] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0147.291] GetFileType (hFile=0x2cc) returned 0x1
	[0147.291] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.291] WriteFile (in: hFile=0x2cc, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x1c00, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x1276dd00*=0x1c00, lpOverlapped=0x1276dd0c) returned 1
	[0147.291] GetFileType (hFile=0x2cc) returned 0x1
	[0147.291] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x1c00, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.291] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0147.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0147.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0147.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0d0 | out: pbBuffer=0x1251e0d0) returned 1
	[0147.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0147.292] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0147.293] WriteFile (in: hFile=0x344, lpBuffer=0x125f0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125f0000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0147.293] CloseHandle (hObject=0x344) returned 1
	[0147.347] CloseHandle (hObject=0x2cc) returned 1
	[0147.347] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing Cookies.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\google\\chrome\\user data\\safe browsing cookies.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0147.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0147.350] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0147.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3d1d6940, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x3d1d6940, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x3d757c20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc)) returned 1
	[0147.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e220 | out: pbBuffer=0x1252e220) returned 1
	[0147.350] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0147.350] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0147.359] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0147.359] SetEvent (hEvent=0xa0) returned 1
	[0147.359] SetEvent (hEvent=0x2e4) returned 1
	[0147.360] ReadFile (in: hFile=0x2cc, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x124f3d1c*=0x20000, lpOverlapped=0x0) returned 1
	[0147.902] SetEvent (hEvent=0xa0) returned 1
	[0147.903] GetFileType (hFile=0x2cc) returned 0x1
	[0147.903] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.903] WriteFile (in: hFile=0x2cc, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x124f3d00*=0x20000, lpOverlapped=0x124f3d0c) returned 1
	[0147.903] GetFileType (hFile=0x2cc) returned 0x1
	[0147.903] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x20000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0147.903] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec301 | out: pbBuffer=0x124ec301) returned 1
	[0147.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec401 | out: pbBuffer=0x124ec401) returned 1
	[0147.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec501 | out: pbBuffer=0x124ec501) returned 1
	[0147.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744100 | out: pbBuffer=0x12744100) returned 1
	[0147.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0147.904] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0147.904] WriteFile (in: hFile=0x344, lpBuffer=0x12638000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12638000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0147.933] SetEvent (hEvent=0xa0) returned 1
	[0147.933] CloseHandle (hObject=0x344) returned 1
	[0147.933] CloseHandle (hObject=0x2cc) returned 1
	[0147.933] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\forms\\frmcache.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0147.936] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0148.118] SetEvent (hEvent=0x320) returned 1
	[0148.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0148.119] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245fd0c | out: lpMode=0x1245fd0c) returned 0
	[0148.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x1245fad0 | out: lpFileInformation=0x1245fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfee8082e, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0148.119] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732220 | out: pbBuffer=0x12732220) returned 1
	[0148.119] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880d8 | out: pbBuffer=0x127880d8) returned 1
	[0148.119] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1245fd1c*=0x7000, lpOverlapped=0x0) returned 1
	[0149.781] GetFileType (hFile=0x33c) returned 0x1
	[0149.781] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245fce4 | out: lpNewFilePointer=0x0) returned 1
	[0149.781] WriteFile (in: hFile=0x33c, lpBuffer=0x12958000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x1245fd00, lpOverlapped=0x1245fd0c | out: lpBuffer=0x12958000*, lpNumberOfBytesWritten=0x1245fd00*=0x7000, lpOverlapped=0x1245fd0c) returned 1
	[0149.781] GetFileType (hFile=0x33c) returned 0x1
	[0149.782] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x7000, lpNewFilePointer=0x0, dwMoveMethod=0x1245fce4 | out: lpNewFilePointer=0x0) returned 1
	[0149.782] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0149.782] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0149.782] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0149.782] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5e0 | out: pbBuffer=0x1251e5e0) returned 1
	[0149.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0149.782] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1245fd0c | out: lpMode=0x1245fd0c) returned 0
	[0149.782] WriteFile (in: hFile=0x2cc, lpBuffer=0x125fe500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245fd0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe500*, lpNumberOfBytesWritten=0x1245fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0149.783] CloseHandle (hObject=0x2cc) returned 1
	[0149.783] CloseHandle (hObject=0x33c) returned 1
	[0149.783] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0149.786] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0149.786] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0149.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x52d69eb0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52d69eb0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x6e0227e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0149.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4a0 | out: pbBuffer=0x1252e4a0) returned 1
	[0149.786] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f8 | out: pbBuffer=0x1251e5f8) returned 1
	[0149.787] ReadFile (in: hFile=0x33c, lpBuffer=0x12966000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12966000*, lpNumberOfBytesRead=0x124f3d1c*=0x8000, lpOverlapped=0x0) returned 1
	[0149.856] GetFileType (hFile=0x33c) returned 0x1
	[0149.856] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0149.856] WriteFile (in: hFile=0x33c, lpBuffer=0x12986000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12986000*, lpNumberOfBytesWritten=0x124f3d00*=0x8000, lpOverlapped=0x124f3d0c) returned 1
	[0149.856] GetFileType (hFile=0x33c) returned 0x1
	[0149.857] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0149.857] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0149.857] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0149.857] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0149.857] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0149.857] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0149.858] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0149.858] WriteFile (in: hFile=0x2cc, lpBuffer=0x125fea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fea00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0149.858] CloseHandle (hObject=0x2cc) returned 1
	[0149.858] CloseHandle (hObject=0x33c) returned 1
	[0149.859] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Suggested Sites~.feed-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\suggested sites~.feed-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0149.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0149.865] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0149.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xff06fa11, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1
	[0149.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6c0 | out: pbBuffer=0x1252e6c0) returned 1
	[0149.865] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e758 | out: pbBuffer=0x1251e758) returned 1
	[0149.866] ReadFile (in: hFile=0x33c, lpBuffer=0x1255e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255e000*, lpNumberOfBytesRead=0x124f1d1c*=0x7000, lpOverlapped=0x0) returned 1
	[0149.914] GetFileType (hFile=0x33c) returned 0x1
	[0149.914] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0149.914] WriteFile (in: hFile=0x33c, lpBuffer=0x1295f000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1295f000*, lpNumberOfBytesWritten=0x124f1d00*=0x7000, lpOverlapped=0x124f1d0c) returned 1
	[0149.915] GetFileType (hFile=0x33c) returned 0x1
	[0149.915] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x7000, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0149.915] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0149.915] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0149.915] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0149.915] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e870 | out: pbBuffer=0x1251e870) returned 1
	[0149.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0149.916] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0149.916] WriteFile (in: hFile=0x344, lpBuffer=0x125fef00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fef00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0149.916] CloseHandle (hObject=0x344) returned 1
	[0149.916] CloseHandle (hObject=0x33c) returned 1
	[0149.917] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0149.920] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0150.037] SetEvent (hEvent=0x320) returned 1
	[0150.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0150.038] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0150.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfea09ee5, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43)) returned 1
	[0150.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8e0 | out: pbBuffer=0x1252e8e0) returned 1
	[0150.038] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e888 | out: pbBuffer=0x1251e888) returned 1
	[0150.038] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0150.119] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0150.119] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0150.120] SetEvent (hEvent=0xa0) returned 1
	[0150.120] SetEvent (hEvent=0x320) returned 1
	[0150.120] ReadFile (in: hFile=0x2cc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12429d1c*=0x43, lpOverlapped=0x0) returned 1
	[0150.122] GetFileType (hFile=0x2cc) returned 0x1
	[0150.122] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0150.122] WriteFile (in: hFile=0x2cc, lpBuffer=0x12602140*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12602140*, lpNumberOfBytesWritten=0x12429d00*=0x43, lpOverlapped=0x12429d0c) returned 1
	[0150.122] GetFileType (hFile=0x2cc) returned 0x1
	[0150.122] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x43, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0150.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0150.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0150.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0150.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e9a0 | out: pbBuffer=0x1251e9a0) returned 1
	[0150.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0150.124] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0150.124] WriteFile (in: hFile=0x33c, lpBuffer=0x125ff400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ff400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0150.124] CloseHandle (hObject=0x33c) returned 1
	[0150.124] CloseHandle (hObject=0x2cc) returned 1
	[0150.124] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0152.252] SetEvent (hEvent=0xa0) returned 1
	[0152.253] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0152.869] SetEvent (hEvent=0x2e4) returned 1
	[0152.869] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0152.870] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0152.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\fwlink[1]" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\fwlink[1]"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfed03a6b, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0152.870] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e6c0 | out: pbBuffer=0x1240e6c0) returned 1
	[0152.870] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103f8 | out: pbBuffer=0x124103f8) returned 1
	[0152.871] ReadFile (in: hFile=0x2cc, lpBuffer=0x1291c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1291c000*, lpNumberOfBytesRead=0x124f5d1c*=0x0, lpOverlapped=0x0) returned 1
	[0152.871] CloseHandle (hObject=0x2cc) returned 1
	[0152.877] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0152.970] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0153.117] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0153.478] SetEvent (hEvent=0x2e4) returned 1
	[0153.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0153.479] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0153.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2bc126f0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0153.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ea00 | out: pbBuffer=0x1240ea00) returned 1
	[0153.480] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410588 | out: pbBuffer=0x12410588) returned 1
	[0153.480] ReadFile (in: hFile=0x2cc, lpBuffer=0x1295c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1295c000*, lpNumberOfBytesRead=0x124f5d1c*=0x8000, lpOverlapped=0x0) returned 1
	[0153.660] GetFileType (hFile=0x2cc) returned 0x1
	[0153.660] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0153.660] WriteFile (in: hFile=0x2cc, lpBuffer=0x12634000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12634000*, lpNumberOfBytesWritten=0x124f5d00*=0x8000, lpOverlapped=0x124f5d0c) returned 1
	[0153.660] GetFileType (hFile=0x2cc) returned 0x1
	[0153.660] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0153.660] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0153.660] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0153.661] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0153.661] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106d0 | out: pbBuffer=0x124106d0) returned 1
	[0153.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0153.661] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0153.661] WriteFile (in: hFile=0x33c, lpBuffer=0x125fe500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0153.661] CloseHandle (hObject=0x33c) returned 1
	[0153.662] CloseHandle (hObject=0x2cc) returned 1
	[0153.662] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\feeds cache\\index.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0153.664] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0154.130] SetEvent (hEvent=0x80) returned 1
	[0154.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0154.132] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0154.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x1d941010, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1
	[0154.132] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ee60 | out: pbBuffer=0x1240ee60) returned 1
	[0154.132] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106e8 | out: pbBuffer=0x124106e8) returned 1
	[0154.133] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0154.184] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0154.185] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0154.185] SetEvent (hEvent=0xa0) returned 1
	[0154.185] SetEvent (hEvent=0x80) returned 1
	[0154.186] ReadFile (in: hFile=0x2cc, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f1d1c*=0xd, lpOverlapped=0x0) returned 1
	[0154.189] GetFileType (hFile=0x2cc) returned 0x1
	[0154.189] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.189] WriteFile (in: hFile=0x2cc, lpBuffer=0x124106f0*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124106f0*, lpNumberOfBytesWritten=0x124f1d00*=0xd, lpOverlapped=0x124f1d0c) returned 1
	[0154.189] GetFileType (hFile=0x2cc) returned 0x1
	[0154.189] SetFilePointerEx (in: hFile=0x2cc, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.190] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0154.190] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0154.190] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0154.190] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107f0 | out: pbBuffer=0x124107f0) returned 1
	[0154.190] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0154.190] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0154.190] WriteFile (in: hFile=0x344, lpBuffer=0x125fea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fea00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0154.190] CloseHandle (hObject=0x344) returned 1
	[0154.191] CloseHandle (hObject=0x2cc) returned 1
	[0154.191] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\8NES5H33\\get.adobe[1].xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\8nes5h33\\get.adobe[1].xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0154.195] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0154.230] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0154.230] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0154.268] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0154.268] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0154.269] SetEvent (hEvent=0x320) returned 1
	[0154.269] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0154.322] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0154.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0154.323] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0154.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x1d705b70, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0x1d705b70, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x125db390, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0154.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0154.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0154.324] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x124f5d1c*=0x8000, lpOverlapped=0x0) returned 1
	[0154.373] GetFileType (hFile=0x33c) returned 0x1
	[0154.374] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.374] WriteFile (in: hFile=0x33c, lpBuffer=0x1260c000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260c000*, lpNumberOfBytesWritten=0x124f5d00*=0x8000, lpOverlapped=0x124f5d0c) returned 1
	[0154.374] GetFileType (hFile=0x33c) returned 0x1
	[0154.374] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0154.374] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0154.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0154.375] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0154.375] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0154.375] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0154.375] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0154.375] CloseHandle (hObject=0x2cc) returned 1
	[0154.376] CloseHandle (hObject=0x33c) returned 1
	[0154.376] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\domstore\\index.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0154.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0154.379] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0154.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95014270, ftCreationTime.dwHighDateTime=0x1d2fab5, ftLastAccessTime.dwLowDateTime=0x95014270, ftLastAccessTime.dwHighDateTime=0x1d2fab5, ftLastWriteTime.dwLowDateTime=0x95014270, ftLastWriteTime.dwHighDateTime=0x1d2fab5, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0154.379] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0154.379] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0154.380] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0x4000, lpOverlapped=0x0) returned 1
	[0154.383] GetFileType (hFile=0x33c) returned 0x1
	[0154.384] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.384] WriteFile (in: hFile=0x33c, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x124f3d00*=0x4000, lpOverlapped=0x124f3d0c) returned 1
	[0154.384] GetFileType (hFile=0x33c) returned 0x1
	[0154.384] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.384] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0154.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0154.425] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0154.425] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881a0 | out: pbBuffer=0x127881a0) returned 1
	[0154.425] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0154.425] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0154.425] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0154.426] CloseHandle (hObject=0x2cc) returned 1
	[0154.426] CloseHandle (hObject=0x33c) returned 1
	[0154.426] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\MSIMGSIZ.DAT.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\msimgsiz.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0154.428] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0154.576] SetEvent (hEvent=0x2e4) returned 1
	[0154.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0154.578] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0154.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe35acf0, ftCreationTime.dwHighDateTime=0x1d35d06, ftLastAccessTime.dwLowDateTime=0xe35acf0, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x306293b0, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1
	[0154.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c560 | out: pbBuffer=0x1244c560) returned 1
	[0154.578] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881b8 | out: pbBuffer=0x127881b8) returned 1
	[0154.578] ReadFile (in: hFile=0x33c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1242bd1c*=0xe00, lpOverlapped=0x0) returned 1
	[0154.620] GetFileType (hFile=0x33c) returned 0x1
	[0154.620] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.620] WriteFile (in: hFile=0x33c, lpBuffer=0x1248b000*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1248b000*, lpNumberOfBytesWritten=0x1242bd00*=0xe00, lpOverlapped=0x1242bd0c) returned 1
	[0154.620] GetFileType (hFile=0x33c) returned 0x1
	[0154.620] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xe00, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0154.620] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0154.620] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0154.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0154.621] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0154.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0154.621] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0154.621] WriteFile (in: hFile=0x344, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0154.621] CloseHandle (hObject=0x344) returned 1
	[0154.622] CloseHandle (hObject=0x33c) returned 1
	[0154.622] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\RecoveryStore.{4BD650F1-C8F9-11E7-B5BF-C43DC7584A00}.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\recovery\\last active\\recoverystore.{4bd650f1-c8f9-11e7-b5bf-c43dc7584a00}.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.609] SetEvent (hEvent=0xa0) returned 1
	[0155.609] SetEvent (hEvent=0x2f4) returned 1
	[0155.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0155.610] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0155.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xb371c2, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x2fa9)) returned 1
	[0155.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ece0 | out: pbBuffer=0x1240ece0) returned 1
	[0155.610] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104d8 | out: pbBuffer=0x124104d8) returned 1
	[0155.610] ReadFile (in: hFile=0x33c, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x1242bd1c*=0x2fa9, lpOverlapped=0x0) returned 1
	[0155.616] GetFileType (hFile=0x33c) returned 0x1
	[0155.616] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.616] WriteFile (in: hFile=0x33c, lpBuffer=0x12766000*, nNumberOfBytesToWrite=0x2fa9, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12766000*, lpNumberOfBytesWritten=0x1242bd00*=0x2fa9, lpOverlapped=0x1242bd0c) returned 1
	[0155.617] GetFileType (hFile=0x33c) returned 0x1
	[0155.617] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x2fa9, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0155.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0155.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0155.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0155.617] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410590 | out: pbBuffer=0x12410590) returned 1
	[0155.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0155.617] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0155.617] WriteFile (in: hFile=0x34c, lpBuffer=0x127d8a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127d8a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0155.618] CloseHandle (hObject=0x34c) returned 1
	[0155.618] CloseHandle (hObject=0x33c) returned 1
	[0155.618] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0155.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28f14980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f14980, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d977900, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x2fb0)) returned 1
	[0155.627] SetEvent (hEvent=0x2f4) returned 1
	[0155.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Internet Explorer\\frameiconcache.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\internet explorer\\frameiconcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f7a2c | out: lpFileInformation=0x124f7a2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65d58120, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x65d58120, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x65d58120, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x23f4)) returned 1
	[0155.632] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0155.907] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0155.928] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.015] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.017] SetEvent (hEvent=0x2e4) returned 1
	[0156.017] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.018] SetEvent (hEvent=0x2e4) returned 1
	[0156.018] SetEvent (hEvent=0x68) returned 1
	[0156.018] SwitchToThread () returned 1
	[0156.020] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.025] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.041] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.070] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.121] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.154] SetEvent (hEvent=0x68) returned 1
	[0156.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.156] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.156] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1
	[0156.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0156.156] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0156.157] ReadFile (in: hFile=0x33c, lpBuffer=0x12938000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12938000*, lpNumberOfBytesRead=0x1242bd1c*=0x414, lpOverlapped=0x0) returned 1
	[0156.167] GetFileType (hFile=0x33c) returned 0x1
	[0156.167] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.167] WriteFile (in: hFile=0x33c, lpBuffer=0x125e6000*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125e6000*, lpNumberOfBytesWritten=0x1242bd00*=0x414, lpOverlapped=0x1242bd0c) returned 1
	[0156.167] GetFileType (hFile=0x33c) returned 0x1
	[0156.167] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x414, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.167] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0156.167] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0156.168] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0156.168] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0156.168] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.168] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.168] WriteFile (in: hFile=0x344, lpBuffer=0x12768000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12768000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.168] CloseHandle (hObject=0x344) returned 1
	[0156.168] CloseHandle (hObject=0x33c) returned 1
	[0156.169] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.171] SetEvent (hEvent=0x68) returned 1
	[0156.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.172] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x28eee820, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28eee820, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf73e9a4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1
	[0156.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0156.172] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0156.172] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x1242bd1c*=0x4f3, lpOverlapped=0x0) returned 1
	[0156.205] GetFileType (hFile=0x33c) returned 0x1
	[0156.205] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.205] WriteFile (in: hFile=0x33c, lpBuffer=0x12768500*, nNumberOfBytesToWrite=0x4f3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12768500*, lpNumberOfBytesWritten=0x1242bd00*=0x4f3, lpOverlapped=0x1242bd0c) returned 1
	[0156.205] GetFileType (hFile=0x33c) returned 0x1
	[0156.205] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4f3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0156.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0156.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0156.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744360 | out: pbBuffer=0x12744360) returned 1
	[0156.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0156.207] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0156.207] WriteFile (in: hFile=0x34c, lpBuffer=0x12768a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12768a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.207] CloseHandle (hObject=0x34c) returned 1
	[0156.208] CloseHandle (hObject=0x33c) returned 1
	[0156.208] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.241] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.502] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.509] SetEvent (hEvent=0x2e4) returned 1
	[0156.509] SwitchToThread () returned 1
	[0156.509] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.516] SetEvent (hEvent=0x2f4) returned 1
	[0156.516] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.601] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.626] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.682] SetEvent (hEvent=0x2f4) returned 1
	[0156.683] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.684] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5ef99320, ftCreationTime.dwHighDateTime=0x1d305f1, ftLastAccessTime.dwLowDateTime=0x5ef99320, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0x5efe55e0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x18ce0)) returned 1
	[0156.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127326c0 | out: pbBuffer=0x127326c0) returned 1
	[0156.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744518 | out: pbBuffer=0x12744518) returned 1
	[0156.684] ReadFile (in: hFile=0x33c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f3d1c*=0x18ce0, lpOverlapped=0x0) returned 1
	[0156.738] SetEvent (hEvent=0x320) returned 1
	[0156.738] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0156.742] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.742] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0156.743] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0156.743] SetEvent (hEvent=0x80) returned 1
	[0156.743] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0156.748] GetFileType (hFile=0x33c) returned 0x1
	[0156.748] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.748] WriteFile (in: hFile=0x33c, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x18ce0, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x124f1d00*=0x18ce0, lpOverlapped=0x124f1d0c) returned 1
	[0156.750] GetFileType (hFile=0x33c) returned 0x1
	[0156.750] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x18ce0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.750] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0156.750] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0156.750] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0156.750] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0156.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.750] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0156.750] WriteFile (in: hFile=0x344, lpBuffer=0x127ee000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x127ee000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.751] CloseHandle (hObject=0x344) returned 1
	[0156.780] CloseHandle (hObject=0x33c) returned 1
	[0156.785] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Visio\\content14.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\visio\\content14.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.804] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.890] SetEvent (hEvent=0x2f4) returned 1
	[0156.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.891] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8c39470, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb8c39470, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb8cd19f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xb67e)) returned 1
	[0156.891] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127320c0 | out: pbBuffer=0x127320c0) returned 1
	[0156.891] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0156.892] ReadFile (in: hFile=0x33c, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f3d1c*=0xb67e, lpOverlapped=0x0) returned 1
	[0156.903] GetFileType (hFile=0x33c) returned 0x1
	[0156.904] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.904] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0xb67e, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x124f3d00*=0xb67e, lpOverlapped=0x124f3d0c) returned 1
	[0156.904] GetFileType (hFile=0x33c) returned 0x1
	[0156.904] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xb67e, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.904] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0156.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec301 | out: pbBuffer=0x124ec301) returned 1
	[0156.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec401 | out: pbBuffer=0x124ec401) returned 1
	[0156.905] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0156.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0156.905] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0156.905] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.905] CloseHandle (hObject=0x344) returned 1
	[0156.906] CloseHandle (hObject=0x33c) returned 1
	[0156.906] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\98\\B60F3d01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\98\\b60f3d01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.923] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0156.938] SetEvent (hEvent=0x2f4) returned 1
	[0156.938] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0156.939] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81eff750, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81eff750, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81eff750, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4898)) returned 1
	[0156.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322e0 | out: pbBuffer=0x127322e0) returned 1
	[0156.939] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410548 | out: pbBuffer=0x12410548) returned 1
	[0156.940] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f5d1c*=0x4898, lpOverlapped=0x0) returned 1
	[0156.950] GetFileType (hFile=0x33c) returned 0x1
	[0156.950] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.950] WriteFile (in: hFile=0x33c, lpBuffer=0x12612000*, nNumberOfBytesToWrite=0x4898, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12612000*, lpNumberOfBytesWritten=0x124f5d00*=0x4898, lpOverlapped=0x124f5d0c) returned 1
	[0156.950] GetFileType (hFile=0x33c) returned 0x1
	[0156.950] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4898, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0156.950] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec501 | out: pbBuffer=0x124ec501) returned 1
	[0156.951] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec601 | out: pbBuffer=0x124ec601) returned 1
	[0156.951] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0156.951] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124106d0 | out: pbBuffer=0x124106d0) returned 1
	[0156.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0156.951] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0156.951] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0156.951] CloseHandle (hObject=0x2cc) returned 1
	[0156.951] CloseHandle (hObject=0x33c) returned 1
	[0156.952] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\0\\A8\\C3B7Bd01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\0\\a8\\c3b7bd01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0156.960] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0157.055] SetEvent (hEvent=0x2e4) returned 1
	[0157.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0157.057] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0157.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x826bbed0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x826bbed0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8272e2f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xaa05)) returned 1
	[0157.057] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732500 | out: pbBuffer=0x12732500) returned 1
	[0157.057] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106e8 | out: pbBuffer=0x124106e8) returned 1
	[0157.058] ReadFile (in: hFile=0x33c, lpBuffer=0x1268e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x1268e000*, lpNumberOfBytesRead=0x124f1d1c*=0xaa05, lpOverlapped=0x0) returned 1
	[0157.085] GetFileType (hFile=0x33c) returned 0x1
	[0157.085] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.086] WriteFile (in: hFile=0x33c, lpBuffer=0x12624000*, nNumberOfBytesToWrite=0xaa05, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12624000*, lpNumberOfBytesWritten=0x124f1d00*=0xaa05, lpOverlapped=0x124f1d0c) returned 1
	[0157.086] GetFileType (hFile=0x33c) returned 0x1
	[0157.086] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xaa05, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec801 | out: pbBuffer=0x124ec801) returned 1
	[0157.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0157.087] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0157.087] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107e0 | out: pbBuffer=0x124107e0) returned 1
	[0157.087] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0157.087] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0157.087] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.087] CloseHandle (hObject=0x34c) returned 1
	[0157.087] CloseHandle (hObject=0x33c) returned 1
	[0157.087] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\1\\C2\\0B619d01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\1\\c2\\0b619d01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.090] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0157.237] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0157.274] SetEvent (hEvent=0x2e4) returned 1
	[0157.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0157.275] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0157.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb7f47cd0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb7f47cd0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb7fba0f0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xa949)) returned 1
	[0157.276] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0157.276] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0157.276] ReadFile (in: hFile=0x340, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1242bd1c*=0xa949, lpOverlapped=0x0) returned 1
	[0157.731] GetFileType (hFile=0x340) returned 0x1
	[0157.731] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.731] WriteFile (in: hFile=0x340, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0xa949, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1242bd00*=0xa949, lpOverlapped=0x1242bd0c) returned 1
	[0157.749] GetFileType (hFile=0x340) returned 0x1
	[0157.749] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0xa949, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0157.749] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0157.749] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0157.749] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0157.750] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744660 | out: pbBuffer=0x12744660) returned 1
	[0157.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0157.750] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0157.750] WriteFile (in: hFile=0x34c, lpBuffer=0x125f2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125f2500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0157.754] CloseHandle (hObject=0x34c) returned 1
	[0157.754] CloseHandle (hObject=0x340) returned 1
	[0157.758] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\Cache\\9\\61\\28E95d01.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\cache\\9\\61\\28e95d01.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0157.789] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0157.811] SetEvent (hEvent=0x2e4) returned 1
	[0157.811] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0157.822] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0157.870] SetEvent (hEvent=0x2e4) returned 1
	[0157.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0157.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0157.874] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\*", lpFindFileData=0x124f783c | out: lpFindFileData=0x124f783c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0157.874] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbece2650, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbecfd400, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbecfd400, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0157.874] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc399b820, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.sqlite", cAlternateFileName="INDEX~1.SQL")) returned 1
	[0157.874] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x124f7880 | out: lpFindFileData=0x124f7880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0157.875] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0157.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x124f7504 | out: lpFileInformation=0x124f7504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0157.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0157.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0157.876] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f7714 | out: lpMode=0x124f7714) returned 0
	[0157.876] WriteFile (in: hFile=0x2cc, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x124f7714, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x124f7714*=0x1180, lpOverlapped=0x0) returned 1
	[0157.877] CloseHandle (hObject=0x2cc) returned 1
	[0157.877] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\offlinecache\\index.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x124f7900 | out: lpFileInformation=0x124f7900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbece4d60, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbece4d60, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc399b820, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1
	[0157.878] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0158.584] SetEvent (hEvent=0x2e4) returned 1
	[0158.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\_cache_clean_"), fInfoLevelId=0x0, lpFileInformation=0x124f7964 | out: lpFileInformation=0x124f7964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb64f2970, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb64f2970, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853a9e10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1
	[0158.585] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0158.640] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0158.672] SetEvent (hEvent=0x2e4) returned 1
	[0158.672] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0158.682] SetEvent (hEvent=0x2e4) returned 1
	[0158.682] SwitchToThread () returned 1
	[0159.337] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.348] SwitchToThread () returned 1
	[0159.402] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.434] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.467] SetEvent (hEvent=0x320) returned 1
	[0159.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0159.468] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0159.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x83ce6bb0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x83ce6bb0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x83ce6bb0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x40b0)) returned 1
	[0159.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ec20 | out: pbBuffer=0x1240ec20) returned 1
	[0159.468] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127443c8 | out: pbBuffer=0x127443c8) returned 1
	[0159.469] ReadFile (in: hFile=0x33c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x124f1d1c*=0x40b0, lpOverlapped=0x0) returned 1
	[0159.495] GetFileType (hFile=0x33c) returned 0x1
	[0159.495] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.495] WriteFile (in: hFile=0x33c, lpBuffer=0x128aa000*, nNumberOfBytesToWrite=0x40b0, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x128aa000*, lpNumberOfBytesWritten=0x124f1d00*=0x40b0, lpOverlapped=0x124f1d0c) returned 1
	[0159.495] GetFileType (hFile=0x33c) returned 0x1
	[0159.495] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x40b0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.495] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0159.496] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0159.496] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0159.496] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744540 | out: pbBuffer=0x12744540) returned 1
	[0159.496] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0159.496] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0159.496] WriteFile (in: hFile=0x354, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.497] CloseHandle (hObject=0x354) returned 1
	[0159.497] CloseHandle (hObject=0x33c) returned 1
	[0159.497] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\firefox\\profiles\\silmbjec.default\\thumbnails\\ba182bcd131f1f3c6b6fbbb1ba078341.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.503] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.542] SetEvent (hEvent=0x2f4) returned 1
	[0159.542] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.545] SetEvent (hEvent=0x320) returned 1
	[0159.545] SetEvent (hEvent=0x68) returned 1
	[0159.546] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.547] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.584] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0159.585] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0159.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80a9daf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8548e650, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x8548e650, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1
	[0159.585] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0159.585] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0159.585] ReadFile (in: hFile=0x340, lpBuffer=0x128fc000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x128fc000*, lpNumberOfBytesRead=0x1245dd1c*=0x39, lpOverlapped=0x0) returned 1
	[0159.587] GetFileType (hFile=0x340) returned 0x1
	[0159.587] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.587] WriteFile (in: hFile=0x340, lpBuffer=0x1240c140*, nNumberOfBytesToWrite=0x39, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x1240c140*, lpNumberOfBytesWritten=0x1245dd00*=0x39, lpOverlapped=0x1245dd0c) returned 1
	[0159.587] GetFileType (hFile=0x340) returned 0x1
	[0159.588] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x39, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0159.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0159.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0159.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0159.588] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0159.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0159.588] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0159.589] WriteFile (in: hFile=0x350, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0159.589] CloseHandle (hObject=0x350) returned 1
	[0159.589] CloseHandle (hObject=0x340) returned 1
	[0159.589] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Mozilla\\updates\\E7CF176E110C211B\\updates.xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\mozilla\\updates\\e7cf176e110c211b\\updates.xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0159.625] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.768] SetEvent (hEvent=0x320) returned 1
	[0159.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1x9KM3ij7oR1bcZ3I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1x9km3ij7or1bcz3i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0159.769] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0159.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1x9KM3ij7oR1bcZ3I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1x9km3ij7or1bcz3i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3bfcb480, ftCreationTime.dwHighDateTime=0x1d5d991, ftLastAccessTime.dwLowDateTime=0xdb4b7960, ftLastAccessTime.dwHighDateTime=0x1d5e05b, ftLastWriteTime.dwLowDateTime=0xdb4b7960, ftLastWriteTime.dwHighDateTime=0x1d5e05b, nFileSizeHigh=0x0, nFileSizeLow=0x170cf)) returned 1
	[0159.773] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0159.773] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440e8 | out: pbBuffer=0x127440e8) returned 1
	[0159.773] ReadFile (in: hFile=0x344, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x12429d1c*=0x170cf, lpOverlapped=0x0) returned 1
	[0159.910] SetEvent (hEvent=0x80) returned 1
	[0159.910] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0159.965] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0159.965] SetEvent (hEvent=0x80) returned 1
	[0159.965] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0160.003] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0160.003] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0160.048] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0160.048] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0160.048] SetEvent (hEvent=0x68) returned 1
	[0160.048] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0160.108] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0160.109] GetFileType (hFile=0x344) returned 0x1
	[0160.109] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0160.109] WriteFile (in: hFile=0x344, lpBuffer=0x12654000*, nNumberOfBytesToWrite=0x170cf, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x12654000*, lpNumberOfBytesWritten=0x1245bd00*=0x170cf, lpOverlapped=0x1245bd0c) returned 1
	[0160.110] GetFileType (hFile=0x344) returned 0x1
	[0160.110] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x170cf, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0160.110] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0160.110] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0160.110] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0160.111] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440c0 | out: pbBuffer=0x127440c0) returned 1
	[0160.111] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1x9KM3ij7oR1bcZ3I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1x9km3ij7or1bcz3i.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0160.111] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0160.111] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0160.111] CloseHandle (hObject=0x33c) returned 1
	[0160.111] CloseHandle (hObject=0x344) returned 1
	[0160.111] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1x9KM3ij7oR1bcZ3I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1x9km3ij7or1bcz3i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\1x9KM3ij7oR1bcZ3I.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\1x9km3ij7or1bcz3i.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0160.892] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0161.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.083] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0161.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xd97fe0a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd97fe0a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xd9824200, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x91)) returned 1
	[0161.083] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f580 | out: pbBuffer=0x1240f580) returned 1
	[0161.083] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105e8 | out: pbBuffer=0x124105e8) returned 1
	[0161.083] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0161.120] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0161.120] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0161.120] SetEvent (hEvent=0xa0) returned 1
	[0161.120] SetEvent (hEvent=0x320) returned 1
	[0161.120] SetEvent (hEvent=0x2f4) returned 1
	[0161.120] ReadFile (in: hFile=0x340, lpBuffer=0x12902000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12902000*, lpNumberOfBytesRead=0x1245bd1c*=0x91, lpOverlapped=0x0) returned 1
	[0161.122] GetFileType (hFile=0x340) returned 0x1
	[0161.122] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.122] WriteFile (in: hFile=0x340, lpBuffer=0x127805a0*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x127805a0*, lpNumberOfBytesWritten=0x1245bd00*=0x91, lpOverlapped=0x1245bd0c) returned 1
	[0161.122] GetFileType (hFile=0x340) returned 0x1
	[0161.122] SetFilePointerEx (in: hFile=0x340, liDistanceToMove=0x91, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.122] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c01 | out: pbBuffer=0x12434c01) returned 1
	[0161.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d01 | out: pbBuffer=0x12434d01) returned 1
	[0161.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e01 | out: pbBuffer=0x12434e01) returned 1
	[0161.123] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410830 | out: pbBuffer=0x12410830) returned 1
	[0161.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0161.123] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0161.123] WriteFile (in: hFile=0x354, lpBuffer=0x125faf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125faf00*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.123] CloseHandle (hObject=0x354) returned 1
	[0161.123] CloseHandle (hObject=0x340) returned 1
	[0161.124] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.170] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0161.239] SetEvent (hEvent=0x320) returned 1
	[0161.239] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0161.277] SetEvent (hEvent=0x320) returned 1
	[0161.277] SetEvent (hEvent=0x68) returned 1
	[0161.278] GetFileType (hFile=0x350) returned 0x1
	[0161.278] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.278] WriteFile (in: hFile=0x350, lpBuffer=0x1248a000*, nNumberOfBytesToWrite=0x3fd9, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1248a000*, lpNumberOfBytesWritten=0x1242bd00*=0x3fd9, lpOverlapped=0x1242bd0c) returned 1
	[0161.278] GetFileType (hFile=0x350) returned 0x1
	[0161.278] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x3fd9, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.278] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0161.278] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0161.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0161.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103b0 | out: pbBuffer=0x124103b0) returned 1
	[0161.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\HHEL 1bNv--OY.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hhel 1bnv--oy.odp"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x340
	[0161.279] GetConsoleMode (in: hConsoleHandle=0x340, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0161.279] WriteFile (in: hFile=0x340, lpBuffer=0x125fa000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125fa000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.279] CloseHandle (hObject=0x340) returned 1
	[0161.280] CloseHandle (hObject=0x350) returned 1
	[0161.280] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\HHEL 1bNv--OY.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hhel 1bnv--oy.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\HHEL 1bNv--OY.odp.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\hhel 1bnv--oy.odp.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.285] GetFileType (hFile=0x33c) returned 0x1
	[0161.285] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.285] WriteFile (in: hFile=0x33c, lpBuffer=0x1253a000*, nNumberOfBytesToWrite=0x10ade, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x1253a000*, lpNumberOfBytesWritten=0x1245dd00*=0x10ade, lpOverlapped=0x1245dd0c) returned 1
	[0161.286] GetFileType (hFile=0x33c) returned 0x1
	[0161.286] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x10ade, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0161.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0161.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0161.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105c0 | out: pbBuffer=0x124105c0) returned 1
	[0161.286] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LZJv.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lzjv.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0161.287] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0161.287] WriteFile (in: hFile=0x350, lpBuffer=0x125fa500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125fa500*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.287] CloseHandle (hObject=0x350) returned 1
	[0161.287] CloseHandle (hObject=0x33c) returned 1
	[0161.287] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LZJv.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lzjv.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\LZJv.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\lzjv.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.292] GetFileType (hFile=0x344) returned 0x1
	[0161.292] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.292] WriteFile (in: hFile=0x344, lpBuffer=0x124fa000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x124fa000*, lpNumberOfBytesWritten=0x124f5d00*=0x4000, lpOverlapped=0x124f5d0c) returned 1
	[0161.293] GetFileType (hFile=0x344) returned 0x1
	[0161.293] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0161.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0161.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a81 | out: pbBuffer=0x12434a81) returned 1
	[0161.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410750 | out: pbBuffer=0x12410750) returned 1
	[0161.294] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0161.294] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0161.294] WriteFile (in: hFile=0x33c, lpBuffer=0x125faa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125faa00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.294] CloseHandle (hObject=0x33c) returned 1
	[0161.294] CloseHandle (hObject=0x344) returned 1
	[0161.294] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\History\\History.IE5\\index.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\history\\history.ie5\\index.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.296] SwitchToThread () returned 1
	[0161.355] SetEvent (hEvent=0x80) returned 1
	[0161.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\MsNG1LoqgdS VIpC w8I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\msng1loqgds vipc w8i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0161.355] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0161.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\MsNG1LoqgdS VIpC w8I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\msng1loqgds vipc w8i.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x680029f0, ftCreationTime.dwHighDateTime=0x1d5ded1, ftLastAccessTime.dwLowDateTime=0x9e58d670, ftLastAccessTime.dwHighDateTime=0x1d5e780, ftLastWriteTime.dwLowDateTime=0x9e58d670, ftLastWriteTime.dwHighDateTime=0x1d5e780, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1
	[0161.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f520 | out: pbBuffer=0x1240f520) returned 1
	[0161.356] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410778 | out: pbBuffer=0x12410778) returned 1
	[0161.356] ReadFile (in: hFile=0x350, lpBuffer=0x12692000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12692000*, lpNumberOfBytesRead=0x1245dd1c*=0x4edd, lpOverlapped=0x0) returned 1
	[0161.434] GetFileType (hFile=0x350) returned 0x1
	[0161.435] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.435] WriteFile (in: hFile=0x350, lpBuffer=0x12674000*, nNumberOfBytesToWrite=0x4edd, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12674000*, lpNumberOfBytesWritten=0x1245dd00*=0x4edd, lpOverlapped=0x1245dd0c) returned 1
	[0161.435] GetFileType (hFile=0x350) returned 0x1
	[0161.435] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x4edd, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0161.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b81 | out: pbBuffer=0x12434b81) returned 1
	[0161.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434f81 | out: pbBuffer=0x12434f81) returned 1
	[0161.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435081 | out: pbBuffer=0x12435081) returned 1
	[0161.435] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410960 | out: pbBuffer=0x12410960) returned 1
	[0161.435] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\MsNG1LoqgdS VIpC w8I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\msng1loqgds vipc w8i.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x354
	[0161.436] GetConsoleMode (in: hConsoleHandle=0x354, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0161.436] WriteFile (in: hFile=0x354, lpBuffer=0x125fb400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125fb400*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0161.436] CloseHandle (hObject=0x354) returned 1
	[0161.436] CloseHandle (hObject=0x350) returned 1
	[0161.436] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\MsNG1LoqgdS VIpC w8I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\msng1loqgds vipc w8i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\MsNG1LoqgdS VIpC w8I.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\msng1loqgds vipc w8i.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0161.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\QeS5KaTkQ97fY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qes5katkq97fy.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0161.442] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0161.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Temp\\QeS5KaTkQ97fY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\temp\\qes5katkq97fy.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24e2ef90, ftCreationTime.dwHighDateTime=0x1d5e7a5, ftLastAccessTime.dwLowDateTime=0x43439c80, ftLastAccessTime.dwHighDateTime=0x1d5dfa5, ftLastWriteTime.dwLowDateTime=0x43439c80, ftLastWriteTime.dwHighDateTime=0x1d5dfa5, nFileSizeHigh=0x0, nFileSizeLow=0x1819b)) returned 1
	[0161.442] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f940 | out: pbBuffer=0x1240f940) returned 1
	[0161.442] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410978 | out: pbBuffer=0x12410978) returned 1
	[0161.442] ReadFile (in: hFile=0x350, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1245dd1c*=0x1819b, lpOverlapped=0x0) returned 1
	[0161.530] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0161.976] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0162.035] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0162.106] SetEvent (hEvent=0x68) returned 1
	[0162.106] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0162.111] SetEvent (hEvent=0x70) returned 1
	[0162.111] SetEvent (hEvent=0x80) returned 1
	[0162.111] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0162.115] SetEvent (hEvent=0x68) returned 1
	[0162.175] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0162.191] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0162.563] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.145] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.148] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.156] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.235] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.249] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.281] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.301] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.311] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7396c420a8e1bc1da97f1af0d10bad21"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.320] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.320] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7396c420a8e1bc1da97f1af0d10bad21"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a)) returned 1
	[0163.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c760 | out: pbBuffer=0x1244c760) returned 1
	[0163.320] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788298 | out: pbBuffer=0x12788298) returned 1
	[0163.320] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0163.320] SetEvent (hEvent=0x80) returned 1
	[0163.321] ReadFile (in: hFile=0x34c, lpBuffer=0x1288e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1288e000*, lpNumberOfBytesRead=0x124f3d1c*=0x22a, lpOverlapped=0x0) returned 1
	[0163.323] GetFileType (hFile=0x34c) returned 0x1
	[0163.323] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.323] WriteFile (in: hFile=0x34c, lpBuffer=0x1244a240*, nNumberOfBytesToWrite=0x22a, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1244a240*, lpNumberOfBytesWritten=0x124f3d00*=0x22a, lpOverlapped=0x124f3d0c) returned 1
	[0163.323] GetFileType (hFile=0x34c) returned 0x1
	[0163.323] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x22a, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecc81 | out: pbBuffer=0x124ecc81) returned 1
	[0163.323] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecd81 | out: pbBuffer=0x124ecd81) returned 1
	[0163.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0163.324] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788350 | out: pbBuffer=0x12788350) returned 1
	[0163.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7396c420a8e1bc1da97f1af0d10bad21"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.324] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.324] WriteFile (in: hFile=0x2cc, lpBuffer=0x125ce000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x125ce000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.324] CloseHandle (hObject=0x2cc) returned 1
	[0163.327] CloseHandle (hObject=0x34c) returned 1
	[0163.328] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.329] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7396c420a8e1bc1da97f1af0d10bad21"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7396c420a8e1bc1da97f1af0d10bad21.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.358] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.362] SetEvent (hEvent=0x68) returned 1
	[0163.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.363] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa)) returned 1
	[0163.363] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0163.363] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e100 | out: pbBuffer=0x1251e100) returned 1
	[0163.363] ReadFile (in: hFile=0x34c, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x1245dd1c*=0x1fa, lpOverlapped=0x0) returned 1
	[0163.364] GetFileType (hFile=0x34c) returned 0x1
	[0163.364] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.364] WriteFile (in: hFile=0x34c, lpBuffer=0x1248a000*, nNumberOfBytesToWrite=0x1fa, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x1248a000*, lpNumberOfBytesWritten=0x1245dd00*=0x1fa, lpOverlapped=0x1245dd0c) returned 1
	[0163.365] GetFileType (hFile=0x34c) returned 0x1
	[0163.365] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1fa, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca481 | out: pbBuffer=0x127ca481) returned 1
	[0163.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca581 | out: pbBuffer=0x127ca581) returned 1
	[0163.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca681 | out: pbBuffer=0x127ca681) returned 1
	[0163.365] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e538 | out: pbBuffer=0x1251e538) returned 1
	[0163.365] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.365] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.365] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.366] CloseHandle (hObject=0x344) returned 1
	[0163.367] CloseHandle (hObject=0x34c) returned 1
	[0163.370] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7b2238aaccedc3f1ffe8e7eb5f575ec9.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.402] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.404] SetEvent (hEvent=0x2f4) returned 1
	[0163.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.405] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0163.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127326c0 | out: pbBuffer=0x127326c0) returned 1
	[0163.405] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e750 | out: pbBuffer=0x1251e750) returned 1
	[0163.405] ReadFile (in: hFile=0x34c, lpBuffer=0x1288a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1288a000*, lpNumberOfBytesRead=0x1245dd1c*=0x6e3, lpOverlapped=0x0) returned 1
	[0163.408] GetFileType (hFile=0x34c) returned 0x1
	[0163.408] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.408] WriteFile (in: hFile=0x34c, lpBuffer=0x12518e00*, nNumberOfBytesToWrite=0x6e3, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12518e00*, lpNumberOfBytesWritten=0x1245dd00*=0x6e3, lpOverlapped=0x1245dd0c) returned 1
	[0163.409] GetFileType (hFile=0x34c) returned 0x1
	[0163.409] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x6e3, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.409] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cab81 | out: pbBuffer=0x127cab81) returned 1
	[0163.409] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cac81 | out: pbBuffer=0x127cac81) returned 1
	[0163.409] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cad81 | out: pbBuffer=0x127cad81) returned 1
	[0163.409] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e868 | out: pbBuffer=0x1251e868) returned 1
	[0163.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.410] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.410] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.410] CloseHandle (hObject=0x2cc) returned 1
	[0163.411] CloseHandle (hObject=0x34c) returned 1
	[0163.412] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.428] SetEvent (hEvent=0x2e4) returned 1
	[0163.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.428] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732b00 | out: pbBuffer=0x12732b00) returned 1
	[0163.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e9b0 | out: pbBuffer=0x1251e9b0) returned 1
	[0163.429] ReadFile (in: hFile=0x34c, lpBuffer=0x12542000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12542000*, lpNumberOfBytesRead=0x1245dd1c*=0x1cf, lpOverlapped=0x0) returned 1
	[0163.431] GetFileType (hFile=0x34c) returned 0x1
	[0163.431] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.431] WriteFile (in: hFile=0x34c, lpBuffer=0x12534b40*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12534b40*, lpNumberOfBytesWritten=0x1245dd00*=0x1cf, lpOverlapped=0x1245dd0c) returned 1
	[0163.431] GetFileType (hFile=0x34c) returned 0x1
	[0163.431] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1cf, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cb181 | out: pbBuffer=0x127cb181) returned 1
	[0163.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cb281 | out: pbBuffer=0x127cb281) returned 1
	[0163.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cb381 | out: pbBuffer=0x127cb381) returned 1
	[0163.432] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ead8 | out: pbBuffer=0x1251ead8) returned 1
	[0163.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.432] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.432] WriteFile (in: hFile=0x2cc, lpBuffer=0x125cea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125cea00*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.432] CloseHandle (hObject=0x2cc) returned 1
	[0163.439] CloseHandle (hObject=0x34c) returned 1
	[0163.440] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_294110d6990ee392327f8a606d55bc1e.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.463] SetEvent (hEvent=0x2e4) returned 1
	[0163.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.463] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732f40 | out: pbBuffer=0x12732f40) returned 1
	[0163.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251ebd0 | out: pbBuffer=0x1251ebd0) returned 1
	[0163.463] ReadFile (in: hFile=0x350, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x1245dd1c*=0x1cf, lpOverlapped=0x0) returned 1
	[0163.465] GetFileType (hFile=0x350) returned 0x1
	[0163.465] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.465] WriteFile (in: hFile=0x350, lpBuffer=0x12534f00*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12534f00*, lpNumberOfBytesWritten=0x1245dd00*=0x1cf, lpOverlapped=0x1245dd0c) returned 1
	[0163.465] GetFileType (hFile=0x350) returned 0x1
	[0163.465] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1cf, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cb781 | out: pbBuffer=0x127cb781) returned 1
	[0163.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cb881 | out: pbBuffer=0x127cb881) returned 1
	[0163.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cb981 | out: pbBuffer=0x127cb981) returned 1
	[0163.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251ec98 | out: pbBuffer=0x1251ec98) returned 1
	[0163.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.466] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0163.466] WriteFile (in: hFile=0x34c, lpBuffer=0x125cf400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125cf400*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.466] CloseHandle (hObject=0x34c) returned 1
	[0163.468] CloseHandle (hObject=0x350) returned 1
	[0163.469] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_581c904db5924e46a6c1a8637614a40e.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.488] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0163.488] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.488] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0163.489] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788038 | out: pbBuffer=0x12788038) returned 1
	[0163.489] ReadFile (in: hFile=0x350, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x124f3d1c*=0x1cf, lpOverlapped=0x0) returned 1
	[0163.490] GetFileType (hFile=0x350) returned 0x1
	[0163.490] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.490] WriteFile (in: hFile=0x350, lpBuffer=0x12534000*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12534000*, lpNumberOfBytesWritten=0x124f3d00*=0x1cf, lpOverlapped=0x124f3d0c) returned 1
	[0163.491] GetFileType (hFile=0x350) returned 0x1
	[0163.491] SetFilePointerEx (in: hFile=0x350, liDistanceToMove=0x1cf, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.491] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca001 | out: pbBuffer=0x127ca001) returned 1
	[0163.491] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca101 | out: pbBuffer=0x127ca101) returned 1
	[0163.491] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca201 | out: pbBuffer=0x127ca201) returned 1
	[0163.491] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880f0 | out: pbBuffer=0x127880f0) returned 1
	[0163.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.491] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.491] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.492] CloseHandle (hObject=0x34c) returned 1
	[0163.517] CloseHandle (hObject=0x350) returned 1
	[0163.521] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.548] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.551] SetEvent (hEvent=0x320) returned 1
	[0163.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.552] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.552] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1
	[0163.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c560 | out: pbBuffer=0x1244c560) returned 1
	[0163.552] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881e8 | out: pbBuffer=0x127881e8) returned 1
	[0163.552] ReadFile (in: hFile=0x34c, lpBuffer=0x12562000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12562000*, lpNumberOfBytesRead=0x124f3d1c*=0x1cf, lpOverlapped=0x0) returned 1
	[0163.554] GetFileType (hFile=0x34c) returned 0x1
	[0163.554] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.554] WriteFile (in: hFile=0x34c, lpBuffer=0x125343c0*, nNumberOfBytesToWrite=0x1cf, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x125343c0*, lpNumberOfBytesWritten=0x124f3d00*=0x1cf, lpOverlapped=0x124f3d0c) returned 1
	[0163.554] GetFileType (hFile=0x34c) returned 0x1
	[0163.554] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1cf, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.554] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca601 | out: pbBuffer=0x127ca601) returned 1
	[0163.554] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca701 | out: pbBuffer=0x127ca701) returned 1
	[0163.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca801 | out: pbBuffer=0x127ca801) returned 1
	[0163.555] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127882a0 | out: pbBuffer=0x127882a0) returned 1
	[0163.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.555] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.555] WriteFile (in: hFile=0x2cc, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.555] CloseHandle (hObject=0x2cc) returned 1
	[0163.557] CloseHandle (hObject=0x34c) returned 1
	[0163.558] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.577] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.581] SetEvent (hEvent=0x320) returned 1
	[0163.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.582] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0163.582] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c7a0 | out: pbBuffer=0x1244c7a0) returned 1
	[0163.582] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127882c8 | out: pbBuffer=0x127882c8) returned 1
	[0163.582] ReadFile (in: hFile=0x34c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f3d1c*=0x6e3, lpOverlapped=0x0) returned 1
	[0163.585] GetFileType (hFile=0x34c) returned 0x1
	[0163.585] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.585] WriteFile (in: hFile=0x34c, lpBuffer=0x12518700*, nNumberOfBytesToWrite=0x6e3, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12518700*, lpNumberOfBytesWritten=0x124f3d00*=0x6e3, lpOverlapped=0x124f3d0c) returned 1
	[0163.585] GetFileType (hFile=0x34c) returned 0x1
	[0163.585] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x6e3, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.585] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127ca901 | out: pbBuffer=0x127ca901) returned 1
	[0163.586] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127caa01 | out: pbBuffer=0x127caa01) returned 1
	[0163.586] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cab01 | out: pbBuffer=0x127cab01) returned 1
	[0163.586] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788390 | out: pbBuffer=0x12788390) returned 1
	[0163.586] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0163.586] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.586] WriteFile (in: hFile=0x344, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.587] CloseHandle (hObject=0x344) returned 1
	[0163.588] CloseHandle (hObject=0x34c) returned 1
	[0163.589] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.609] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.612] SetEvent (hEvent=0x320) returned 1
	[0163.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0163.613] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.613] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da)) returned 1
	[0163.614] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c9c0 | out: pbBuffer=0x1244c9c0) returned 1
	[0163.614] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127883a8 | out: pbBuffer=0x127883a8) returned 1
	[0163.614] ReadFile (in: hFile=0x34c, lpBuffer=0x128ca000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x128ca000*, lpNumberOfBytesRead=0x124f3d1c*=0xd2da, lpOverlapped=0x0) returned 1
	[0163.618] GetFileType (hFile=0x34c) returned 0x1
	[0163.618] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.618] WriteFile (in: hFile=0x34c, lpBuffer=0x127d6000*, nNumberOfBytesToWrite=0xd2da, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127d6000*, lpNumberOfBytesWritten=0x124f3d00*=0xd2da, lpOverlapped=0x124f3d0c) returned 1
	[0163.618] GetFileType (hFile=0x34c) returned 0x1
	[0163.618] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xd2da, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0163.618] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cad01 | out: pbBuffer=0x127cad01) returned 1
	[0163.619] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127cae01 | out: pbBuffer=0x127cae01) returned 1
	[0163.619] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127caf01 | out: pbBuffer=0x127caf01) returned 1
	[0163.619] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788460 | out: pbBuffer=0x12788460) returned 1
	[0163.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0163.619] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0163.619] WriteFile (in: hFile=0x2cc, lpBuffer=0x127d0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d0000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0163.620] CloseHandle (hObject=0x2cc) returned 1
	[0163.622] CloseHandle (hObject=0x34c) returned 1
	[0163.623] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\94308059b57b3142e455b38a6eb92015.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0163.642] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0163.646] SetEvent (hEvent=0x2f4) returned 1
	[0163.646] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0163.650] SetEvent (hEvent=0x320) returned 1
	[0163.650] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0163.650] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0163.651] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0163.651] SetEvent (hEvent=0x80) returned 1
	[0163.651] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0163.651] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0165.115] SetEvent (hEvent=0x318) returned 1
	[0165.115] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0165.151] SetEvent (hEvent=0x318) returned 1
	[0165.151] SwitchToThread () returned 1
	[0165.279] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0165.592] SetEvent (hEvent=0x318) returned 1
	[0165.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0165.593] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0165.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3)) returned 1
	[0165.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0165.594] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0165.594] ReadFile (in: hFile=0x344, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x1242bd1c*=0x6e3, lpOverlapped=0x0) returned 1
	[0165.630] GetFileType (hFile=0x344) returned 0x1
	[0165.630] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0165.630] WriteFile (in: hFile=0x344, lpBuffer=0x12518700*, nNumberOfBytesToWrite=0x6e3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12518700*, lpNumberOfBytesWritten=0x1242bd00*=0x6e3, lpOverlapped=0x1242bd0c) returned 1
	[0165.630] GetFileType (hFile=0x344) returned 0x1
	[0165.631] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x6e3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0165.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0165.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0165.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0165.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0165.631] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2cc
	[0165.631] GetConsoleMode (in: hConsoleHandle=0x2cc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0165.631] WriteFile (in: hFile=0x2cc, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0165.631] CloseHandle (hObject=0x2cc) returned 1
	[0165.711] CloseHandle (hObject=0x344) returned 1
	[0165.778] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\c46e7b0f942663a1edc8d9d6d7869173_42820cdfea41dc84aab89a6b63561873.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0166.874] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0166.880] SetEvent (hEvent=0x68) returned 1
	[0166.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0166.881] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0166.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1
	[0166.882] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0166.882] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0166.882] ReadFile (in: hFile=0x34c, lpBuffer=0x125a2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x125a2000*, lpNumberOfBytesRead=0x1245bd1c*=0x5ae, lpOverlapped=0x0) returned 1
	[0166.886] GetFileType (hFile=0x34c) returned 0x1
	[0166.886] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.886] WriteFile (in: hFile=0x34c, lpBuffer=0x12460000*, nNumberOfBytesToWrite=0x5ae, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x12460000*, lpNumberOfBytesWritten=0x1245bd00*=0x5ae, lpOverlapped=0x1245bd0c) returned 1
	[0166.887] GetFileType (hFile=0x34c) returned 0x1
	[0166.887] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x5ae, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.887] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0166.887] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0166.887] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0166.887] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103e0 | out: pbBuffer=0x124103e0) returned 1
	[0166.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0166.888] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0166.888] WriteFile (in: hFile=0x344, lpBuffer=0x125dc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc000*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0166.888] CloseHandle (hObject=0x344) returned 1
	[0166.889] CloseHandle (hObject=0x34c) returned 1
	[0166.891] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\d47dbd2f9e3365fbbe008d71fb06716f_4dd1053bcc726da41115fff4c7d6e9cc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0166.943] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0166.948] SetEvent (hEvent=0x68) returned 1
	[0166.948] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0166.949] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0166.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), fInfoLevelId=0x0, lpFileInformation=0x1245dad0 | out: lpFileInformation=0x1245dad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b)) returned 1
	[0166.949] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0166.949] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104f8 | out: pbBuffer=0x124104f8) returned 1
	[0166.950] ReadFile (in: hFile=0x33c, lpBuffer=0x128ca000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245dd1c, lpOverlapped=0x0 | out: lpBuffer=0x128ca000*, lpNumberOfBytesRead=0x1245dd1c*=0x64b, lpOverlapped=0x0) returned 1
	[0166.953] GetFileType (hFile=0x33c) returned 0x1
	[0166.953] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.954] WriteFile (in: hFile=0x33c, lpBuffer=0x12766700*, nNumberOfBytesToWrite=0x64b, lpNumberOfBytesWritten=0x1245dd00, lpOverlapped=0x1245dd0c | out: lpBuffer=0x12766700*, lpNumberOfBytesWritten=0x1245dd00*=0x64b, lpOverlapped=0x1245dd0c) returned 1
	[0166.954] GetFileType (hFile=0x33c) returned 0x1
	[0166.954] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x64b, lpNewFilePointer=0x0, dwMoveMethod=0x1245dce4 | out: lpNewFilePointer=0x0) returned 1
	[0166.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0166.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0166.954] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0166.955] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0166.955] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0166.955] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245dd0c | out: lpMode=0x1245dd0c) returned 0
	[0166.955] WriteFile (in: hFile=0x350, lpBuffer=0x125dca00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125dca00*, lpNumberOfBytesWritten=0x1245dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0166.955] CloseHandle (hObject=0x350) returned 1
	[0166.957] CloseHandle (hObject=0x33c) returned 1
	[0166.958] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\ea618097e393409afa316f0f87e2c202_827c1b837652b048c4c84237d0838585.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.001] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.014] SetEvent (hEvent=0x68) returned 1
	[0167.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.015] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.015] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1
	[0167.015] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4e0 | out: pbBuffer=0x1240f4e0) returned 1
	[0167.015] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106f8 | out: pbBuffer=0x124106f8) returned 1
	[0167.015] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0167.017] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.018] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0167.018] SetEvent (hEvent=0xa0) returned 1
	[0167.018] SetEvent (hEvent=0x68) returned 1
	[0167.018] ReadFile (in: hFile=0x34c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f5d1c*=0x190, lpOverlapped=0x0) returned 1
	[0167.019] GetFileType (hFile=0x34c) returned 0x1
	[0167.020] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.020] WriteFile (in: hFile=0x34c, lpBuffer=0x127e2820*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127e2820*, lpNumberOfBytesWritten=0x124f5d00*=0x190, lpOverlapped=0x124f5d0c) returned 1
	[0167.020] GetFileType (hFile=0x34c) returned 0x1
	[0167.020] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.020] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0167.020] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401481 | out: pbBuffer=0x12401481) returned 1
	[0167.020] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401581 | out: pbBuffer=0x12401581) returned 1
	[0167.020] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107f0 | out: pbBuffer=0x124107f0) returned 1
	[0167.021] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.021] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.021] WriteFile (in: hFile=0x350, lpBuffer=0x125dd400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125dd400*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.021] CloseHandle (hObject=0x350) returned 1
	[0167.021] CloseHandle (hObject=0x34c) returned 1
	[0167.021] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\024823b39fbeaccdb5c06426a8168e99_6d5cab161a1c65362a913d29be09d91b.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.024] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0167.027] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0167.028] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0167.028] SetEvent (hEvent=0x318) returned 1
	[0167.028] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0167.051] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.058] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194)) returned 1
	[0167.058] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0167.058] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0167.058] ReadFile (in: hFile=0x344, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x124f5d1c*=0x194, lpOverlapped=0x0) returned 1
	[0167.077] GetFileType (hFile=0x344) returned 0x1
	[0167.077] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.077] WriteFile (in: hFile=0x344, lpBuffer=0x12460000*, nNumberOfBytesToWrite=0x194, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12460000*, lpNumberOfBytesWritten=0x124f5d00*=0x194, lpOverlapped=0x124f5d0c) returned 1
	[0167.077] GetFileType (hFile=0x344) returned 0x1
	[0167.077] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x194, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.078] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0167.078] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0167.078] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0167.078] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0167.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.078] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.078] WriteFile (in: hFile=0x34c, lpBuffer=0x125dc000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125dc000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.079] CloseHandle (hObject=0x34c) returned 1
	[0167.082] CloseHandle (hObject=0x344) returned 1
	[0167.090] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\1bb09beec155258835c193a7aa85aa5b_a7b2b53af2a12e2cb0a41b96d21d7973.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.128] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.136] SetEvent (hEvent=0x2e8) returned 1
	[0167.136] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3130b1871a126520a8c47861efe3ed4d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.141] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3130b1871a126520a8c47861efe3ed4d"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1
	[0167.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0167.142] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0167.142] ReadFile (in: hFile=0x344, lpBuffer=0x1255c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255c000*, lpNumberOfBytesRead=0x12429d1c*=0xdc, lpOverlapped=0x0) returned 1
	[0167.144] GetFileType (hFile=0x344) returned 0x1
	[0167.144] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.144] WriteFile (in: hFile=0x344, lpBuffer=0x124b42a0*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x124b42a0*, lpNumberOfBytesWritten=0x12429d00*=0xdc, lpOverlapped=0x12429d0c) returned 1
	[0167.144] GetFileType (hFile=0x344) returned 0x1
	[0167.144] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xdc, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0167.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0167.145] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0167.145] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0167.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3130b1871a126520a8c47861efe3ed4d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.145] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.145] WriteFile (in: hFile=0x350, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.145] CloseHandle (hObject=0x350) returned 1
	[0167.148] CloseHandle (hObject=0x344) returned 1
	[0167.151] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3130b1871a126520a8c47861efe3ed4d"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\3130b1871a126520a8c47861efe3ed4d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.352] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.541] SetEvent (hEvent=0x2e8) returned 1
	[0167.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0167.542] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0167.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae)) returned 1
	[0167.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0167.542] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744478 | out: pbBuffer=0x12744478) returned 1
	[0167.542] ReadFile (in: hFile=0x33c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x1242bd1c*=0x1ae, lpOverlapped=0x0) returned 1
	[0167.544] GetFileType (hFile=0x33c) returned 0x1
	[0167.544] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.544] WriteFile (in: hFile=0x33c, lpBuffer=0x125228c0*, nNumberOfBytesToWrite=0x1ae, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125228c0*, lpNumberOfBytesWritten=0x1242bd00*=0x1ae, lpOverlapped=0x1242bd0c) returned 1
	[0167.545] GetFileType (hFile=0x33c) returned 0x1
	[0167.545] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x1ae, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.545] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434c81 | out: pbBuffer=0x12434c81) returned 1
	[0167.545] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434d81 | out: pbBuffer=0x12434d81) returned 1
	[0167.545] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434e81 | out: pbBuffer=0x12434e81) returned 1
	[0167.545] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744530 | out: pbBuffer=0x12744530) returned 1
	[0167.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.546] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0167.546] WriteFile (in: hFile=0x350, lpBuffer=0x125dcf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125dcf00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.546] CloseHandle (hObject=0x350) returned 1
	[0167.548] CloseHandle (hObject=0x33c) returned 1
	[0167.549] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\4c8f841fb02dec8c10108028db86a08d_8dafffd2d43bdc7a1717f5b61c303398.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.599] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.606] SetEvent (hEvent=0x2e8) returned 1
	[0167.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.608] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0167.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), fInfoLevelId=0x0, lpFileInformation=0x1245bad0 | out: lpFileInformation=0x1245bad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1
	[0167.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252eae0 | out: pbBuffer=0x1252eae0) returned 1
	[0167.608] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744618 | out: pbBuffer=0x12744618) returned 1
	[0167.608] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0167.609] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.609] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0167.609] SetEvent (hEvent=0xa0) returned 1
	[0167.609] SetEvent (hEvent=0x2e8) returned 1
	[0167.609] ReadFile (in: hFile=0x344, lpBuffer=0x128e6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1245bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128e6000*, lpNumberOfBytesRead=0x1245bd1c*=0x190, lpOverlapped=0x0) returned 1
	[0167.611] GetFileType (hFile=0x344) returned 0x1
	[0167.611] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.611] WriteFile (in: hFile=0x344, lpBuffer=0x1260f6c0*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x1245bd00, lpOverlapped=0x1245bd0c | out: lpBuffer=0x1260f6c0*, lpNumberOfBytesWritten=0x1245bd00*=0x190, lpOverlapped=0x1245bd0c) returned 1
	[0167.612] GetFileType (hFile=0x344) returned 0x1
	[0167.612] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x190, lpNewFilePointer=0x0, dwMoveMethod=0x1245bce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.612] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435281 | out: pbBuffer=0x12435281) returned 1
	[0167.612] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435381 | out: pbBuffer=0x12435381) returned 1
	[0167.612] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12435481 | out: pbBuffer=0x12435481) returned 1
	[0167.612] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127446d0 | out: pbBuffer=0x127446d0) returned 1
	[0167.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.613] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x1245bd0c | out: lpMode=0x1245bd0c) returned 0
	[0167.613] WriteFile (in: hFile=0x350, lpBuffer=0x1277c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1245bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1277c000*, lpNumberOfBytesWritten=0x1245bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.613] CloseHandle (hObject=0x350) returned 1
	[0167.616] CloseHandle (hObject=0x344) returned 1
	[0167.617] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\5080dc7a65db6a5960ecd874088f3328_6cba2c06d5985dd95ae59af8fc7c6220.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.670] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.696] SetEvent (hEvent=0x68) returned 1
	[0167.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.697] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1
	[0167.697] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0167.697] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0167.697] ReadFile (in: hFile=0x344, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x124f5d1c*=0x18e, lpOverlapped=0x0) returned 1
	[0167.699] GetFileType (hFile=0x344) returned 0x1
	[0167.699] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.699] WriteFile (in: hFile=0x344, lpBuffer=0x125e4000*, nNumberOfBytesToWrite=0x18e, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x125e4000*, lpNumberOfBytesWritten=0x124f5d00*=0x18e, lpOverlapped=0x124f5d0c) returned 1
	[0167.700] GetFileType (hFile=0x344) returned 0x1
	[0167.700] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x18e, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.700] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0167.700] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0167.700] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0167.701] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0167.701] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.701] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.701] WriteFile (in: hFile=0x350, lpBuffer=0x12780000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12780000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.701] CloseHandle (hObject=0x350) returned 1
	[0167.703] CloseHandle (hObject=0x344) returned 1
	[0167.705] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\705a76de71ea2caebb8f0907449ce086_9752c5b2d53ee7a19f7764b52968ec21.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.744] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.747] SetEvent (hEvent=0x68) returned 1
	[0167.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.748] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc)) returned 1
	[0167.748] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0167.748] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f8 | out: pbBuffer=0x1251e5f8) returned 1
	[0167.749] ReadFile (in: hFile=0x344, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x12429d1c*=0xdc, lpOverlapped=0x0) returned 1
	[0167.752] GetFileType (hFile=0x344) returned 0x1
	[0167.752] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.753] WriteFile (in: hFile=0x344, lpBuffer=0x12524380*, nNumberOfBytesToWrite=0xdc, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12524380*, lpNumberOfBytesWritten=0x12429d00*=0xdc, lpOverlapped=0x12429d0c) returned 1
	[0167.753] GetFileType (hFile=0x344) returned 0x1
	[0167.753] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xdc, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0167.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0167.753] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0167.754] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0167.754] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.754] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.754] WriteFile (in: hFile=0x350, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.754] CloseHandle (hObject=0x350) returned 1
	[0167.757] CloseHandle (hObject=0x344) returned 1
	[0167.759] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7b2238aaccedc3f1ffe8e7eb5f575ec9.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.799] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.802] SetEvent (hEvent=0x68) returned 1
	[0167.803] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0167.804] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0167.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198)) returned 1
	[0167.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127328c0 | out: pbBuffer=0x127328c0) returned 1
	[0167.804] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e888 | out: pbBuffer=0x1251e888) returned 1
	[0167.804] ReadFile (in: hFile=0x344, lpBuffer=0x126f4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x126f4000*, lpNumberOfBytesRead=0x124f1d1c*=0x198, lpOverlapped=0x0) returned 1
	[0167.808] GetFileType (hFile=0x344) returned 0x1
	[0167.808] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.808] WriteFile (in: hFile=0x344, lpBuffer=0x12879380*, nNumberOfBytesToWrite=0x198, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12879380*, lpNumberOfBytesWritten=0x124f1d00*=0x198, lpOverlapped=0x124f1d0c) returned 1
	[0167.809] GetFileType (hFile=0x344) returned 0x1
	[0167.809] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9081 | out: pbBuffer=0x127e9081) returned 1
	[0167.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9181 | out: pbBuffer=0x127e9181) returned 1
	[0167.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9281 | out: pbBuffer=0x127e9281) returned 1
	[0167.810] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e9a0 | out: pbBuffer=0x1251e9a0) returned 1
	[0167.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.810] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0167.810] WriteFile (in: hFile=0x350, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.810] CloseHandle (hObject=0x350) returned 1
	[0167.812] CloseHandle (hObject=0x344) returned 1
	[0167.814] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\7d266d9e1e69fa1eefb9699b009b34c8_1d5a876a9113ec07224c45e5a870e3bd.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.843] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.844] SetEvent (hEvent=0x68) returned 1
	[0167.844] SetEvent (hEvent=0x80) returned 1
	[0167.844] SwitchToThread () returned 1
	[0167.845] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.846] SetEvent (hEvent=0x80) returned 1
	[0167.846] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0167.847] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0167.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186)) returned 1
	[0167.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0167.847] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410408 | out: pbBuffer=0x12410408) returned 1
	[0167.847] ReadFile (in: hFile=0x33c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x124f3d1c*=0x186, lpOverlapped=0x0) returned 1
	[0167.850] GetFileType (hFile=0x33c) returned 0x1
	[0167.850] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.850] WriteFile (in: hFile=0x33c, lpBuffer=0x12714b60*, nNumberOfBytesToWrite=0x186, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x12714b60*, lpNumberOfBytesWritten=0x124f3d00*=0x186, lpOverlapped=0x124f3d0c) returned 1
	[0167.850] GetFileType (hFile=0x33c) returned 0x1
	[0167.850] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x186, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.850] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0167.850] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0167.850] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0167.851] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104e0 | out: pbBuffer=0x124104e0) returned 1
	[0167.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.851] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0167.851] WriteFile (in: hFile=0x350, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.851] CloseHandle (hObject=0x350) returned 1
	[0167.854] CloseHandle (hObject=0x33c) returned 1
	[0167.856] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_50167909fcfe0c66153f1901439cbba1.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.886] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.893] SetEvent (hEvent=0x80) returned 1
	[0167.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.894] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0167.894] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0167.894] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104f8 | out: pbBuffer=0x124104f8) returned 1
	[0167.894] ReadFile (in: hFile=0x34c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x182, lpOverlapped=0x0) returned 1
	[0167.896] GetFileType (hFile=0x34c) returned 0x1
	[0167.896] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.896] WriteFile (in: hFile=0x34c, lpBuffer=0x127156c0*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x127156c0*, lpNumberOfBytesWritten=0x124f5d00*=0x182, lpOverlapped=0x124f5d0c) returned 1
	[0167.897] GetFileType (hFile=0x34c) returned 0x1
	[0167.897] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x182, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.897] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0167.897] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0167.897] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0167.897] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105b0 | out: pbBuffer=0x124105b0) returned 1
	[0167.897] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.897] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0167.897] WriteFile (in: hFile=0x350, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.898] CloseHandle (hObject=0x350) returned 1
	[0167.899] CloseHandle (hObject=0x34c) returned 1
	[0167.900] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_74e943f7dab6d19e37e4854057155778.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0167.934] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0167.940] SetEvent (hEvent=0x80) returned 1
	[0167.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0167.941] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0167.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f4a0 | out: pbBuffer=0x1240f4a0) returned 1
	[0167.941] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106f8 | out: pbBuffer=0x124106f8) returned 1
	[0167.941] ReadFile (in: hFile=0x34c, lpBuffer=0x126b4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x126b4000*, lpNumberOfBytesRead=0x12429d1c*=0x182, lpOverlapped=0x0) returned 1
	[0167.943] GetFileType (hFile=0x34c) returned 0x1
	[0167.943] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.943] WriteFile (in: hFile=0x34c, lpBuffer=0x125deea0*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125deea0*, lpNumberOfBytesWritten=0x12429d00*=0x182, lpOverlapped=0x12429d0c) returned 1
	[0167.944] GetFileType (hFile=0x34c) returned 0x1
	[0167.944] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x182, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0167.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0167.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0167.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401381 | out: pbBuffer=0x12401381) returned 1
	[0167.944] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107f0 | out: pbBuffer=0x124107f0) returned 1
	[0167.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0167.945] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0167.945] WriteFile (in: hFile=0x350, lpBuffer=0x12521900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521900*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0167.945] CloseHandle (hObject=0x350) returned 1
	[0167.947] CloseHandle (hObject=0x34c) returned 1
	[0167.948] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8059e9a0d314877e40fe93d8ccfb3c69_f2318f7ab33980a131a265454c39ca30.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.019] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.024] SetEvent (hEvent=0x80) returned 1
	[0168.024] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.025] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188)) returned 1
	[0168.025] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0168.025] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5e8 | out: pbBuffer=0x1251e5e8) returned 1
	[0168.025] ReadFile (in: hFile=0x34c, lpBuffer=0x12886000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12886000*, lpNumberOfBytesRead=0x124f1d1c*=0x188, lpOverlapped=0x0) returned 1
	[0168.027] GetFileType (hFile=0x34c) returned 0x1
	[0168.027] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.027] WriteFile (in: hFile=0x34c, lpBuffer=0x124b16c0*, nNumberOfBytesToWrite=0x188, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x124b16c0*, lpNumberOfBytesWritten=0x124f1d00*=0x188, lpOverlapped=0x124f1d0c) returned 1
	[0168.027] GetFileType (hFile=0x34c) returned 0x1
	[0168.027] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x188, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.027] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0168.027] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0168.028] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0168.028] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0168.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.028] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.028] WriteFile (in: hFile=0x350, lpBuffer=0x127d4f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x127d4f00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.029] CloseHandle (hObject=0x350) returned 1
	[0168.030] CloseHandle (hObject=0x34c) returned 1
	[0168.031] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\8828f39c7c0ce9a14b25c7eb321181ba_3df94eb797096674f7793a562a778c5f.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.085] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.088] SetEvent (hEvent=0x2e8) returned 1
	[0168.088] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.089] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.089] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1
	[0168.089] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0168.089] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0168.090] ReadFile (in: hFile=0x34c, lpBuffer=0x12674000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x12674000*, lpNumberOfBytesRead=0x124f3d1c*=0x156, lpOverlapped=0x0) returned 1
	[0168.091] GetFileType (hFile=0x34c) returned 0x1
	[0168.091] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.091] WriteFile (in: hFile=0x34c, lpBuffer=0x1247c580*, nNumberOfBytesToWrite=0x156, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1247c580*, lpNumberOfBytesWritten=0x124f3d00*=0x156, lpOverlapped=0x124f3d0c) returned 1
	[0168.092] GetFileType (hFile=0x34c) returned 0x1
	[0168.092] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x156, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.092] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0168.092] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0168.092] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0168.092] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0168.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.092] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.093] WriteFile (in: hFile=0x350, lpBuffer=0x12784000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12784000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.093] CloseHandle (hObject=0x350) returned 1
	[0168.094] CloseHandle (hObject=0x34c) returned 1
	[0168.095] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\94308059b57b3142e455b38a6eb92015.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.133] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.139] SetEvent (hEvent=0x2e8) returned 1
	[0168.140] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.141] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182)) returned 1
	[0168.141] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0168.141] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0168.141] ReadFile (in: hFile=0x34c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x124f5d1c*=0x182, lpOverlapped=0x0) returned 1
	[0168.143] GetFileType (hFile=0x34c) returned 0x1
	[0168.143] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.143] WriteFile (in: hFile=0x34c, lpBuffer=0x12714000*, nNumberOfBytesToWrite=0x182, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12714000*, lpNumberOfBytesWritten=0x124f5d00*=0x182, lpOverlapped=0x124f5d0c) returned 1
	[0168.144] GetFileType (hFile=0x34c) returned 0x1
	[0168.144] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x182, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0168.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0168.144] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0168.145] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0168.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.145] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.145] WriteFile (in: hFile=0x350, lpBuffer=0x1261a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261a000*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.145] CloseHandle (hObject=0x350) returned 1
	[0168.146] CloseHandle (hObject=0x34c) returned 1
	[0168.147] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\9c888beabccbc2a97b0d6d9214c3ba37_1213dc6f71e4c3b05e7bceebc203a31e.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.202] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.231] SetEvent (hEvent=0x2e8) returned 1
	[0168.232] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.234] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec)) returned 1
	[0168.234] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0168.234] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0168.234] ReadFile (in: hFile=0x34c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12429d1c*=0x1ec, lpOverlapped=0x0) returned 1
	[0168.236] GetFileType (hFile=0x34c) returned 0x1
	[0168.236] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.236] WriteFile (in: hFile=0x34c, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x1ec, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429d00*=0x1ec, lpOverlapped=0x12429d0c) returned 1
	[0168.236] GetFileType (hFile=0x34c) returned 0x1
	[0168.236] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1ec, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.236] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0168.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0168.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0168.237] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0168.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.237] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.237] WriteFile (in: hFile=0x350, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.238] CloseHandle (hObject=0x350) returned 1
	[0168.239] CloseHandle (hObject=0x34c) returned 1
	[0168.240] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\acf244f1a10d4dbed0d88eba0c43a9b5_ba1ab6c2bdfdf57799e8116e4002d001.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.274] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.280] SetEvent (hEvent=0x2e8) returned 1
	[0168.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.281] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204)) returned 1
	[0168.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0168.282] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104f8 | out: pbBuffer=0x124104f8) returned 1
	[0168.282] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0168.283] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0168.283] SetEvent (hEvent=0x2e8) returned 1
	[0168.283] ReadFile (in: hFile=0x34c, lpBuffer=0x128c6000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x128c6000*, lpNumberOfBytesRead=0x124f1d1c*=0x204, lpOverlapped=0x0) returned 1
	[0168.290] GetFileType (hFile=0x34c) returned 0x1
	[0168.290] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.291] WriteFile (in: hFile=0x34c, lpBuffer=0x1287e000*, nNumberOfBytesToWrite=0x204, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x1287e000*, lpNumberOfBytesWritten=0x124f1d00*=0x204, lpOverlapped=0x124f1d0c) returned 1
	[0168.291] GetFileType (hFile=0x34c) returned 0x1
	[0168.291] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x204, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.291] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0168.291] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0168.291] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0168.292] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744440 | out: pbBuffer=0x12744440) returned 1
	[0168.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0168.292] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.292] WriteFile (in: hFile=0x344, lpBuffer=0x1261aa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x1261aa00*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.292] CloseHandle (hObject=0x344) returned 1
	[0168.294] CloseHandle (hObject=0x34c) returned 1
	[0168.297] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\bc570ec0de58335afaf92fdc8e3aa330_6ce6e578b5c8485b4be3c4d58e12f150.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.334] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.338] SetEvent (hEvent=0x318) returned 1
	[0168.338] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.339] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e)) returned 1
	[0168.339] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0168.339] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0168.339] ReadFile (in: hFile=0x34c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f3d1c*=0x18e, lpOverlapped=0x0) returned 1
	[0168.341] GetFileType (hFile=0x34c) returned 0x1
	[0168.341] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.341] WriteFile (in: hFile=0x34c, lpBuffer=0x1261e000*, nNumberOfBytesToWrite=0x18e, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x1261e000*, lpNumberOfBytesWritten=0x124f3d00*=0x18e, lpOverlapped=0x124f3d0c) returned 1
	[0168.342] GetFileType (hFile=0x34c) returned 0x1
	[0168.342] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x18e, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0168.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0168.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0168.342] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0168.343] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.343] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0168.343] WriteFile (in: hFile=0x350, lpBuffer=0x12526000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12526000*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.343] CloseHandle (hObject=0x350) returned 1
	[0168.344] CloseHandle (hObject=0x34c) returned 1
	[0168.345] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.379] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.392] SetEvent (hEvent=0x318) returned 1
	[0168.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.394] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198)) returned 1
	[0168.394] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0168.394] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0168.394] ReadFile (in: hFile=0x34c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x124f5d1c*=0x198, lpOverlapped=0x0) returned 1
	[0168.396] GetFileType (hFile=0x34c) returned 0x1
	[0168.396] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.396] WriteFile (in: hFile=0x34c, lpBuffer=0x12628b60*, nNumberOfBytesToWrite=0x198, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12628b60*, lpNumberOfBytesWritten=0x124f5d00*=0x198, lpOverlapped=0x124f5d0c) returned 1
	[0168.397] GetFileType (hFile=0x34c) returned 0x1
	[0168.397] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x198, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.397] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0168.397] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0168.397] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0168.397] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127881b0 | out: pbBuffer=0x127881b0) returned 1
	[0168.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.398] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.398] WriteFile (in: hFile=0x350, lpBuffer=0x125f8500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f8500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.398] CloseHandle (hObject=0x350) returned 1
	[0168.400] CloseHandle (hObject=0x34c) returned 1
	[0168.401] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\d47dbd2f9e3365fbbe008d71fb06716f_d33192d58aa9ca2b9097e848e9fe86de.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.460] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.469] SetEvent (hEvent=0x318) returned 1
	[0168.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.470] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1
	[0168.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0168.470] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f8 | out: pbBuffer=0x1251e5f8) returned 1
	[0168.470] ReadFile (in: hFile=0x34c, lpBuffer=0x12946000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12946000*, lpNumberOfBytesRead=0x12429d1c*=0x1a0, lpOverlapped=0x0) returned 1
	[0168.472] GetFileType (hFile=0x34c) returned 0x1
	[0168.472] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.472] WriteFile (in: hFile=0x34c, lpBuffer=0x1261f6c0*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1261f6c0*, lpNumberOfBytesWritten=0x12429d00*=0x1a0, lpOverlapped=0x12429d0c) returned 1
	[0168.472] GetFileType (hFile=0x34c) returned 0x1
	[0168.472] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.472] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0168.472] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434881 | out: pbBuffer=0x12434881) returned 1
	[0168.473] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434981 | out: pbBuffer=0x12434981) returned 1
	[0168.473] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0168.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x350
	[0168.473] GetConsoleMode (in: hConsoleHandle=0x350, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.473] WriteFile (in: hFile=0x350, lpBuffer=0x12526a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12526a00*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.473] CloseHandle (hObject=0x350) returned 1
	[0168.474] CloseHandle (hObject=0x34c) returned 1
	[0168.475] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\f293aead5e84facfb686c4a620718928_c8424a0b24a72939b13720d0c000c9c1.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.496] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.527] SwitchToThread () returned 1
	[0168.533] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.646] SetEvent (hEvent=0x80) returned 1
	[0168.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.647] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x124f1ad0 | out: lpFileInformation=0x124f1ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd)) returned 1
	[0168.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e200 | out: pbBuffer=0x1240e200) returned 1
	[0168.647] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0168.648] ReadFile (in: hFile=0x34c, lpBuffer=0x12654000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f1d1c, lpOverlapped=0x0 | out: lpBuffer=0x12654000*, lpNumberOfBytesRead=0x124f1d1c*=0xd, lpOverlapped=0x0) returned 1
	[0168.649] GetFileType (hFile=0x34c) returned 0x1
	[0168.649] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.649] WriteFile (in: hFile=0x34c, lpBuffer=0x12410040*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x124f1d00, lpOverlapped=0x124f1d0c | out: lpBuffer=0x12410040*, lpNumberOfBytesWritten=0x124f1d00*=0xd, lpOverlapped=0x124f1d0c) returned 1
	[0168.650] GetFileType (hFile=0x34c) returned 0x1
	[0168.650] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x124f1ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0168.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0168.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0168.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103f0 | out: pbBuffer=0x124103f0) returned 1
	[0168.651] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0168.651] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f1d0c | out: lpMode=0x124f1d0c) returned 0
	[0168.651] WriteFile (in: hFile=0x344, lpBuffer=0x125f8000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f1d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f8000*, lpNumberOfBytesWritten=0x124f1d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.651] CloseHandle (hObject=0x344) returned 1
	[0168.651] CloseHandle (hObject=0x34c) returned 1
	[0168.651] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.654] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.699] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.711] SetEvent (hEvent=0x80) returned 1
	[0168.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0168.712] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344)) returned 1
	[0168.712] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0168.712] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410418 | out: pbBuffer=0x12410418) returned 1
	[0168.712] ReadFile (in: hFile=0x1e4, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x124f5d1c*=0x344, lpOverlapped=0x0) returned 1
	[0168.723] GetFileType (hFile=0x1e4) returned 0x1
	[0168.723] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.724] WriteFile (in: hFile=0x1e4, lpBuffer=0x12526000*, nNumberOfBytesToWrite=0x344, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12526000*, lpNumberOfBytesWritten=0x124f5d00*=0x344, lpOverlapped=0x124f5d0c) returned 1
	[0168.724] GetFileType (hFile=0x1e4) returned 0x1
	[0168.724] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x344, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0168.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec701 | out: pbBuffer=0x124ec701) returned 1
	[0168.724] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0168.725] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410500 | out: pbBuffer=0x12410500) returned 1
	[0168.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0168.725] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.725] WriteFile (in: hFile=0x34c, lpBuffer=0x125f8500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f8500*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.725] CloseHandle (hObject=0x34c) returned 1
	[0168.725] CloseHandle (hObject=0x1e4) returned 1
	[0168.725] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.728] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.787] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0168.788] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.788] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf)) returned 1
	[0168.788] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240ebe0 | out: pbBuffer=0x1240ebe0) returned 1
	[0168.788] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410518 | out: pbBuffer=0x12410518) returned 1
	[0168.788] ReadFile (in: hFile=0x33c, lpBuffer=0x1255a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1255a000*, lpNumberOfBytesRead=0x124f5d1c*=0x2cf, lpOverlapped=0x0) returned 1
	[0168.808] GetFileType (hFile=0x33c) returned 0x1
	[0168.808] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.809] WriteFile (in: hFile=0x33c, lpBuffer=0x1260ac00*, nNumberOfBytesToWrite=0x2cf, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x1260ac00*, lpNumberOfBytesWritten=0x124f5d00*=0x2cf, lpOverlapped=0x124f5d0c) returned 1
	[0168.809] GetFileType (hFile=0x33c) returned 0x1
	[0168.809] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x2cf, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0168.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0168.809] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb81 | out: pbBuffer=0x124ecb81) returned 1
	[0168.810] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124105d0 | out: pbBuffer=0x124105d0) returned 1
	[0168.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0168.810] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0168.810] WriteFile (in: hFile=0x344, lpBuffer=0x125f8f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f8f00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.810] CloseHandle (hObject=0x344) returned 1
	[0168.810] CloseHandle (hObject=0x33c) returned 1
	[0168.810] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0168.812] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.844] SetEvent (hEvent=0x68) returned 1
	[0168.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0168.845] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0168.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600)) returned 1
	[0168.845] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f120 | out: pbBuffer=0x1240f120) returned 1
	[0168.845] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124105e8 | out: pbBuffer=0x124105e8) returned 1
	[0168.845] ReadFile (in: hFile=0x33c, lpBuffer=0x125c0000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x125c0000*, lpNumberOfBytesRead=0x1276dd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0168.854] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.869] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0168.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6PH8i1rvyGGEIvXR9pz7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\6ph8i1rvyggeivxr9pz7.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0168.914] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.914] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6PH8i1rvyGGEIvXR9pz7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\6ph8i1rvyggeivxr9pz7.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9449fb40, ftCreationTime.dwHighDateTime=0x1d5de3f, ftLastAccessTime.dwLowDateTime=0x781e32e0, ftLastAccessTime.dwHighDateTime=0x1d5dc7f, ftLastWriteTime.dwLowDateTime=0x781e32e0, ftLastWriteTime.dwHighDateTime=0x1d5dc7f, nFileSizeHigh=0x0, nFileSizeLow=0xfee4)) returned 1
	[0168.914] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0168.914] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0168.914] ReadFile (in: hFile=0x344, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12429d1c*=0xfee4, lpOverlapped=0x0) returned 1
	[0168.935] GetFileType (hFile=0x344) returned 0x1
	[0168.935] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.935] WriteFile (in: hFile=0x344, lpBuffer=0x127aa000*, nNumberOfBytesToWrite=0xfee4, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x127aa000*, lpNumberOfBytesWritten=0x12429d00*=0xfee4, lpOverlapped=0x12429d0c) returned 1
	[0168.935] GetFileType (hFile=0x344) returned 0x1
	[0168.935] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xfee4, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0168.935] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0168.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0168.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0168.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0168.936] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6PH8i1rvyGGEIvXR9pz7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\6ph8i1rvyggeivxr9pz7.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0168.936] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0168.936] WriteFile (in: hFile=0x2dc, lpBuffer=0x12772000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12772000*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0168.936] CloseHandle (hObject=0x2dc) returned 1
	[0168.942] CloseHandle (hObject=0x344) returned 1
	[0168.972] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6PH8i1rvyGGEIvXR9pz7.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\6ph8i1rvyggeivxr9pz7.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\6PH8i1rvyGGEIvXR9pz7.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\6ph8i1rvyggeivxr9pz7.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.267] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0169.324] SetEvent (hEvent=0x80) returned 1
	[0169.324] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\AqfA87t.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqfa87t.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.325] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\AqfA87t.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqfa87t.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc6b4b80, ftCreationTime.dwHighDateTime=0x1d5e20d, ftLastAccessTime.dwLowDateTime=0xc1d618e0, ftLastAccessTime.dwHighDateTime=0x1d5e0d4, ftLastWriteTime.dwLowDateTime=0xc1d618e0, ftLastWriteTime.dwHighDateTime=0x1d5e0d4, nFileSizeHigh=0x0, nFileSizeLow=0x1c4d)) returned 1
	[0169.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0169.325] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0169.326] ReadFile (in: hFile=0x344, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1276dd1c*=0x1c4d, lpOverlapped=0x0) returned 1
	[0169.350] GetFileType (hFile=0x344) returned 0x1
	[0169.350] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.350] WriteFile (in: hFile=0x344, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x1c4d, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x1276dd00*=0x1c4d, lpOverlapped=0x1276dd0c) returned 1
	[0169.350] GetFileType (hFile=0x344) returned 0x1
	[0169.350] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1c4d, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.351] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0169.351] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0169.351] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0169.351] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0169.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\AqfA87t.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqfa87t.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0169.351] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.351] WriteFile (in: hFile=0x1e4, lpBuffer=0x125ea000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125ea000*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.352] CloseHandle (hObject=0x1e4) returned 1
	[0169.352] CloseHandle (hObject=0x344) returned 1
	[0169.352] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\AqfA87t.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqfa87t.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\AqfA87t.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\aqfa87t.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Fin_H7FRydfc.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fin_h7frydfc.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.360] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Fin_H7FRydfc.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fin_h7frydfc.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x819cb1a0, ftCreationTime.dwHighDateTime=0x1d5db0f, ftLastAccessTime.dwLowDateTime=0xb13544e0, ftLastAccessTime.dwHighDateTime=0x1d5e4a6, ftLastWriteTime.dwLowDateTime=0xb13544e0, ftLastWriteTime.dwHighDateTime=0x1d5e4a6, nFileSizeHigh=0x0, nFileSizeLow=0x71f)) returned 1
	[0169.361] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732280 | out: pbBuffer=0x12732280) returned 1
	[0169.361] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0169.361] ReadFile (in: hFile=0x344, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1276dd1c*=0x71f, lpOverlapped=0x0) returned 1
	[0169.406] GetFileType (hFile=0x344) returned 0x1
	[0169.406] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.406] WriteFile (in: hFile=0x344, lpBuffer=0x12878000*, nNumberOfBytesToWrite=0x71f, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12878000*, lpNumberOfBytesWritten=0x1276dd00*=0x71f, lpOverlapped=0x1276dd0c) returned 1
	[0169.406] GetFileType (hFile=0x344) returned 0x1
	[0169.406] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x71f, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434901 | out: pbBuffer=0x12434901) returned 1
	[0169.406] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434a01 | out: pbBuffer=0x12434a01) returned 1
	[0169.407] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434b01 | out: pbBuffer=0x12434b01) returned 1
	[0169.407] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5e0 | out: pbBuffer=0x1251e5e0) returned 1
	[0169.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Fin_H7FRydfc.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fin_h7frydfc.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0169.407] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.407] WriteFile (in: hFile=0x2dc, lpBuffer=0x125ea500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x125ea500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.407] CloseHandle (hObject=0x2dc) returned 1
	[0169.407] CloseHandle (hObject=0x344) returned 1
	[0169.407] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Fin_H7FRydfc.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fin_h7frydfc.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Fin_H7FRydfc.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\fin_h7frydfc.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.412] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0169.438] SetEvent (hEvent=0x80) returned 1
	[0169.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Ifhk7kVsEoMt3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ifhk7kvseomt3.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.439] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0169.439] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Ifhk7kVsEoMt3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ifhk7kvseomt3.png"), fInfoLevelId=0x0, lpFileInformation=0x12613ad0 | out: lpFileInformation=0x12613ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49545f40, ftCreationTime.dwHighDateTime=0x1d5e268, ftLastAccessTime.dwLowDateTime=0x8c430090, ftLastAccessTime.dwHighDateTime=0x1d5da39, ftLastWriteTime.dwLowDateTime=0x8c430090, ftLastWriteTime.dwHighDateTime=0x1d5da39, nFileSizeHigh=0x0, nFileSizeLow=0x16d24)) returned 1
	[0169.439] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127324a0 | out: pbBuffer=0x127324a0) returned 1
	[0169.439] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f8 | out: pbBuffer=0x1251e5f8) returned 1
	[0169.439] ReadFile (in: hFile=0x344, lpBuffer=0x12904000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12613d1c, lpOverlapped=0x0 | out: lpBuffer=0x12904000*, lpNumberOfBytesRead=0x12613d1c*=0x16d24, lpOverlapped=0x0) returned 1
	[0169.454] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0169.465] SetEvent (hEvent=0x318) returned 1
	[0169.465] GetFileType (hFile=0x344) returned 0x1
	[0169.465] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.465] WriteFile (in: hFile=0x344, lpBuffer=0x1266c000*, nNumberOfBytesToWrite=0x16d24, lpNumberOfBytesWritten=0x12613d00, lpOverlapped=0x12613d0c | out: lpBuffer=0x1266c000*, lpNumberOfBytesWritten=0x12613d00*=0x16d24, lpOverlapped=0x12613d0c) returned 1
	[0169.465] GetFileType (hFile=0x344) returned 0x1
	[0169.465] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x16d24, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0169.465] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec901 | out: pbBuffer=0x124ec901) returned 1
	[0169.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca01 | out: pbBuffer=0x124eca01) returned 1
	[0169.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecb01 | out: pbBuffer=0x124ecb01) returned 1
	[0169.466] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788270 | out: pbBuffer=0x12788270) returned 1
	[0169.466] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Ifhk7kVsEoMt3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ifhk7kvseomt3.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0169.466] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0169.466] WriteFile (in: hFile=0x34c, lpBuffer=0x12521400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12613d0c, lpOverlapped=0x0 | out: lpBuffer=0x12521400*, lpNumberOfBytesWritten=0x12613d0c*=0x276, lpOverlapped=0x0) returned 1
	[0169.466] CloseHandle (hObject=0x34c) returned 1
	[0169.466] CloseHandle (hObject=0x344) returned 1
	[0169.466] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Ifhk7kVsEoMt3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ifhk7kvseomt3.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Ifhk7kVsEoMt3.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\ifhk7kvseomt3.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0169.471] SwitchToThread () returned 1
	[0169.472] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0169.792] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0169.806] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0169.848] SetEvent (hEvent=0x80) returned 1
	[0169.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0169.850] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0169.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\14\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\document building blocks\\1033\\14\\built-in building blocks.dotx"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f766d30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4f766d30, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4e2b7e00, ftLastWriteTime.dwHighDateTime=0x1ca911e, nFileSizeHigh=0x0, nFileSizeLow=0x3fe4ab)) returned 1
	[0169.850] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732480 | out: pbBuffer=0x12732480) returned 1
	[0169.850] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5d8 | out: pbBuffer=0x1251e5d8) returned 1
	[0169.850] ReadFile (in: hFile=0x344, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1276dd1c*=0x20000, lpOverlapped=0x0) returned 1
	[0170.073] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0170.085] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0170.109] SetEvent (hEvent=0x2e8) returned 1
	[0170.109] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0170.133] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0170.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.149] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0170.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0de7e00, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb65d71b0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb65d71b0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x491)) returned 1
	[0170.149] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0170.149] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0170.149] ReadFile (in: hFile=0x34c, lpBuffer=0x126a8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x126a8000*, lpNumberOfBytesRead=0x1276dd1c*=0x491, lpOverlapped=0x0) returned 1
	[0170.316] SetEvent (hEvent=0xa0) returned 1
	[0170.316] GetFileType (hFile=0x34c) returned 0x1
	[0170.316] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.316] WriteFile (in: hFile=0x34c, lpBuffer=0x12818a00*, nNumberOfBytesToWrite=0x491, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x12818a00*, lpNumberOfBytesWritten=0x1276dd00*=0x491, lpOverlapped=0x1276dd0c) returned 1
	[0170.317] GetFileType (hFile=0x34c) returned 0x1
	[0170.317] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x491, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0170.317] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0170.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0170.318] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127444a0 | out: pbBuffer=0x127444a0) returned 1
	[0170.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0170.318] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0170.318] WriteFile (in: hFile=0x1e4, lpBuffer=0x12818f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12818f00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.319] CloseHandle (hObject=0x1e4) returned 1
	[0170.326] CloseHandle (hObject=0x34c) returned 1
	[0170.328] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\mozilla firefox.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.345] SetEvent (hEvent=0x2e8) returned 1
	[0170.345] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0170.347] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0170.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b)) returned 1
	[0170.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6e0 | out: pbBuffer=0x1252e6e0) returned 1
	[0170.347] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127444b8 | out: pbBuffer=0x127444b8) returned 1
	[0170.347] ReadFile (in: hFile=0x34c, lpBuffer=0x1287a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1287a000*, lpNumberOfBytesRead=0x1276dd1c*=0x60b, lpOverlapped=0x0) returned 1
	[0170.518] GetFileType (hFile=0x34c) returned 0x1
	[0170.518] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.518] WriteFile (in: hFile=0x34c, lpBuffer=0x124ee000*, nNumberOfBytesToWrite=0x60b, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x124ee000*, lpNumberOfBytesWritten=0x1276dd00*=0x60b, lpOverlapped=0x1276dd0c) returned 1
	[0170.518] GetFileType (hFile=0x34c) returned 0x1
	[0170.518] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x60b, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.518] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0170.518] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0170.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0170.519] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0170.519] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0170.519] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0170.519] WriteFile (in: hFile=0x344, lpBuffer=0x12818500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12818500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.519] CloseHandle (hObject=0x344) returned 1
	[0170.521] CloseHandle (hObject=0x34c) returned 1
	[0170.522] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.536] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0170.562] SetEvent (hEvent=0x68) returned 1
	[0170.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0170.563] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0170.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x54b9d5d0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b9d5d0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000)) returned 1
	[0170.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0170.563] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104c8 | out: pbBuffer=0x124104c8) returned 1
	[0170.563] ReadFile (in: hFile=0x2dc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12611d1c*=0x8000, lpOverlapped=0x0) returned 1
	[0170.959] SetEvent (hEvent=0xa0) returned 1
	[0170.959] GetFileType (hFile=0x2dc) returned 0x1
	[0170.959] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.959] WriteFile (in: hFile=0x2dc, lpBuffer=0x12614000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x12614000*, lpNumberOfBytesWritten=0x12611d00*=0x8000, lpOverlapped=0x12611d0c) returned 1
	[0170.960] GetFileType (hFile=0x2dc) returned 0x1
	[0170.960] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0170.960] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0170.960] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8781 | out: pbBuffer=0x127e8781) returned 1
	[0170.960] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8881 | out: pbBuffer=0x127e8881) returned 1
	[0170.960] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410590 | out: pbBuffer=0x12410590) returned 1
	[0170.960] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0170.961] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0170.961] WriteFile (in: hFile=0x344, lpBuffer=0x12818a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x12818a00*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0170.961] CloseHandle (hObject=0x344) returned 1
	[0170.961] CloseHandle (hObject=0x2dc) returned 1
	[0170.961] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\index.dat.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\internet explorer\\userdata\\low\\index.dat.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0170.964] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0171.132] SetEvent (hEvent=0x2e8) returned 1
	[0171.132] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.133] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0171.133] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90b3d80, ftCreationTime.dwHighDateTime=0x1d305fe, ftLastAccessTime.dwLowDateTime=0x90b3d80, ftLastAccessTime.dwHighDateTime=0x1d305fe, ftLastWriteTime.dwLowDateTime=0x90d9ee0, ftLastWriteTime.dwHighDateTime=0x1d305fe, nFileSizeHigh=0x0, nFileSizeLow=0x59a)) returned 1
	[0171.133] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0171.133] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0171.133] ReadFile (in: hFile=0x2dc, lpBuffer=0x12668000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12668000*, lpNumberOfBytesRead=0x1242bd1c*=0x59a, lpOverlapped=0x0) returned 1
	[0171.320] SetEvent (hEvent=0xa0) returned 1
	[0171.320] GetFileType (hFile=0x2dc) returned 0x1
	[0171.320] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.320] WriteFile (in: hFile=0x2dc, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0x59a, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x1242bd00*=0x59a, lpOverlapped=0x1242bd0c) returned 1
	[0171.321] GetFileType (hFile=0x2dc) returned 0x1
	[0171.321] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x59a, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec101 | out: pbBuffer=0x124ec101) returned 1
	[0171.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec201 | out: pbBuffer=0x124ec201) returned 1
	[0171.321] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec301 | out: pbBuffer=0x124ec301) returned 1
	[0171.328] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e130 | out: pbBuffer=0x1251e130) returned 1
	[0171.328] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0171.329] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0171.329] WriteFile (in: hFile=0x34c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.329] CloseHandle (hObject=0x34c) returned 1
	[0171.340] CloseHandle (hObject=0x2dc) returned 1
	[0171.340] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\Global.LNK.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\office\\recent\\global.lnk.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.350] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0171.526] SetEvent (hEvent=0x2e8) returned 1
	[0171.526] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.528] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0171.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf29f8e64, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x138)) returned 1
	[0171.528] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eb80 | out: pbBuffer=0x1240eb80) returned 1
	[0171.528] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124104b8 | out: pbBuffer=0x124104b8) returned 1
	[0171.528] ReadFile (in: hFile=0x2dc, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x1276dd1c*=0x138, lpOverlapped=0x0) returned 1
	[0171.529] GetFileType (hFile=0x2dc) returned 0x1
	[0171.529] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.529] WriteFile (in: hFile=0x2dc, lpBuffer=0x127732c0*, nNumberOfBytesToWrite=0x138, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x127732c0*, lpNumberOfBytesWritten=0x1276dd00*=0x138, lpOverlapped=0x1276dd0c) returned 1
	[0171.530] GetFileType (hFile=0x2dc) returned 0x1
	[0171.530] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x138, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.530] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0171.530] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8801 | out: pbBuffer=0x127e8801) returned 1
	[0171.535] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8901 | out: pbBuffer=0x127e8901) returned 1
	[0171.535] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410570 | out: pbBuffer=0x12410570) returned 1
	[0171.535] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.535] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0171.535] WriteFile (in: hFile=0x33c, lpBuffer=0x12634f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12634f00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.536] CloseHandle (hObject=0x33c) returned 1
	[0171.536] CloseHandle (hObject=0x2dc) returned 1
	[0171.536] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\credhist"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\credhist.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.538] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0171.627] SetEvent (hEvent=0x2e8) returned 1
	[0171.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.628] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0171.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdc5ea830, ftCreationTime.dwHighDateTime=0x1d41fce, ftLastAccessTime.dwLowDateTime=0xdc5ea830, ftLastAccessTime.dwHighDateTime=0x1d41fce, ftLastWriteTime.dwLowDateTime=0xdc5ea830, ftLastWriteTime.dwHighDateTime=0x1d41fce, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.628] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f000 | out: pbBuffer=0x1240f000) returned 1
	[0171.628] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410588 | out: pbBuffer=0x12410588) returned 1
	[0171.628] ReadFile (in: hFile=0x2dc, lpBuffer=0x1293a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1293a000*, lpNumberOfBytesRead=0x1276dd1c*=0x1d4, lpOverlapped=0x0) returned 1
	[0171.631] GetFileType (hFile=0x2dc) returned 0x1
	[0171.631] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.631] WriteFile (in: hFile=0x2dc, lpBuffer=0x125da000*, nNumberOfBytesToWrite=0x1d4, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x125da000*, lpNumberOfBytesWritten=0x1276dd00*=0x1d4, lpOverlapped=0x1276dd0c) returned 1
	[0171.631] GetFileType (hFile=0x2dc) returned 0x1
	[0171.631] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1d4, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a01 | out: pbBuffer=0x127e8a01) returned 1
	[0171.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0171.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0171.631] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410670 | out: pbBuffer=0x12410670) returned 1
	[0171.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.632] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0171.632] WriteFile (in: hFile=0x33c, lpBuffer=0x12635400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12635400*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.632] CloseHandle (hObject=0x33c) returned 1
	[0171.632] CloseHandle (hObject=0x2dc) returned 1
	[0171.632] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\0e15476d-d8fe-46ca-8099-ebdcf80f637c.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.635] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0171.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf923e050, ftCreationTime.dwHighDateTime=0x1d3aab9, ftLastAccessTime.dwLowDateTime=0xf923e050, ftLastAccessTime.dwHighDateTime=0x1d3aab9, ftLastWriteTime.dwLowDateTime=0xf923e050, ftLastWriteTime.dwHighDateTime=0x1d3aab9, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f480 | out: pbBuffer=0x1240f480) returned 1
	[0171.635] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124106a8 | out: pbBuffer=0x124106a8) returned 1
	[0171.635] ReadFile (in: hFile=0x2dc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1242bd1c*=0x1d4, lpOverlapped=0x0) returned 1
	[0171.637] GetFileType (hFile=0x2dc) returned 0x1
	[0171.637] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.637] WriteFile (in: hFile=0x2dc, lpBuffer=0x125da1e0*, nNumberOfBytesToWrite=0x1d4, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125da1e0*, lpNumberOfBytesWritten=0x1242bd00*=0x1d4, lpOverlapped=0x1242bd0c) returned 1
	[0171.637] GetFileType (hFile=0x2dc) returned 0x1
	[0171.637] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1d4, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.637] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8d01 | out: pbBuffer=0x127e8d01) returned 1
	[0171.638] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8e01 | out: pbBuffer=0x127e8e01) returned 1
	[0171.638] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8f01 | out: pbBuffer=0x127e8f01) returned 1
	[0171.638] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124107a0 | out: pbBuffer=0x124107a0) returned 1
	[0171.638] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.638] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0171.638] WriteFile (in: hFile=0x33c, lpBuffer=0x12635900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x12635900*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.638] CloseHandle (hObject=0x33c) returned 1
	[0171.638] CloseHandle (hObject=0x2dc) returned 1
	[0171.638] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\02540a10-7eb7-4b20-a8c7-470f8986389c.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.645] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0171.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf6409280, ftCreationTime.dwHighDateTime=0x1d4ae2c, ftLastAccessTime.dwLowDateTime=0xf6409280, ftLastAccessTime.dwHighDateTime=0x1d4ae2c, ftLastWriteTime.dwLowDateTime=0xf6409280, ftLastWriteTime.dwHighDateTime=0x1d4ae2c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f6a0 | out: pbBuffer=0x1240f6a0) returned 1
	[0171.645] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124107b8 | out: pbBuffer=0x124107b8) returned 1
	[0171.645] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0171.646] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0171.646] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0171.646] SetEvent (hEvent=0xa0) returned 1
	[0171.646] SetEvent (hEvent=0x2e8) returned 1
	[0171.646] SetEvent (hEvent=0x318) returned 1
	[0171.647] ReadFile (in: hFile=0x2dc, lpBuffer=0x12838000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12838000*, lpNumberOfBytesRead=0x12769d1c*=0x1d4, lpOverlapped=0x0) returned 1
	[0171.649] GetFileType (hFile=0x2dc) returned 0x1
	[0171.649] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.649] WriteFile (in: hFile=0x2dc, lpBuffer=0x125da3c0*, nNumberOfBytesToWrite=0x1d4, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x125da3c0*, lpNumberOfBytesWritten=0x12769d00*=0x1d4, lpOverlapped=0x12769d0c) returned 1
	[0171.649] GetFileType (hFile=0x2dc) returned 0x1
	[0171.649] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1d4, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.649] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9001 | out: pbBuffer=0x127e9001) returned 1
	[0171.649] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9401 | out: pbBuffer=0x127e9401) returned 1
	[0171.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9501 | out: pbBuffer=0x127e9501) returned 1
	[0171.650] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124108f0 | out: pbBuffer=0x124108f0) returned 1
	[0171.650] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.650] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0171.650] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.650] CloseHandle (hObject=0x33c) returned 1
	[0171.650] CloseHandle (hObject=0x2dc) returned 1
	[0171.650] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\102a7bc8-3f85-4bb4-840a-38257d2965d2.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.654] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0171.657] SetEvent (hEvent=0x318) returned 1
	[0171.657] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0171.675] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0171.675] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0171.681] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0171.681] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0171.681] SetEvent (hEvent=0x318) returned 1
	[0171.681] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0171.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\preferred"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.682] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0171.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x542fc610, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x542fc610, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x89f54240, ftLastWriteTime.dwHighDateTime=0x1d5e82a, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1
	[0171.682] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0171.682] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0171.683] ReadFile (in: hFile=0x2dc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12429d1c*=0x18, lpOverlapped=0x0) returned 1
	[0171.683] GetFileType (hFile=0x2dc) returned 0x1
	[0171.683] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.683] WriteFile (in: hFile=0x2dc, lpBuffer=0x1252e1c0*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x1252e1c0*, lpNumberOfBytesWritten=0x12429d00*=0x18, lpOverlapped=0x12429d0c) returned 1
	[0171.684] GetFileType (hFile=0x2dc) returned 0x1
	[0171.684] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x18, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0171.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0171.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0171.684] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744340 | out: pbBuffer=0x12744340) returned 1
	[0171.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\preferred"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.684] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0171.684] WriteFile (in: hFile=0x33c, lpBuffer=0x125c6500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x125c6500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.685] CloseHandle (hObject=0x33c) returned 1
	[0171.685] CloseHandle (hObject=0x2dc) returned 1
	[0171.685] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Preferred" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\preferred"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\Preferred.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\preferred.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.688] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0171.688] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x17ffec90, ftCreationTime.dwHighDateTime=0x1d3373c, ftLastAccessTime.dwLowDateTime=0x17ffec90, ftLastAccessTime.dwHighDateTime=0x1d3373c, ftLastWriteTime.dwLowDateTime=0x18024df0, ftLastWriteTime.dwHighDateTime=0x1d3373c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1
	[0171.688] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e4c0 | out: pbBuffer=0x1252e4c0) returned 1
	[0171.688] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744358 | out: pbBuffer=0x12744358) returned 1
	[0171.688] ReadFile (in: hFile=0x2dc, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12767d1c*=0x1d4, lpOverlapped=0x0) returned 1
	[0171.694] GetFileType (hFile=0x2dc) returned 0x1
	[0171.694] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.694] WriteFile (in: hFile=0x2dc, lpBuffer=0x124c81e0*, nNumberOfBytesToWrite=0x1d4, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x124c81e0*, lpNumberOfBytesWritten=0x12767d00*=0x1d4, lpOverlapped=0x12767d0c) returned 1
	[0171.694] GetFileType (hFile=0x2dc) returned 0x1
	[0171.694] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1d4, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0171.694] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0171.696] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0171.697] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744480 | out: pbBuffer=0x12744480) returned 1
	[0171.697] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0171.697] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0171.697] WriteFile (in: hFile=0x344, lpBuffer=0x125c6a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x125c6a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.697] CloseHandle (hObject=0x344) returned 1
	[0171.697] CloseHandle (hObject=0x2dc) returned 1
	[0171.697] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-3388679973-3930757225-3770151564-1000\\fbbe72db-afd8-443b-88dd-64b20388700d.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.699] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0171.888] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0171.933] SetEvent (hEvent=0x68) returned 1
	[0171.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0171.934] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0171.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbab2410, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbab2410, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbab2410, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x2)) returned 1
	[0171.934] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6e0 | out: pbBuffer=0x1252e6e0) returned 1
	[0171.935] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744498 | out: pbBuffer=0x12744498) returned 1
	[0171.935] ReadFile (in: hFile=0x2dc, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12611d1c*=0x2, lpOverlapped=0x0) returned 1
	[0171.937] GetFileType (hFile=0x2dc) returned 0x1
	[0171.937] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.937] WriteFile (in: hFile=0x2dc, lpBuffer=0x127444a0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x12611d00, lpOverlapped=0x12611d0c | out: lpBuffer=0x127444a0*, lpNumberOfBytesWritten=0x12611d00*=0x2, lpOverlapped=0x12611d0c) returned 1
	[0171.937] GetFileType (hFile=0x2dc) returned 0x1
	[0171.937] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x2, lpNewFilePointer=0x0, dwMoveMethod=0x12611ce4 | out: lpNewFilePointer=0x0) returned 1
	[0171.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d81 | out: pbBuffer=0x12400d81) returned 1
	[0171.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e81 | out: pbBuffer=0x12400e81) returned 1
	[0171.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400f81 | out: pbBuffer=0x12400f81) returned 1
	[0171.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744560 | out: pbBuffer=0x12744560) returned 1
	[0171.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0171.937] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0171.938] WriteFile (in: hFile=0x33c, lpBuffer=0x125c6f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12611d0c, lpOverlapped=0x0 | out: lpBuffer=0x125c6f00*, lpNumberOfBytesWritten=0x12611d0c*=0x276, lpOverlapped=0x0) returned 1
	[0171.938] CloseHandle (hObject=0x33c) returned 1
	[0171.938] CloseHandle (hObject=0x2dc) returned 1
	[0171.938] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\uproof\\custom.dic.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0171.955] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.015] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.049] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.071] SetEvent (hEvent=0x68) returned 1
	[0172.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.073] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.073] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x85017d10, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x85017d10, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x85017d10, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbdb)) returned 1
	[0172.073] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e900 | out: pbBuffer=0x1252e900) returned 1
	[0172.073] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744578 | out: pbBuffer=0x12744578) returned 1
	[0172.073] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0172.076] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.076] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0172.076] SetEvent (hEvent=0xa0) returned 1
	[0172.076] SetEvent (hEvent=0x68) returned 1
	[0172.076] ReadFile (in: hFile=0x344, lpBuffer=0x12958000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x12958000*, lpNumberOfBytesRead=0x1260fd1c*=0xbdb, lpOverlapped=0x0) returned 1
	[0172.080] GetFileType (hFile=0x344) returned 0x1
	[0172.080] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.080] WriteFile (in: hFile=0x344, lpBuffer=0x125ca000*, nNumberOfBytesToWrite=0xbdb, lpNumberOfBytesWritten=0x1260fd00, lpOverlapped=0x1260fd0c | out: lpBuffer=0x125ca000*, lpNumberOfBytesWritten=0x1260fd00*=0xbdb, lpOverlapped=0x1260fd0c) returned 1
	[0172.080] GetFileType (hFile=0x344) returned 0x1
	[0172.080] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xbdb, lpNewFilePointer=0x0, dwMoveMethod=0x1260fce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.080] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401081 | out: pbBuffer=0x12401081) returned 1
	[0172.080] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401181 | out: pbBuffer=0x12401181) returned 1
	[0172.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401281 | out: pbBuffer=0x12401281) returned 1
	[0172.081] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744630 | out: pbBuffer=0x12744630) returned 1
	[0172.081] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.081] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.081] WriteFile (in: hFile=0x2dc, lpBuffer=0x125c7400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1260fd0c, lpOverlapped=0x0 | out: lpBuffer=0x125c7400*, lpNumberOfBytesWritten=0x1260fd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.081] CloseHandle (hObject=0x2dc) returned 1
	[0172.081] CloseHandle (hObject=0x344) returned 1
	[0172.082] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\bookmarkbackups\\bookmarks-2017-06-16_5.json.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.085] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0172.093] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0172.093] SetEvent (hEvent=0x2e8) returned 1
	[0172.093] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0172.096] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\compatibility.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\compatibility.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.097] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\compatibility.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\compatibility.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x80696ec0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xce)) returned 1
	[0172.097] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0172.097] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0172.098] ReadFile (in: hFile=0x33c, lpBuffer=0x12746000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12746000*, lpNumberOfBytesRead=0x12769d1c*=0xce, lpOverlapped=0x0) returned 1
	[0172.101] GetFileType (hFile=0x33c) returned 0x1
	[0172.101] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.101] WriteFile (in: hFile=0x33c, lpBuffer=0x12784000*, nNumberOfBytesToWrite=0xce, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12784000*, lpNumberOfBytesWritten=0x12769d00*=0xce, lpOverlapped=0x12769d0c) returned 1
	[0172.101] GetFileType (hFile=0x33c) returned 0x1
	[0172.101] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xce, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.101] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0172.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0172.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0172.102] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0172.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\compatibility.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\compatibility.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.102] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.102] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.102] CloseHandle (hObject=0x344) returned 1
	[0172.102] CloseHandle (hObject=0x33c) returned 1
	[0172.102] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\compatibility.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\compatibility.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\compatibility.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\compatibility.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.187] SetEvent (hEvent=0xa0) returned 1
	[0172.187] SetEvent (hEvent=0x2e8) returned 1
	[0172.187] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.188] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbc374ed0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xbc374ed0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xbc555e20, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1
	[0172.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732420 | out: pbBuffer=0x12732420) returned 1
	[0172.189] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0172.189] ReadFile (in: hFile=0x33c, lpBuffer=0x126a4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x126a4000*, lpNumberOfBytesRead=0x12769d1c*=0x18000, lpOverlapped=0x0) returned 1
	[0172.195] GetFileType (hFile=0x33c) returned 0x1
	[0172.195] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.195] WriteFile (in: hFile=0x33c, lpBuffer=0x126e4000*, nNumberOfBytesToWrite=0x18000, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x126e4000*, lpNumberOfBytesWritten=0x12769d00*=0x18000, lpOverlapped=0x12769d0c) returned 1
	[0172.195] GetFileType (hFile=0x33c) returned 0x1
	[0172.195] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x18000, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.195] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0172.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0172.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0172.196] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0172.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.196] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.196] WriteFile (in: hFile=0x34c, lpBuffer=0x125f6500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x125f6500*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.197] CloseHandle (hObject=0x34c) returned 1
	[0172.198] CloseHandle (hObject=0x33c) returned 1
	[0172.205] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\downloads.sqlite.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\downloads.sqlite.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.243] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.273] SetEvent (hEvent=0x68) returned 1
	[0172.274] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\.metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\.metadata"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.275] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12611d0c | out: lpMode=0x12611d0c) returned 0
	[0172.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\indexedDB\\moz-safe-about+home\\.metadata" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\indexeddb\\moz-safe-about+home\\.metadata"), fInfoLevelId=0x0, lpFileInformation=0x12611ad0 | out: lpFileInformation=0x12611ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb701b090, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb701b090, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb701b090, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.276] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6c0 | out: pbBuffer=0x1252e6c0) returned 1
	[0172.276] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744498 | out: pbBuffer=0x12744498) returned 1
	[0172.276] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0172.279] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.279] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0172.279] SetEvent (hEvent=0xa0) returned 1
	[0172.279] SetEvent (hEvent=0x68) returned 1
	[0172.279] ReadFile (in: hFile=0x2dc, lpBuffer=0x12878000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12611d1c, lpOverlapped=0x0 | out: lpBuffer=0x12878000*, lpNumberOfBytesRead=0x12611d1c*=0x0, lpOverlapped=0x0) returned 1
	[0172.279] CloseHandle (hObject=0x2dc) returned 1
	[0172.280] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0172.288] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0172.288] SetEvent (hEvent=0x318) returned 1
	[0172.288] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0172.297] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.297] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.305] SetEvent (hEvent=0x68) returned 1
	[0172.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.307] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.307] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb4815eb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb4815eb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x853f60d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0172.307] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0172.307] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0172.307] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12769d1c*=0x4000, lpOverlapped=0x0) returned 1
	[0172.331] GetFileType (hFile=0x33c) returned 0x1
	[0172.331] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.331] WriteFile (in: hFile=0x33c, lpBuffer=0x124b0000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x124b0000*, lpNumberOfBytesWritten=0x12769d00*=0x4000, lpOverlapped=0x12769d0c) returned 1
	[0172.331] GetFileType (hFile=0x33c) returned 0x1
	[0172.331] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4000, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8081 | out: pbBuffer=0x127e8081) returned 1
	[0172.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0172.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0172.331] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0172.332] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.332] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.332] WriteFile (in: hFile=0x344, lpBuffer=0x124f2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x124f2000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.332] CloseHandle (hObject=0x344) returned 1
	[0172.344] CloseHandle (hObject=0x33c) returned 1
	[0172.352] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\key3.db.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\key3.db.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.394] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.415] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.417] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.417] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\pluginreg.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\pluginreg.dat"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x81fbde30, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x81fbde30, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x81fbde30, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xe14)) returned 1
	[0172.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e040 | out: pbBuffer=0x1252e040) returned 1
	[0172.417] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e050 | out: pbBuffer=0x1251e050) returned 1
	[0172.417] ReadFile (in: hFile=0x344, lpBuffer=0x12700000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x12700000*, lpNumberOfBytesRead=0x12429d1c*=0xe14, lpOverlapped=0x0) returned 1
	[0172.442] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.460] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.504] SetEvent (hEvent=0x68) returned 1
	[0172.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\secmod.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\secmod.db"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb477d930, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb477d930, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb47c9bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1
	[0172.559] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.564] SetEvent (hEvent=0x68) returned 1
	[0172.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.bak" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.bak"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xc3787480, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3787480, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x3d6)) returned 1
	[0172.574] SetEvent (hEvent=0x2e8) returned 1
	[0172.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\sessionstore.js" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\sessionstore.js"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb82fff30, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x84e029d0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x84e029d0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xbc5)) returned 1
	[0172.589] SetEvent (hEvent=0x80) returned 1
	[0172.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\signons.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\signons.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb6f36850, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x50000)) returned 1
	[0172.601] SetEvent (hEvent=0x2f4) returned 1
	[0172.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\times.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\times.json"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x1d)) returned 1
	[0172.624] SetEvent (hEvent=0x2e8) returned 1
	[0172.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0172.637] SetEvent (hEvent=0xa0) returned 1
	[0172.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0172.637] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\*", lpFindFileData=0x1276b83c | out: lpFindFileData=0x1276b83c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0172.637] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f60210, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x80d71510, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80d71510, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0172.637] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 1
	[0172.637] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276b880 | out: lpFindFileData=0x1276b880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0172.637] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0172.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b504 | out: lpFileInformation=0x1276b504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0172.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0172.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0172.640] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276b714 | out: lpMode=0x1276b714) returned 0
	[0172.640] WriteFile (in: hFile=0x344, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b714, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b714*=0x1180, lpOverlapped=0x0) returned 1
	[0172.642] CloseHandle (hObject=0x344) returned 1
	[0172.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webapps\\webapps.json" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webapps\\webapps.json"), fInfoLevelId=0x0, lpFileInformation=0x1276b900 | out: lpFileInformation=0x1276b900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x80cff0f0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x80cff0f0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80cff0f0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2)) returned 1
	[0172.642] SetEvent (hEvent=0x318) returned 1
	[0172.642] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\silmbjec.default\\webappsstore.sqlite" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles\\silmbjec.default\\webappsstore.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x1276b964 | out: lpFileInformation=0x1276b964*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb66495d0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb66495d0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xc3a63b40, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1
	[0172.654] SetEvent (hEvent=0x2f4) returned 1
	[0172.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276ba2c | out: lpFileInformation=0x1276ba2c*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1
	[0172.655] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\T8obwBHfBO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\t8obwbhfbo.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x631dd9f0, ftCreationTime.dwHighDateTime=0x1d5dfd0, ftLastAccessTime.dwLowDateTime=0xfc601d00, ftLastAccessTime.dwHighDateTime=0x1d5dce0, ftLastWriteTime.dwLowDateTime=0xfc601d00, ftLastWriteTime.dwHighDateTime=0x1d5dce0, nFileSizeHigh=0x0, nFileSizeLow=0x165ed)) returned 1
	[0172.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\TBVaCYAehfAbrB.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\tbvacyaehfabrb.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc2a98d0, ftCreationTime.dwHighDateTime=0x1d5dd2e, ftLastAccessTime.dwLowDateTime=0x8832ceb0, ftLastAccessTime.dwHighDateTime=0x1d5e1bc, ftLastWriteTime.dwLowDateTime=0x8832ceb0, ftLastWriteTime.dwHighDateTime=0x1d5e1bc, nFileSizeHigh=0x0, nFileSizeLow=0x6a07)) returned 1
	[0172.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\T8obwBHfBO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\t8obwbhfbo.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.660] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.660] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\T8obwBHfBO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\t8obwbhfbo.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x631dd9f0, ftCreationTime.dwHighDateTime=0x1d5dfd0, ftLastAccessTime.dwLowDateTime=0xfc601d00, ftLastAccessTime.dwHighDateTime=0x1d5dce0, ftLastWriteTime.dwLowDateTime=0xfc601d00, ftLastWriteTime.dwHighDateTime=0x1d5dce0, nFileSizeHigh=0x0, nFileSizeLow=0x165ed)) returned 1
	[0172.660] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0172.660] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e080 | out: pbBuffer=0x1251e080) returned 1
	[0172.660] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0172.662] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0172.662] SetEvent (hEvent=0x2f4) returned 1
	[0172.662] ReadFile (in: hFile=0x1e4, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12769d1c*=0x165ed, lpOverlapped=0x0) returned 1
	[0172.667] GetFileType (hFile=0x1e4) returned 0x1
	[0172.667] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.667] WriteFile (in: hFile=0x1e4, lpBuffer=0x12978000*, nNumberOfBytesToWrite=0x165ed, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12978000*, lpNumberOfBytesWritten=0x12769d00*=0x165ed, lpOverlapped=0x12769d0c) returned 1
	[0172.667] GetFileType (hFile=0x1e4) returned 0x1
	[0172.667] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x165ed, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.668] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0172.668] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0172.668] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0172.668] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e148 | out: pbBuffer=0x1251e148) returned 1
	[0172.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\T8obwBHfBO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\t8obwbhfbo.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0172.668] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0172.668] WriteFile (in: hFile=0x33c, lpBuffer=0x1284a000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x1284a000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.669] CloseHandle (hObject=0x33c) returned 1
	[0172.669] CloseHandle (hObject=0x1e4) returned 1
	[0172.669] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\T8obwBHfBO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\t8obwbhfbo.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\T8obwBHfBO.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\t8obwbhfbo.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.676] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.712] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.713] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0172.713] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb26740e0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0xb26740e0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0xb26740e0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x6f)) returned 1
	[0172.713] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0172.713] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0172.713] ReadFile (in: hFile=0x34c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1242bd1c*=0x6f, lpOverlapped=0x0) returned 1
	[0172.715] GetFileType (hFile=0x34c) returned 0x1
	[0172.715] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.715] WriteFile (in: hFile=0x34c, lpBuffer=0x1261a000*, nNumberOfBytesToWrite=0x6f, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1261a000*, lpNumberOfBytesWritten=0x1242bd00*=0x6f, lpOverlapped=0x1242bd0c) returned 1
	[0172.715] GetFileType (hFile=0x34c) returned 0x1
	[0172.715] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x6f, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.715] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0172.716] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0172.716] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0172.716] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0172.716] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0172.716] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0172.716] WriteFile (in: hFile=0x2dc, lpBuffer=0x1284a500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1284a500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.717] CloseHandle (hObject=0x2dc) returned 1
	[0172.717] CloseHandle (hObject=0x34c) returned 1
	[0172.717] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Mozilla\\Firefox\\profiles.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\mozilla\\firefox\\profiles.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.746] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bhRzEornXmKqjzhPRV2K.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bhrzeornxmkqjzhprv2k.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.747] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.747] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bhRzEornXmKqjzhPRV2K.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bhrzeornxmkqjzhprv2k.flv"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a207870, ftCreationTime.dwHighDateTime=0x1d5e196, ftLastAccessTime.dwLowDateTime=0x8a241550, ftLastAccessTime.dwHighDateTime=0x1d5d8d2, ftLastWriteTime.dwLowDateTime=0x8a241550, ftLastWriteTime.dwHighDateTime=0x1d5d8d2, nFileSizeHigh=0x0, nFileSizeLow=0x8171)) returned 1
	[0172.747] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0172.747] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880e8 | out: pbBuffer=0x127880e8) returned 1
	[0172.747] ReadFile (in: hFile=0x34c, lpBuffer=0x1284e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1284e000*, lpNumberOfBytesRead=0x12429d1c*=0x8171, lpOverlapped=0x0) returned 1
	[0172.826] GetFileType (hFile=0x34c) returned 0x1
	[0172.826] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.826] WriteFile (in: hFile=0x34c, lpBuffer=0x125d6000*, nNumberOfBytesToWrite=0x8171, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x125d6000*, lpNumberOfBytesWritten=0x12429d00*=0x8171, lpOverlapped=0x12429d0c) returned 1
	[0172.827] GetFileType (hFile=0x34c) returned 0x1
	[0172.827] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x8171, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0172.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434481 | out: pbBuffer=0x12434481) returned 1
	[0172.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0172.827] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0172.919] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e730 | out: pbBuffer=0x1251e730) returned 1
	[0172.919] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bhRzEornXmKqjzhPRV2K.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bhrzeornxmkqjzhprv2k.flv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0172.919] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0172.919] WriteFile (in: hFile=0x1e4, lpBuffer=0x12460500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12460500*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0172.919] CloseHandle (hObject=0x1e4) returned 1
	[0172.920] CloseHandle (hObject=0x34c) returned 1
	[0172.920] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bhRzEornXmKqjzhPRV2K.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bhrzeornxmkqjzhprv2k.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\bhRzEornXmKqjzhPRV2K.flv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\bhrzeornxmkqjzhprv2k.flv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0172.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cNLzJTE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cnlzjte.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0172.928] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1260fd0c | out: lpMode=0x1260fd0c) returned 0
	[0172.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\cNLzJTE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\cnlzjte.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1260fad0 | out: lpFileInformation=0x1260fad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x21222300, ftCreationTime.dwHighDateTime=0x1d5dd5d, ftLastAccessTime.dwLowDateTime=0xbccf2580, ftLastAccessTime.dwHighDateTime=0x1d5dcd3, ftLastWriteTime.dwLowDateTime=0xbccf2580, ftLastWriteTime.dwHighDateTime=0x1d5dcd3, nFileSizeHigh=0x0, nFileSizeLow=0x98c)) returned 1
	[0172.928] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8a0 | out: pbBuffer=0x1252e8a0) returned 1
	[0172.928] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e748 | out: pbBuffer=0x1251e748) returned 1
	[0172.928] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0172.933] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0172.933] SetEvent (hEvent=0xa0) returned 1
	[0172.933] SetEvent (hEvent=0x318) returned 1
	[0172.933] SetEvent (hEvent=0x2e8) returned 1
	[0172.933] ReadFile (in: hFile=0x34c, lpBuffer=0x1288e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1260fd1c, lpOverlapped=0x0 | out: lpBuffer=0x1288e000*, lpNumberOfBytesRead=0x1260fd1c*=0x98c, lpOverlapped=0x0) returned 1
	[0172.954] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.967] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\pNgT-T.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\pngt-t.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbb4db940, ftCreationTime.dwHighDateTime=0x1d5e3b0, ftLastAccessTime.dwLowDateTime=0x3e4e0e80, ftLastAccessTime.dwHighDateTime=0x1d5dfe7, ftLastWriteTime.dwLowDateTime=0x3e4e0e80, ftLastWriteTime.dwHighDateTime=0x1d5dfe7, nFileSizeHigh=0x0, nFileSizeLow=0x18a7)) returned 1
	[0172.973] SwitchToThread () returned 1
	[0172.976] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0172.979] SetEvent (hEvent=0x318) returned 1
	[0172.979] SetEvent (hEvent=0x80) returned 1
	[0172.979] SetEvent (hEvent=0x2f4) returned 1
	[0172.979] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0173.010] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qHdUzmME2Yg T2z.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qhduzmme2yg t2z.swf"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a448370, ftCreationTime.dwHighDateTime=0x1d5d925, ftLastAccessTime.dwLowDateTime=0x82f23e70, ftLastAccessTime.dwHighDateTime=0x1d5e4f2, ftLastWriteTime.dwLowDateTime=0x82f23e70, ftLastWriteTime.dwHighDateTime=0x1d5e4f2, nFileSizeHigh=0x0, nFileSizeLow=0x2f8f)) returned 1
	[0173.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\sytZskr.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sytzskr.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xda169d70, ftCreationTime.dwHighDateTime=0x1d5e10c, ftLastAccessTime.dwLowDateTime=0x7bb717d0, ftLastAccessTime.dwHighDateTime=0x1d5da60, ftLastWriteTime.dwLowDateTime=0x7bb717d0, ftLastWriteTime.dwHighDateTime=0x1d5da60, nFileSizeHigh=0x0, nFileSizeLow=0x175e9)) returned 1
	[0173.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qHdUzmME2Yg T2z.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qhduzmme2yg t2z.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.075] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qHdUzmME2Yg T2z.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qhduzmme2yg t2z.swf"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6a448370, ftCreationTime.dwHighDateTime=0x1d5d925, ftLastAccessTime.dwLowDateTime=0x82f23e70, ftLastAccessTime.dwHighDateTime=0x1d5e4f2, ftLastWriteTime.dwLowDateTime=0x82f23e70, ftLastWriteTime.dwHighDateTime=0x1d5e4f2, nFileSizeHigh=0x0, nFileSizeLow=0x2f8f)) returned 1
	[0173.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0173.075] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0173.075] ReadFile (in: hFile=0x1e4, lpBuffer=0x127c2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127c2000*, lpNumberOfBytesRead=0x1242bd1c*=0x2f8f, lpOverlapped=0x0) returned 1
	[0173.085] GetFileType (hFile=0x1e4) returned 0x1
	[0173.085] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.085] WriteFile (in: hFile=0x1e4, lpBuffer=0x125fe000*, nNumberOfBytesToWrite=0x2f8f, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125fe000*, lpNumberOfBytesWritten=0x1242bd00*=0x2f8f, lpOverlapped=0x1242bd0c) returned 1
	[0173.085] GetFileType (hFile=0x1e4) returned 0x1
	[0173.085] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x2f8f, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.085] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400401 | out: pbBuffer=0x12400401) returned 1
	[0173.085] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400501 | out: pbBuffer=0x12400501) returned 1
	[0173.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400601 | out: pbBuffer=0x12400601) returned 1
	[0173.086] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0173.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qHdUzmME2Yg T2z.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qhduzmme2yg t2z.swf"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0173.086] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.086] WriteFile (in: hFile=0x2dc, lpBuffer=0x125ea000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x125ea000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.087] CloseHandle (hObject=0x2dc) returned 1
	[0173.088] CloseHandle (hObject=0x1e4) returned 1
	[0173.091] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qHdUzmME2Yg T2z.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qhduzmme2yg t2z.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\qHdUzmME2Yg T2z.swf.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\qhduzmme2yg t2z.swf.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.139] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0173.149] SetEvent (hEvent=0x318) returned 1
	[0173.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\w00llA4enJ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\w00lla4enj.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.150] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\w00llA4enJ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\w00lla4enj.wav"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xec53d510, ftCreationTime.dwHighDateTime=0x1d5e1a8, ftLastAccessTime.dwLowDateTime=0x1f75a50, ftLastAccessTime.dwHighDateTime=0x1d5dc80, ftLastWriteTime.dwLowDateTime=0x1f75a50, ftLastWriteTime.dwHighDateTime=0x1d5dc80, nFileSizeHigh=0x0, nFileSizeLow=0xb902)) returned 1
	[0173.150] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240f0c0 | out: pbBuffer=0x1240f0c0) returned 1
	[0173.150] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744588 | out: pbBuffer=0x12744588) returned 1
	[0173.150] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0173.152] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0173.152] SetEvent (hEvent=0x318) returned 1
	[0173.152] ReadFile (in: hFile=0x34c, lpBuffer=0x125a8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x125a8000*, lpNumberOfBytesRead=0x12767d1c*=0xb902, lpOverlapped=0x0) returned 1
	[0173.160] GetFileType (hFile=0x34c) returned 0x1
	[0173.160] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.160] WriteFile (in: hFile=0x34c, lpBuffer=0x125d0000*, nNumberOfBytesToWrite=0xb902, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x125d0000*, lpNumberOfBytesWritten=0x12767d00*=0xb902, lpOverlapped=0x12767d0c) returned 1
	[0173.160] GetFileType (hFile=0x34c) returned 0x1
	[0173.160] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xb902, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.160] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0173.161] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0173.161] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8981 | out: pbBuffer=0x127e8981) returned 1
	[0173.161] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0173.161] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\w00llA4enJ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\w00lla4enj.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.161] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.161] WriteFile (in: hFile=0x1e4, lpBuffer=0x12742500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12742500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.161] CloseHandle (hObject=0x1e4) returned 1
	[0173.163] SwitchToThread () returned 1
	[0173.164] CloseHandle (hObject=0x34c) returned 1
	[0173.165] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\w00llA4enJ.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\w00lla4enj.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\w00llA4enJ.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\w00lla4enj.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.262] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.263] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.263] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499)) returned 1
	[0173.263] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e1c0 | out: pbBuffer=0x1252e1c0) returned 1
	[0173.263] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e018 | out: pbBuffer=0x1251e018) returned 1
	[0173.263] ReadFile (in: hFile=0x34c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x12767d1c*=0x499, lpOverlapped=0x0) returned 1
	[0173.278] GetFileType (hFile=0x34c) returned 0x1
	[0173.279] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.279] WriteFile (in: hFile=0x34c, lpBuffer=0x124f4000*, nNumberOfBytesToWrite=0x499, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x124f4000*, lpNumberOfBytesWritten=0x12767d00*=0x499, lpOverlapped=0x12767d0c) returned 1
	[0173.279] GetFileType (hFile=0x34c) returned 0x1
	[0173.279] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x499, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0173.279] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8501 | out: pbBuffer=0x127e8501) returned 1
	[0173.280] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8601 | out: pbBuffer=0x127e8601) returned 1
	[0173.280] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5e0 | out: pbBuffer=0x1251e5e0) returned 1
	[0173.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0173.280] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.280] WriteFile (in: hFile=0x2dc, lpBuffer=0x124f4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x124f4500*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.280] CloseHandle (hObject=0x2dc) returned 1
	[0173.281] CloseHandle (hObject=0x34c) returned 1
	[0173.281] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.284] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.285] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c)) returned 1
	[0173.285] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e6a0 | out: pbBuffer=0x1252e6a0) returned 1
	[0173.286] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e5f8 | out: pbBuffer=0x1251e5f8) returned 1
	[0173.286] ReadFile (in: hFile=0x34c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12767d1c*=0x19c, lpOverlapped=0x0) returned 1
	[0173.289] GetFileType (hFile=0x34c) returned 0x1
	[0173.289] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.289] WriteFile (in: hFile=0x34c, lpBuffer=0x126069c0*, nNumberOfBytesToWrite=0x19c, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x126069c0*, lpNumberOfBytesWritten=0x12767d00*=0x19c, lpOverlapped=0x12767d0c) returned 1
	[0173.290] GetFileType (hFile=0x34c) returned 0x1
	[0173.290] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x19c, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8801 | out: pbBuffer=0x127e8801) returned 1
	[0173.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b01 | out: pbBuffer=0x127e8b01) returned 1
	[0173.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c01 | out: pbBuffer=0x127e8c01) returned 1
	[0173.290] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e740 | out: pbBuffer=0x1251e740) returned 1
	[0173.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0173.292] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0173.292] WriteFile (in: hFile=0x2dc, lpBuffer=0x124f4a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x124f4a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.293] CloseHandle (hObject=0x2dc) returned 1
	[0173.293] CloseHandle (hObject=0x34c) returned 1
	[0173.293] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.298] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496)) returned 1
	[0173.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494)) returned 1
	[0173.310] SetEvent (hEvent=0x68) returned 1
	[0173.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x1276bbbc | out: lpFileInformation=0x1276bbbc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0173.313] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\cookies"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2200000, hTemplateFile=0x0) returned 0x34c
	[0173.313] GetFileInformationByHandle (in: hFile=0x34c, lpFileInformation=0x1276bb4c | out: lpFileInformation=0x1276bb4c) returned 1
	[0173.313] GetFileInformationByHandleEx (in: hFile=0x34c, FileInformationClass=0x9, lpFileInformation=0x1276bb44, dwBufferSize=0x8 | out: lpFileInformation=0x1276bb44) returned 1
	[0173.313] CloseHandle (hObject=0x34c) returned 1
	[0173.314] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0173.315] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0173.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494)) returned 1
	[0173.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e8c0 | out: pbBuffer=0x1252e8c0) returned 1
	[0173.315] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e758 | out: pbBuffer=0x1251e758) returned 1
	[0173.315] ReadFile (in: hFile=0x34c, lpBuffer=0x12898000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x12898000*, lpNumberOfBytesRead=0x12769d1c*=0x494, lpOverlapped=0x0) returned 1
	[0173.351] GetFileType (hFile=0x34c) returned 0x1
	[0173.351] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.352] WriteFile (in: hFile=0x34c, lpBuffer=0x124f4f00*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x124f4f00*, lpNumberOfBytesWritten=0x12769d00*=0x494, lpOverlapped=0x12769d0c) returned 1
	[0173.352] GetFileType (hFile=0x34c) returned 0x1
	[0173.352] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x494, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.352] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9001 | out: pbBuffer=0x127e9001) returned 1
	[0173.352] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9101 | out: pbBuffer=0x127e9101) returned 1
	[0173.352] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0173.352] SetEvent (hEvent=0x68) returned 1
	[0173.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9201 | out: pbBuffer=0x127e9201) returned 1
	[0173.353] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e870 | out: pbBuffer=0x1251e870) returned 1
	[0173.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.354] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0173.354] WriteFile (in: hFile=0x33c, lpBuffer=0x124f5400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x124f5400*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.354] CloseHandle (hObject=0x33c) returned 1
	[0173.354] CloseHandle (hObject=0x34c) returned 1
	[0173.355] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.359] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0173.386] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0173.386] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0173.413] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0173.413] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0173.414] SetEvent (hEvent=0x80) returned 1
	[0173.414] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0173.430] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0173.430] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4SxZKLC2m8bd.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4sxzklc2m8bd.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.431] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4SxZKLC2m8bd.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4sxzklc2m8bd.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3912f70, ftCreationTime.dwHighDateTime=0x1d5dc18, ftLastAccessTime.dwLowDateTime=0xf7b2d870, ftLastAccessTime.dwHighDateTime=0x1d5d889, ftLastWriteTime.dwLowDateTime=0xf7b2d870, ftLastWriteTime.dwHighDateTime=0x1d5d889, nFileSizeHigh=0x0, nFileSizeLow=0x11e75)) returned 1
	[0173.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0173.431] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0173.432] ReadFile (in: hFile=0x33c, lpBuffer=0x12930000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12930000*, lpNumberOfBytesRead=0x1242bd1c*=0x11e75, lpOverlapped=0x0) returned 1
	[0173.451] GetFileType (hFile=0x33c) returned 0x1
	[0173.451] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.451] WriteFile (in: hFile=0x33c, lpBuffer=0x127ca000*, nNumberOfBytesToWrite=0x11e75, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x127ca000*, lpNumberOfBytesWritten=0x1242bd00*=0x11e75, lpOverlapped=0x1242bd0c) returned 1
	[0173.452] GetFileType (hFile=0x33c) returned 0x1
	[0173.452] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x11e75, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.452] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0173.452] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0173.452] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0173.453] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0173.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4SxZKLC2m8bd.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4sxzklc2m8bd.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.453] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.453] WriteFile (in: hFile=0x344, lpBuffer=0x124f4000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x124f4000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.453] CloseHandle (hObject=0x344) returned 1
	[0173.456] CloseHandle (hObject=0x33c) returned 1
	[0173.460] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4SxZKLC2m8bd.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4sxzklc2m8bd.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\4SxZKLC2m8bd.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\4sxzklc2m8bd.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.614] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0173.625] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0173.647] SetEvent (hEvent=0x80) returned 1
	[0173.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F_8mNJ7sy5JmvmrbmbdK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_8mnj7sy5jmvmrbmbdk.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.648] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F_8mNJ7sy5JmvmrbmbdK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_8mnj7sy5jmvmrbmbdk.gif"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f72230, ftCreationTime.dwHighDateTime=0x1d5dfb4, ftLastAccessTime.dwLowDateTime=0x29528b00, ftLastAccessTime.dwHighDateTime=0x1d5dbfa, ftLastWriteTime.dwLowDateTime=0x29528b00, ftLastWriteTime.dwHighDateTime=0x1d5dbfa, nFileSizeHigh=0x0, nFileSizeLow=0x215a)) returned 1
	[0173.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732260 | out: pbBuffer=0x12732260) returned 1
	[0173.648] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744108 | out: pbBuffer=0x12744108) returned 1
	[0173.649] ReadFile (in: hFile=0x33c, lpBuffer=0x12846000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12846000*, lpNumberOfBytesRead=0x1242bd1c*=0x215a, lpOverlapped=0x0) returned 1
	[0173.653] GetFileType (hFile=0x33c) returned 0x1
	[0173.653] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.653] WriteFile (in: hFile=0x33c, lpBuffer=0x126e0000*, nNumberOfBytesToWrite=0x215a, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x126e0000*, lpNumberOfBytesWritten=0x1242bd00*=0x215a, lpOverlapped=0x1242bd0c) returned 1
	[0173.653] GetFileType (hFile=0x33c) returned 0x1
	[0173.653] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x215a, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.653] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400a81 | out: pbBuffer=0x12400a81) returned 1
	[0173.653] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b81 | out: pbBuffer=0x12400b81) returned 1
	[0173.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c81 | out: pbBuffer=0x12400c81) returned 1
	[0173.654] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744370 | out: pbBuffer=0x12744370) returned 1
	[0173.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F_8mNJ7sy5JmvmrbmbdK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_8mnj7sy5jmvmrbmbdk.gif"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0173.654] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0173.654] WriteFile (in: hFile=0x1e4, lpBuffer=0x124ee500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x124ee500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.654] CloseHandle (hObject=0x1e4) returned 1
	[0173.657] CloseHandle (hObject=0x33c) returned 1
	[0173.660] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F_8mNJ7sy5JmvmrbmbdK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_8mnj7sy5jmvmrbmbdk.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\F_8mNJ7sy5JmvmrbmbdK.gif.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\f_8mnj7sy5jmvmrbmbdk.gif.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.697] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0173.700] SetEvent (hEvent=0x2f4) returned 1
	[0173.700] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNvZpT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nnvzpt.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.701] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0173.701] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNvZpT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nnvzpt.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc980b300, ftCreationTime.dwHighDateTime=0x1d5d8b6, ftLastAccessTime.dwLowDateTime=0xf8599990, ftLastAccessTime.dwHighDateTime=0x1d5e4db, ftLastWriteTime.dwLowDateTime=0xf8599990, ftLastWriteTime.dwHighDateTime=0x1d5e4db, nFileSizeHigh=0x0, nFileSizeLow=0x97a9)) returned 1
	[0173.701] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0173.701] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0173.701] ReadFile (in: hFile=0x33c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1276dd1c*=0x97a9, lpOverlapped=0x0) returned 1
	[0173.704] GetFileType (hFile=0x33c) returned 0x1
	[0173.705] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.705] WriteFile (in: hFile=0x33c, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x97a9, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1276dd00*=0x97a9, lpOverlapped=0x1276dd0c) returned 1
	[0173.705] GetFileType (hFile=0x33c) returned 0x1
	[0173.705] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x97a9, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.705] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271c001 | out: pbBuffer=0x1271c001) returned 1
	[0173.705] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271c101 | out: pbBuffer=0x1271c101) returned 1
	[0173.705] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x1271c201 | out: pbBuffer=0x1271c201) returned 1
	[0173.706] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0173.706] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNvZpT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nnvzpt.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.706] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0173.706] WriteFile (in: hFile=0x344, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.707] CloseHandle (hObject=0x344) returned 1
	[0173.709] CloseHandle (hObject=0x33c) returned 1
	[0173.710] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNvZpT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nnvzpt.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\NNvZpT.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\nnvzpt.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.757] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0173.766] SetEvent (hEvent=0x2e8) returned 1
	[0173.766] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RIrTIY.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rirtiy.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0173.768] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0173.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RIrTIY.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rirtiy.mp3"), fInfoLevelId=0x0, lpFileInformation=0x12613ad0 | out: lpFileInformation=0x12613ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76b4e10, ftCreationTime.dwHighDateTime=0x1d5df9b, ftLastAccessTime.dwLowDateTime=0x50c6bc30, ftLastAccessTime.dwHighDateTime=0x1d5dd88, ftLastWriteTime.dwLowDateTime=0x50c6bc30, ftLastWriteTime.dwHighDateTime=0x1d5dd88, nFileSizeHigh=0x0, nFileSizeLow=0xc94e)) returned 1
	[0173.768] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240eac0 | out: pbBuffer=0x1240eac0) returned 1
	[0173.769] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127881c8 | out: pbBuffer=0x127881c8) returned 1
	[0173.769] ReadFile (in: hFile=0x33c, lpBuffer=0x127aa000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12613d1c, lpOverlapped=0x0 | out: lpBuffer=0x127aa000*, lpNumberOfBytesRead=0x12613d1c*=0xc94e, lpOverlapped=0x0) returned 1
	[0173.787] GetFileType (hFile=0x33c) returned 0x1
	[0173.787] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.787] WriteFile (in: hFile=0x33c, lpBuffer=0x12694000*, nNumberOfBytesToWrite=0xc94e, lpNumberOfBytesWritten=0x12613d00, lpOverlapped=0x12613d0c | out: lpBuffer=0x12694000*, lpNumberOfBytesWritten=0x12613d00*=0xc94e, lpOverlapped=0x12613d0c) returned 1
	[0173.787] GetFileType (hFile=0x33c) returned 0x1
	[0173.787] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0xc94e, lpNewFilePointer=0x0, dwMoveMethod=0x12613ce4 | out: lpNewFilePointer=0x0) returned 1
	[0173.787] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0173.788] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0173.788] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0173.788] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12788280 | out: pbBuffer=0x12788280) returned 1
	[0173.788] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RIrTIY.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rirtiy.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0173.788] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12613d0c | out: lpMode=0x12613d0c) returned 0
	[0173.788] WriteFile (in: hFile=0x344, lpBuffer=0x127e4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12613d0c, lpOverlapped=0x0 | out: lpBuffer=0x127e4500*, lpNumberOfBytesWritten=0x12613d0c*=0x276, lpOverlapped=0x0) returned 1
	[0173.789] CloseHandle (hObject=0x344) returned 1
	[0173.793] CloseHandle (hObject=0x33c) returned 1
	[0173.797] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RIrTIY.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rirtiy.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\RIrTIY.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rirtiy.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0173.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\A0BnHGSvqBhO.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\a0bnhgsvqbho.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e057c20, ftCreationTime.dwHighDateTime=0x1d5dd42, ftLastAccessTime.dwLowDateTime=0x139a49c0, ftLastAccessTime.dwHighDateTime=0x1d5dad7, ftLastWriteTime.dwLowDateTime=0x139a49c0, ftLastWriteTime.dwHighDateTime=0x1d5dad7, nFileSizeHigh=0x0, nFileSizeLow=0x18a75)) returned 1
	[0173.857] SetEvent (hEvent=0x68) returned 1
	[0173.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\D9TMeEzKV.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\d9tmeezkv.ppt"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6befea60, ftCreationTime.dwHighDateTime=0x1d5e6d7, ftLastAccessTime.dwLowDateTime=0x98aad6f0, ftLastAccessTime.dwHighDateTime=0x1d5dcd7, ftLastWriteTime.dwLowDateTime=0x98aad6f0, ftLastWriteTime.dwHighDateTime=0x1d5dcd7, nFileSizeHigh=0x0, nFileSizeLow=0x8159)) returned 1
	[0173.904] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0173.958] SetEvent (hEvent=0x80) returned 1
	[0173.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\HesqnET.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\hesqnet.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dcc11f0, ftCreationTime.dwHighDateTime=0x1d5dea2, ftLastAccessTime.dwLowDateTime=0x84501ca0, ftLastAccessTime.dwHighDateTime=0x1d5e6a6, ftLastWriteTime.dwLowDateTime=0x84501ca0, ftLastWriteTime.dwHighDateTime=0x1d5e6a6, nFileSizeHigh=0x0, nFileSizeLow=0x155b)) returned 1
	[0174.043] SetEvent (hEvent=0xa0) returned 1
	[0174.043] SetEvent (hEvent=0x318) returned 1
	[0174.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\I_1KbfM.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\i_1kbfm.csv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3de2e0, ftCreationTime.dwHighDateTime=0x1d5d9bf, ftLastAccessTime.dwLowDateTime=0x9e5f3160, ftLastAccessTime.dwHighDateTime=0x1d5da82, ftLastWriteTime.dwLowDateTime=0x9e5f3160, ftLastWriteTime.dwHighDateTime=0x1d5da82, nFileSizeHigh=0x0, nFileSizeLow=0x7f6)) returned 1
	[0174.057] SetEvent (hEvent=0x318) returned 1
	[0174.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\QlkcGNLJsj2.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\qlkcgnljsj2.csv"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefefc5e0, ftCreationTime.dwHighDateTime=0x1d5dcd9, ftLastAccessTime.dwLowDateTime=0x11465900, ftLastAccessTime.dwHighDateTime=0x1d5da66, ftLastWriteTime.dwLowDateTime=0x11465900, ftLastWriteTime.dwHighDateTime=0x1d5da66, nFileSizeHigh=0x0, nFileSizeLow=0x130c1)) returned 1
	[0174.211] SetEvent (hEvent=0x318) returned 1
	[0174.211] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\aLO21WMGRgzPBFjr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\alo21wmgrgzpbfjr.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f5fd2e0, ftCreationTime.dwHighDateTime=0x1d5e1ec, ftLastAccessTime.dwLowDateTime=0xa2aedf30, ftLastAccessTime.dwHighDateTime=0x1d5dd71, ftLastWriteTime.dwLowDateTime=0xa2aedf30, ftLastWriteTime.dwHighDateTime=0x1d5dd71, nFileSizeHigh=0x0, nFileSizeLow=0xd692)) returned 1
	[0174.260] SetEvent (hEvent=0x68) returned 1
	[0174.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\bCxV.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\bcxv.gif"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1534c580, ftCreationTime.dwHighDateTime=0x1d5dcbc, ftLastAccessTime.dwLowDateTime=0x29ebe420, ftLastAccessTime.dwHighDateTime=0x1d5daa2, ftLastWriteTime.dwLowDateTime=0x29ebe420, ftLastWriteTime.dwHighDateTime=0x1d5daa2, nFileSizeHigh=0x0, nFileSizeLow=0x4f6e)) returned 1
	[0174.278] SetEvent (hEvent=0xa0) returned 1
	[0174.278] SetEvent (hEvent=0x70) returned 1
	[0174.278] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\cvybTulqZbp.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\cvybtulqzbp.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83531620, ftCreationTime.dwHighDateTime=0x1d5e581, ftLastAccessTime.dwLowDateTime=0x80fb2700, ftLastAccessTime.dwHighDateTime=0x1d5e72f, ftLastWriteTime.dwLowDateTime=0x80fb2700, ftLastWriteTime.dwHighDateTime=0x1d5e72f, nFileSizeHigh=0x0, nFileSizeLow=0x18c9c)) returned 1
	[0174.293] SetEvent (hEvent=0x318) returned 1
	[0174.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\fkidES4GNCj_7WaDF.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\fkides4gncj_7wadf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfbc0, ftCreationTime.dwHighDateTime=0x1d5df67, ftLastAccessTime.dwLowDateTime=0x977ce750, ftLastAccessTime.dwHighDateTime=0x1d5dbb0, ftLastWriteTime.dwLowDateTime=0x977ce750, ftLastWriteTime.dwHighDateTime=0x1d5dbb0, nFileSizeHigh=0x0, nFileSizeLow=0x2057)) returned 1
	[0174.311] SetEvent (hEvent=0x68) returned 1
	[0174.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\gOredi507MvcX.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\goredi507mvcx.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe75df30, ftCreationTime.dwHighDateTime=0x1d5d862, ftLastAccessTime.dwLowDateTime=0xec0d53a0, ftLastAccessTime.dwHighDateTime=0x1d5e3c0, ftLastWriteTime.dwLowDateTime=0xec0d53a0, ftLastWriteTime.dwHighDateTime=0x1d5e3c0, nFileSizeHigh=0x0, nFileSizeLow=0x18509)) returned 1
	[0174.335] SetEvent (hEvent=0x2e8) returned 1
	[0174.335] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\l-BJBqQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\l-bjbqq.png"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf80ffdb0, ftCreationTime.dwHighDateTime=0x1d5e00a, ftLastAccessTime.dwLowDateTime=0x622d2c30, ftLastAccessTime.dwHighDateTime=0x1d5e782, ftLastWriteTime.dwLowDateTime=0x622d2c30, ftLastWriteTime.dwHighDateTime=0x1d5e782, nFileSizeHigh=0x0, nFileSizeLow=0xd90a)) returned 1
	[0174.354] SetEvent (hEvent=0x318) returned 1
	[0174.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tAUX3Ev9ahyZ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\taux3ev9ahyz.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cb429a0, ftCreationTime.dwHighDateTime=0x1d5db7e, ftLastAccessTime.dwLowDateTime=0x8ef4fac0, ftLastAccessTime.dwHighDateTime=0x1d5e72a, ftLastWriteTime.dwLowDateTime=0x8ef4fac0, ftLastWriteTime.dwHighDateTime=0x1d5e72a, nFileSizeHigh=0x0, nFileSizeLow=0x2622)) returned 1
	[0174.370] SetEvent (hEvent=0x68) returned 1
	[0174.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\tPIzGgvgvVnR SD5f.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\tpizggvgvvnr sd5f.ppt"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f4fcbf0, ftCreationTime.dwHighDateTime=0x1d5da33, ftLastAccessTime.dwLowDateTime=0x1b129490, ftLastAccessTime.dwHighDateTime=0x1d5dd12, ftLastWriteTime.dwLowDateTime=0x1b129490, ftLastWriteTime.dwHighDateTime=0x1d5dd12, nFileSizeHigh=0x0, nFileSizeLow=0x18a73)) returned 1
	[0174.384] SetEvent (hEvent=0x2e8) returned 1
	[0174.384] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sf2WnaG7ZcNKp\\uXl8j0BM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sf2wnag7zcnkp\\uxl8j0bm.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1afad570, ftCreationTime.dwHighDateTime=0x1d5dc23, ftLastAccessTime.dwLowDateTime=0x9d607520, ftLastAccessTime.dwHighDateTime=0x1d5df5b, ftLastWriteTime.dwLowDateTime=0x9d607520, ftLastWriteTime.dwHighDateTime=0x1d5df5b, nFileSizeHigh=0x0, nFileSizeLow=0xfa14)) returned 1
	[0174.414] SetEvent (hEvent=0x318) returned 1
	[0174.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XiZ8DV-XyzCo5QMw6GuJ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xiz8dv-xyzco5qmw6guj.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c812170, ftCreationTime.dwHighDateTime=0x1d5d8ba, ftLastAccessTime.dwLowDateTime=0x9d9f3c50, ftLastAccessTime.dwHighDateTime=0x1d5dfde, ftLastWriteTime.dwLowDateTime=0x9d9f3c50, ftLastWriteTime.dwHighDateTime=0x1d5dfde, nFileSizeHigh=0x0, nFileSizeLow=0xb08)) returned 1
	[0174.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XsVfT8IdmJzy7ojdoZ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xsvft8idmjzy7ojdoz.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e759420, ftCreationTime.dwHighDateTime=0x1d5ddbf, ftLastAccessTime.dwLowDateTime=0x58bdc600, ftLastAccessTime.dwHighDateTime=0x1d5e6ec, ftLastWriteTime.dwLowDateTime=0x58bdc600, ftLastWriteTime.dwHighDateTime=0x1d5e6ec, nFileSizeHigh=0x0, nFileSizeLow=0x5b18)) returned 1
	[0174.426] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XiZ8DV-XyzCo5QMw6GuJ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xiz8dv-xyzco5qmw6guj.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0174.428] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XiZ8DV-XyzCo5QMw6GuJ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xiz8dv-xyzco5qmw6guj.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c812170, ftCreationTime.dwHighDateTime=0x1d5d8ba, ftLastAccessTime.dwLowDateTime=0x9d9f3c50, ftLastAccessTime.dwHighDateTime=0x1d5dfde, ftLastWriteTime.dwLowDateTime=0x9d9f3c50, ftLastWriteTime.dwHighDateTime=0x1d5dfde, nFileSizeHigh=0x0, nFileSizeLow=0xb08)) returned 1
	[0174.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e5c0 | out: pbBuffer=0x1252e5c0) returned 1
	[0174.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410548 | out: pbBuffer=0x12410548) returned 1
	[0174.428] ReadFile (in: hFile=0x34c, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x1276dd1c*=0xb08, lpOverlapped=0x0) returned 1
	[0174.439] GetFileType (hFile=0x34c) returned 0x1
	[0174.439] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.439] WriteFile (in: hFile=0x34c, lpBuffer=0x1276e000*, nNumberOfBytesToWrite=0xb08, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1276e000*, lpNumberOfBytesWritten=0x1276dd00*=0xb08, lpOverlapped=0x1276dd0c) returned 1
	[0174.439] GetFileType (hFile=0x34c) returned 0x1
	[0174.439] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0xb08, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.440] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8a81 | out: pbBuffer=0x127e8a81) returned 1
	[0174.441] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8b81 | out: pbBuffer=0x127e8b81) returned 1
	[0174.441] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8c81 | out: pbBuffer=0x127e8c81) returned 1
	[0174.441] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410630 | out: pbBuffer=0x12410630) returned 1
	[0174.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XiZ8DV-XyzCo5QMw6GuJ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xiz8dv-xyzco5qmw6guj.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0174.441] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.441] WriteFile (in: hFile=0x2dc, lpBuffer=0x1263cf00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1263cf00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.441] CloseHandle (hObject=0x2dc) returned 1
	[0174.443] CloseHandle (hObject=0x34c) returned 1
	[0174.445] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XiZ8DV-XyzCo5QMw6GuJ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xiz8dv-xyzco5qmw6guj.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XiZ8DV-XyzCo5QMw6GuJ.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xiz8dv-xyzco5qmw6guj.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.452] SetEvent (hEvent=0x2f4) returned 1
	[0174.452] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XsVfT8IdmJzy7ojdoZ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xsvft8idmjzy7ojdoz.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.453] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XsVfT8IdmJzy7ojdoZ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xsvft8idmjzy7ojdoz.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e759420, ftCreationTime.dwHighDateTime=0x1d5ddbf, ftLastAccessTime.dwLowDateTime=0x58bdc600, ftLastAccessTime.dwHighDateTime=0x1d5e6ec, ftLastWriteTime.dwLowDateTime=0x58bdc600, ftLastWriteTime.dwHighDateTime=0x1d5e6ec, nFileSizeHigh=0x0, nFileSizeLow=0x5b18)) returned 1
	[0174.453] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e7e0 | out: pbBuffer=0x1252e7e0) returned 1
	[0174.453] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410648 | out: pbBuffer=0x12410648) returned 1
	[0174.453] ReadFile (in: hFile=0x33c, lpBuffer=0x125ba000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x125ba000*, lpNumberOfBytesRead=0x1276dd1c*=0x5b18, lpOverlapped=0x0) returned 1
	[0174.458] GetFileType (hFile=0x33c) returned 0x1
	[0174.458] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.459] WriteFile (in: hFile=0x33c, lpBuffer=0x1290e000*, nNumberOfBytesToWrite=0x5b18, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1290e000*, lpNumberOfBytesWritten=0x1276dd00*=0x5b18, lpOverlapped=0x1276dd0c) returned 1
	[0174.459] GetFileType (hFile=0x33c) returned 0x1
	[0174.459] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x5b18, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8f81 | out: pbBuffer=0x127e8f81) returned 1
	[0174.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9081 | out: pbBuffer=0x127e9081) returned 1
	[0174.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9181 | out: pbBuffer=0x127e9181) returned 1
	[0174.459] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410750 | out: pbBuffer=0x12410750) returned 1
	[0174.459] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XsVfT8IdmJzy7ojdoZ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xsvft8idmjzy7ojdoz.mp3"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0174.460] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.460] WriteFile (in: hFile=0x344, lpBuffer=0x1263d400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1263d400*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.460] CloseHandle (hObject=0x344) returned 1
	[0174.461] CloseHandle (hObject=0x33c) returned 1
	[0174.462] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XsVfT8IdmJzy7ojdoZ.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xsvft8idmjzy7ojdoz.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\XsVfT8IdmJzy7ojdoZ.mp3.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xsvft8idmjzy7ojdoz.mp3.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.468] SetEvent (hEvent=0x70) returned 1
	[0174.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y91lC8B.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y91lc8b.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.469] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y91lC8B.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y91lc8b.ods"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f57500, ftCreationTime.dwHighDateTime=0x1d5e386, ftLastAccessTime.dwLowDateTime=0xae2d2de0, ftLastAccessTime.dwHighDateTime=0x1d5df28, ftLastWriteTime.dwLowDateTime=0xae2d2de0, ftLastWriteTime.dwHighDateTime=0x1d5df28, nFileSizeHigh=0x0, nFileSizeLow=0x4d47)) returned 1
	[0174.469] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252ea00 | out: pbBuffer=0x1252ea00) returned 1
	[0174.469] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410778 | out: pbBuffer=0x12410778) returned 1
	[0174.470] ReadFile (in: hFile=0x33c, lpBuffer=0x12914000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12914000*, lpNumberOfBytesRead=0x1276dd1c*=0x4d47, lpOverlapped=0x0) returned 1
	[0174.482] GetFileType (hFile=0x33c) returned 0x1
	[0174.482] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.482] WriteFile (in: hFile=0x33c, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x4d47, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x1276dd00*=0x4d47, lpOverlapped=0x1276dd0c) returned 1
	[0174.482] GetFileType (hFile=0x33c) returned 0x1
	[0174.482] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x4d47, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.483] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9381 | out: pbBuffer=0x127e9381) returned 1
	[0174.483] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9481 | out: pbBuffer=0x127e9481) returned 1
	[0174.483] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e9581 | out: pbBuffer=0x127e9581) returned 1
	[0174.483] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0174.483] SetEvent (hEvent=0x70) returned 1
	[0174.483] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410860 | out: pbBuffer=0x12410860) returned 1
	[0174.483] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y91lC8B.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y91lc8b.ods"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0174.484] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.484] WriteFile (in: hFile=0x2dc, lpBuffer=0x1263d900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x1263d900*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.484] CloseHandle (hObject=0x2dc) returned 1
	[0174.486] CloseHandle (hObject=0x33c) returned 1
	[0174.487] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y91lC8B.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y91lc8b.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Y91lC8B.ods.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\y91lc8b.ods.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.494] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0174.500] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0174.500] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0174.500] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0174.501] ReadFile (in: hFile=0x33c, lpBuffer=0x12668000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x12668000*, lpNumberOfBytesRead=0x1276dd1c*=0x11a, lpOverlapped=0x0) returned 1
	[0174.503] GetFileType (hFile=0x33c) returned 0x1
	[0174.503] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.504] WriteFile (in: hFile=0x33c, lpBuffer=0x1272dc20*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1272dc20*, lpNumberOfBytesWritten=0x1276dd00*=0x11a, lpOverlapped=0x1276dd0c) returned 1
	[0174.525] GetFileType (hFile=0x33c) returned 0x1
	[0174.525] SetFilePointerEx (in: hFile=0x33c, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0174.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400801 | out: pbBuffer=0x12400801) returned 1
	[0174.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400901 | out: pbBuffer=0x12400901) returned 1
	[0174.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0174.525] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0174.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0174.526] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0174.526] WriteFile (in: hFile=0x2dc, lpBuffer=0x12614500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12614500*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0174.526] CloseHandle (hObject=0x2dc) returned 1
	[0174.527] CloseHandle (hObject=0x33c) returned 1
	[0174.527] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0174.533] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.565] SetEvent (hEvent=0x2f4) returned 1
	[0174.565] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.623] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.658] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.786] SetEvent (hEvent=0x68) returned 1
	[0174.786] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.791] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.813] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.860] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.861] SetEvent (hEvent=0x80) returned 1
	[0174.861] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.863] SetEvent (hEvent=0x80) returned 1
	[0174.863] SetEvent (hEvent=0x70) returned 1
	[0174.863] SwitchToThread () returned 1
	[0174.864] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.874] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.890] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.905] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.920] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.937] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.951] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.971] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0174.989] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0175.003] SetEvent (hEvent=0x2e8) returned 1
	[0175.003] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0175.007] SetEvent (hEvent=0x2f4) returned 1
	[0175.007] SetEvent (hEvent=0x70) returned 1
	[0175.007] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0175.013] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0175.018] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0175.029] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0175.052] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0175.208] SetEvent (hEvent=0x2e8) returned 1
	[0175.208] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0175.209] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0175.209] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1
	[0175.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0175.209] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e010 | out: pbBuffer=0x1251e010) returned 1
	[0175.209] ReadFile (in: hFile=0x344, lpBuffer=0x1278a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1278a000*, lpNumberOfBytesRead=0x12767d1c*=0x74e6, lpOverlapped=0x0) returned 1
	[0175.379] GetFileType (hFile=0x344) returned 0x1
	[0175.379] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.379] WriteFile (in: hFile=0x344, lpBuffer=0x1298c000*, nNumberOfBytesToWrite=0x74e6, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x1298c000*, lpNumberOfBytesWritten=0x12767d00*=0x74e6, lpOverlapped=0x12767d0c) returned 1
	[0175.379] GetFileType (hFile=0x344) returned 0x1
	[0175.379] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x74e6, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0175.379] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400301 | out: pbBuffer=0x12400301) returned 1
	[0175.379] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400481 | out: pbBuffer=0x12400481) returned 1
	[0175.380] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0175.380] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e8 | out: pbBuffer=0x1251e0e8) returned 1
	[0175.380] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0175.380] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0175.380] WriteFile (in: hFile=0x34c, lpBuffer=0x125d6000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x125d6000*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0175.380] CloseHandle (hObject=0x34c) returned 1
	[0175.380] CloseHandle (hObject=0x344) returned 1
	[0175.381] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0175.389] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0176.060] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xi5_KGPIcF9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xi5_kgpicf9.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0176.062] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0176.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Xi5_KGPIcF9.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xi5_kgpicf9.pptx"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68516b70, ftCreationTime.dwHighDateTime=0x1d59ddc, ftLastAccessTime.dwLowDateTime=0xb53d0670, ftLastAccessTime.dwHighDateTime=0x1d5bed3, ftLastWriteTime.dwLowDateTime=0xb53d0670, ftLastWriteTime.dwHighDateTime=0x1d5bed3, nFileSizeHigh=0x0, nFileSizeLow=0x14cce)) returned 1
	[0176.062] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732520 | out: pbBuffer=0x12732520) returned 1
	[0176.062] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e110 | out: pbBuffer=0x1251e110) returned 1
	[0176.062] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0176.062] SetEvent (hEvent=0x70) returned 1
	[0176.062] ReadFile (in: hFile=0x1e4, lpBuffer=0x1287e000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x1287e000*, lpNumberOfBytesRead=0x12767d1c*=0x14cce, lpOverlapped=0x0) returned 1
	[0176.126] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0176.351] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0176.668] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0176.681] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0176.851] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0176.853] SetEvent (hEvent=0x2e8) returned 1
	[0176.853] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0176.854] SetEvent (hEvent=0x2e8) returned 1
	[0176.854] SetEvent (hEvent=0x70) returned 1
	[0176.854] SwitchToThread () returned 1
	[0176.855] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0176.859] SetEvent (hEvent=0x70) returned 1
	[0176.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\irr KLGMy_iO-2aIa0 3.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\irr klgmy_io-2aia0 3.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0176.860] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0176.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\irr KLGMy_iO-2aIa0 3.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\irr klgmy_io-2aia0 3.doc"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb57a0400, ftCreationTime.dwHighDateTime=0x1d5e6d6, ftLastAccessTime.dwLowDateTime=0x823b6e0, ftLastAccessTime.dwHighDateTime=0x1d5e0ad, ftLastWriteTime.dwLowDateTime=0x823b6e0, ftLastWriteTime.dwHighDateTime=0x1d5e0ad, nFileSizeHigh=0x0, nFileSizeLow=0x18c1d)) returned 1
	[0176.861] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0176.861] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0176.861] ReadFile (in: hFile=0x34c, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x12767d1c*=0x18c1d, lpOverlapped=0x0) returned 1
	[0176.866] GetFileType (hFile=0x34c) returned 0x1
	[0176.866] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.866] WriteFile (in: hFile=0x34c, lpBuffer=0x12818000*, nNumberOfBytesToWrite=0x18c1d, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12818000*, lpNumberOfBytesWritten=0x12767d00*=0x18c1d, lpOverlapped=0x12767d0c) returned 1
	[0176.867] GetFileType (hFile=0x34c) returned 0x1
	[0176.867] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x18c1d, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.867] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0176.867] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0176.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0176.868] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0176.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\irr KLGMy_iO-2aIa0 3.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\irr klgmy_io-2aia0 3.doc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0176.868] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0176.868] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.868] CloseHandle (hObject=0x33c) returned 1
	[0176.870] CloseHandle (hObject=0x34c) returned 1
	[0176.872] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\irr KLGMy_iO-2aIa0 3.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\irr klgmy_io-2aia0 3.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\irr KLGMy_iO-2aIa0 3.doc.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\irr klgmy_io-2aia0 3.doc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0176.912] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0176.919] SetEvent (hEvent=0x318) returned 1
	[0176.919] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kEdzyToSMHzfQHo4.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kedzytosmhzfqho4.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0176.920] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0176.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kEdzyToSMHzfQHo4.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kedzytosmhzfqho4.doc"), fInfoLevelId=0x0, lpFileInformation=0x124f5ad0 | out: lpFileInformation=0x124f5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b7e42e0, ftCreationTime.dwHighDateTime=0x1d5e164, ftLastAccessTime.dwLowDateTime=0x97664c60, ftLastAccessTime.dwHighDateTime=0x1d5e6c4, ftLastWriteTime.dwLowDateTime=0x97664c60, ftLastWriteTime.dwHighDateTime=0x1d5e6c4, nFileSizeHigh=0x0, nFileSizeLow=0x8a93)) returned 1
	[0176.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0176.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0176.920] ReadFile (in: hFile=0x1e4, lpBuffer=0x1257a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f5d1c, lpOverlapped=0x0 | out: lpBuffer=0x1257a000*, lpNumberOfBytesRead=0x124f5d1c*=0x8a93, lpOverlapped=0x0) returned 1
	[0176.925] GetFileType (hFile=0x1e4) returned 0x1
	[0176.925] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.926] WriteFile (in: hFile=0x1e4, lpBuffer=0x12632000*, nNumberOfBytesToWrite=0x8a93, lpNumberOfBytesWritten=0x124f5d00, lpOverlapped=0x124f5d0c | out: lpBuffer=0x12632000*, lpNumberOfBytesWritten=0x124f5d00*=0x8a93, lpOverlapped=0x124f5d0c) returned 1
	[0176.926] GetFileType (hFile=0x1e4) returned 0x1
	[0176.926] SetFilePointerEx (in: hFile=0x1e4, liDistanceToMove=0x8a93, lpNewFilePointer=0x0, dwMoveMethod=0x124f5ce4 | out: lpNewFilePointer=0x0) returned 1
	[0176.926] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8481 | out: pbBuffer=0x127e8481) returned 1
	[0176.926] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8581 | out: pbBuffer=0x127e8581) returned 1
	[0176.926] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8681 | out: pbBuffer=0x127e8681) returned 1
	[0176.926] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12744460 | out: pbBuffer=0x12744460) returned 1
	[0176.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kEdzyToSMHzfQHo4.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kedzytosmhzfqho4.doc"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0176.927] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f5d0c | out: lpMode=0x124f5d0c) returned 0
	[0176.927] WriteFile (in: hFile=0x344, lpBuffer=0x125eea00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f5d0c, lpOverlapped=0x0 | out: lpBuffer=0x125eea00*, lpNumberOfBytesWritten=0x124f5d0c*=0x276, lpOverlapped=0x0) returned 1
	[0176.927] CloseHandle (hObject=0x344) returned 1
	[0176.928] CloseHandle (hObject=0x1e4) returned 1
	[0176.931] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kEdzyToSMHzfQHo4.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kedzytosmhzfqho4.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kEdzyToSMHzfQHo4.doc.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kedzytosmhzfqho4.doc.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.093] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0177.097] SetEvent (hEvent=0x318) returned 1
	[0177.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mJO_zUfqpG.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mjo_zufqpg.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0177.098] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0177.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mJO_zUfqpG.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mjo_zufqpg.ppt"), fInfoLevelId=0x0, lpFileInformation=0x124f3ad0 | out: lpFileInformation=0x124f3ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe3d6b60, ftCreationTime.dwHighDateTime=0x1d5dbfe, ftLastAccessTime.dwLowDateTime=0xad719e40, ftLastAccessTime.dwHighDateTime=0x1d5e6f8, ftLastWriteTime.dwLowDateTime=0xad719e40, ftLastWriteTime.dwHighDateTime=0x1d5e6f8, nFileSizeHigh=0x0, nFileSizeLow=0x1a2d)) returned 1
	[0177.098] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732460 | out: pbBuffer=0x12732460) returned 1
	[0177.098] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0177.099] ReadFile (in: hFile=0x2dc, lpBuffer=0x126ce000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x124f3d1c, lpOverlapped=0x0 | out: lpBuffer=0x126ce000*, lpNumberOfBytesRead=0x124f3d1c*=0x1a2d, lpOverlapped=0x0) returned 1
	[0177.105] GetFileType (hFile=0x2dc) returned 0x1
	[0177.105] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.105] WriteFile (in: hFile=0x2dc, lpBuffer=0x127cc000*, nNumberOfBytesToWrite=0x1a2d, lpNumberOfBytesWritten=0x124f3d00, lpOverlapped=0x124f3d0c | out: lpBuffer=0x127cc000*, lpNumberOfBytesWritten=0x124f3d00*=0x1a2d, lpOverlapped=0x124f3d0c) returned 1
	[0177.105] GetFileType (hFile=0x2dc) returned 0x1
	[0177.105] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1a2d, lpNewFilePointer=0x0, dwMoveMethod=0x124f3ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.106] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec381 | out: pbBuffer=0x124ec381) returned 1
	[0177.106] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec481 | out: pbBuffer=0x124ec481) returned 1
	[0177.106] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0177.106] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0177.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mJO_zUfqpG.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mjo_zufqpg.ppt"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0177.106] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x124f3d0c | out: lpMode=0x124f3d0c) returned 0
	[0177.106] WriteFile (in: hFile=0x344, lpBuffer=0x12520f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x124f3d0c, lpOverlapped=0x0 | out: lpBuffer=0x12520f00*, lpNumberOfBytesWritten=0x124f3d0c*=0x276, lpOverlapped=0x0) returned 1
	[0177.106] CloseHandle (hObject=0x344) returned 1
	[0177.108] CloseHandle (hObject=0x2dc) returned 1
	[0177.109] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mJO_zUfqpG.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mjo_zufqpg.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\mJO_zUfqpG.ppt.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mjo_zufqpg.ppt.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.157] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0177.158] SetEvent (hEvent=0x318) returned 1
	[0177.158] SetEvent (hEvent=0x70) returned 1
	[0177.158] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0177.161] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0177.167] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0177.185] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0177.206] SetEvent (hEvent=0x318) returned 1
	[0177.206] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0177.207] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0177.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12767ad0 | out: lpFileInformation=0x12767ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a)) returned 1
	[0177.208] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0177.208] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e8 | out: pbBuffer=0x124103e8) returned 1
	[0177.208] ReadFile (in: hFile=0x344, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12767d1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x12767d1c*=0x11a, lpOverlapped=0x0) returned 1
	[0177.212] GetFileType (hFile=0x344) returned 0x1
	[0177.212] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.212] WriteFile (in: hFile=0x344, lpBuffer=0x12515680*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x12767d00, lpOverlapped=0x12767d0c | out: lpBuffer=0x12515680*, lpNumberOfBytesWritten=0x12767d00*=0x11a, lpOverlapped=0x12767d0c) returned 1
	[0177.212] GetFileType (hFile=0x344) returned 0x1
	[0177.212] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x11a, lpNewFilePointer=0x0, dwMoveMethod=0x12767ce4 | out: lpNewFilePointer=0x0) returned 1
	[0177.212] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434581 | out: pbBuffer=0x12434581) returned 1
	[0177.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434681 | out: pbBuffer=0x12434681) returned 1
	[0177.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434781 | out: pbBuffer=0x12434781) returned 1
	[0177.213] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104c0 | out: pbBuffer=0x124104c0) returned 1
	[0177.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0177.213] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12767d0c | out: lpMode=0x12767d0c) returned 0
	[0177.213] WriteFile (in: hFile=0x33c, lpBuffer=0x127eaa00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12767d0c, lpOverlapped=0x0 | out: lpBuffer=0x127eaa00*, lpNumberOfBytesWritten=0x12767d0c*=0x276, lpOverlapped=0x0) returned 1
	[0177.213] CloseHandle (hObject=0x33c) returned 1
	[0177.213] CloseHandle (hObject=0x344) returned 1
	[0177.213] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0177.235] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0177.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1
	[0177.370] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0177.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0177.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0177.381] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0177.387] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0177.387] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1
	[0177.387] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1
	[0177.387] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1
	[0177.387] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1
	[0177.387] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1
	[0177.387] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1
	[0177.387] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0177.387] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0177.396] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0177.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0177.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0177.405] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0177.405] WriteFile (in: hFile=0x1e4, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0177.406] CloseHandle (hObject=0x1e4) returned 1
	[0177.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0178.068] SetEvent (hEvent=0xa0) returned 1
	[0178.068] SetEvent (hEvent=0x80) returned 1
	[0178.068] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0178.078] SetEvent (hEvent=0x70) returned 1
	[0178.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0178.121] SetEvent (hEvent=0x68) returned 1
	[0178.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0178.280] SetEvent (hEvent=0x68) returned 1
	[0178.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0178.299] SetEvent (hEvent=0xa0) returned 1
	[0178.299] SetEvent (hEvent=0x70) returned 1
	[0178.299] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0179.767] SetEvent (hEvent=0x80) returned 1
	[0179.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0179.768] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0179.769] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x1276ba30 | out: lpFindFileData=0x1276ba30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0179.810] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0179.811] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1
	[0179.811] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1
	[0179.811] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1
	[0179.811] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1
	[0179.811] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1
	[0179.811] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba74 | out: lpFindFileData=0x1276ba74*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0179.811] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0179.812] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b6f8 | out: lpFileInformation=0x1276b6f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0179.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0179.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0179.816] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1276b908 | out: lpMode=0x1276b908) returned 0
	[0179.816] WriteFile (in: hFile=0x34c, lpBuffer=0x12477300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b908, lpOverlapped=0x0 | out: lpBuffer=0x12477300*, lpNumberOfBytesWritten=0x1276b908*=0x1180, lpOverlapped=0x0) returned 1
	[0179.817] CloseHandle (hObject=0x34c) returned 1
	[0179.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0179.819] SetEvent (hEvent=0x318) returned 1
	[0179.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0179.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0179.821] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0179.821] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0179.822] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c320 | out: pbBuffer=0x1244c320) returned 1
	[0179.822] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410420 | out: pbBuffer=0x12410420) returned 1
	[0179.822] ReadFile (in: hFile=0x34c, lpBuffer=0x1259a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1259a000*, lpNumberOfBytesRead=0x1242bd1c*=0x85, lpOverlapped=0x0) returned 1
	[0179.824] GetFileType (hFile=0x34c) returned 0x1
	[0179.824] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.824] WriteFile (in: hFile=0x34c, lpBuffer=0x1260e870*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260e870*, lpNumberOfBytesWritten=0x1242bd00*=0x85, lpOverlapped=0x1242bd0c) returned 1
	[0179.825] GetFileType (hFile=0x34c) returned 0x1
	[0179.825] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec581 | out: pbBuffer=0x124ec581) returned 1
	[0179.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec681 | out: pbBuffer=0x124ec681) returned 1
	[0179.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec781 | out: pbBuffer=0x124ec781) returned 1
	[0179.825] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104f8 | out: pbBuffer=0x124104f8) returned 1
	[0179.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0179.826] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0179.826] WriteFile (in: hFile=0x2dc, lpBuffer=0x127d2500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127d2500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0179.826] CloseHandle (hObject=0x2dc) returned 1
	[0179.826] CloseHandle (hObject=0x34c) returned 1
	[0179.826] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0179.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0179.831] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0179.831] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0179.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c660 | out: pbBuffer=0x1244c660) returned 1
	[0179.831] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410540 | out: pbBuffer=0x12410540) returned 1
	[0179.831] ReadFile (in: hFile=0x34c, lpBuffer=0x128a2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x128a2000*, lpNumberOfBytesRead=0x1242bd1c*=0x85, lpOverlapped=0x0) returned 1
	[0179.834] GetFileType (hFile=0x34c) returned 0x1
	[0179.834] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.834] WriteFile (in: hFile=0x34c, lpBuffer=0x1260ec60*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260ec60*, lpNumberOfBytesWritten=0x1242bd00*=0x85, lpOverlapped=0x1242bd0c) returned 1
	[0179.834] GetFileType (hFile=0x34c) returned 0x1
	[0179.834] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.834] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec881 | out: pbBuffer=0x124ec881) returned 1
	[0179.834] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec981 | out: pbBuffer=0x124ec981) returned 1
	[0179.835] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eca81 | out: pbBuffer=0x124eca81) returned 1
	[0179.835] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410628 | out: pbBuffer=0x12410628) returned 1
	[0179.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0179.835] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0179.835] WriteFile (in: hFile=0x2dc, lpBuffer=0x127d2f00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127d2f00*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0179.835] CloseHandle (hObject=0x2dc) returned 1
	[0179.835] CloseHandle (hObject=0x34c) returned 1
	[0179.836] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0179.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0179.908] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0179.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0179.909] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c880 | out: pbBuffer=0x1244c880) returned 1
	[0179.909] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410640 | out: pbBuffer=0x12410640) returned 1
	[0179.909] ReadFile (in: hFile=0x34c, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1242bd1c*=0x85, lpOverlapped=0x0) returned 1
	[0179.911] GetFileType (hFile=0x34c) returned 0x1
	[0179.911] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.911] WriteFile (in: hFile=0x34c, lpBuffer=0x1260f4d0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260f4d0*, lpNumberOfBytesWritten=0x1242bd00*=0x85, lpOverlapped=0x1242bd0c) returned 1
	[0179.911] GetFileType (hFile=0x34c) returned 0x1
	[0179.911] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ece81 | out: pbBuffer=0x124ece81) returned 1
	[0179.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ecf81 | out: pbBuffer=0x124ecf81) returned 1
	[0179.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed101 | out: pbBuffer=0x124ed101) returned 1
	[0179.912] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410748 | out: pbBuffer=0x12410748) returned 1
	[0179.912] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0179.913] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0179.913] WriteFile (in: hFile=0x2dc, lpBuffer=0x127d3400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127d3400*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0179.914] CloseHandle (hObject=0x2dc) returned 1
	[0179.914] CloseHandle (hObject=0x34c) returned 1
	[0179.914] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0179.917] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0179.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1
	[0179.919] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0179.920] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0179.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85)) returned 1
	[0179.920] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244caa0 | out: pbBuffer=0x1244caa0) returned 1
	[0179.921] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410770 | out: pbBuffer=0x12410770) returned 1
	[0179.921] ReadFile (in: hFile=0x34c, lpBuffer=0x12858000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12858000*, lpNumberOfBytesRead=0x1242bd1c*=0x85, lpOverlapped=0x0) returned 1
	[0179.926] GetFileType (hFile=0x34c) returned 0x1
	[0179.926] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.926] WriteFile (in: hFile=0x34c, lpBuffer=0x1260f8c0*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260f8c0*, lpNumberOfBytesWritten=0x1242bd00*=0x85, lpOverlapped=0x1242bd0c) returned 1
	[0179.926] GetFileType (hFile=0x34c) returned 0x1
	[0179.926] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.926] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed201 | out: pbBuffer=0x124ed201) returned 1
	[0179.926] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed301 | out: pbBuffer=0x124ed301) returned 1
	[0179.926] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed401 | out: pbBuffer=0x124ed401) returned 1
	[0179.926] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410848 | out: pbBuffer=0x12410848) returned 1
	[0179.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0179.927] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0179.927] WriteFile (in: hFile=0x2dc, lpBuffer=0x127d3900*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127d3900*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0179.927] CloseHandle (hObject=0x2dc) returned 1
	[0179.927] CloseHandle (hObject=0x34c) returned 1
	[0179.927] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0179.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0179.932] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0179.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86)) returned 1
	[0179.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244ccc0 | out: pbBuffer=0x1244ccc0) returned 1
	[0179.932] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410870 | out: pbBuffer=0x12410870) returned 1
	[0179.933] ReadFile (in: hFile=0x34c, lpBuffer=0x12694000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12694000*, lpNumberOfBytesRead=0x1242bd1c*=0x86, lpOverlapped=0x0) returned 1
	[0179.935] GetFileType (hFile=0x34c) returned 0x1
	[0179.935] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.935] WriteFile (in: hFile=0x34c, lpBuffer=0x1260fcb0*, nNumberOfBytesToWrite=0x86, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1260fcb0*, lpNumberOfBytesWritten=0x1242bd00*=0x86, lpOverlapped=0x1242bd0c) returned 1
	[0179.935] GetFileType (hFile=0x34c) returned 0x1
	[0179.935] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x86, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0179.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed501 | out: pbBuffer=0x124ed501) returned 1
	[0179.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed601 | out: pbBuffer=0x124ed601) returned 1
	[0179.936] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed701 | out: pbBuffer=0x124ed701) returned 1
	[0179.937] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124109c8 | out: pbBuffer=0x124109c8) returned 1
	[0179.937] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0179.937] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0179.937] WriteFile (in: hFile=0x2dc, lpBuffer=0x1287c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x1287c000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0179.937] CloseHandle (hObject=0x2dc) returned 1
	[0179.937] CloseHandle (hObject=0x34c) returned 1
	[0179.937] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0179.979] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0180.419] SetEvent (hEvent=0x2f4) returned 1
	[0180.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0180.420] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0180.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192)) returned 1
	[0180.420] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244cee0 | out: pbBuffer=0x1244cee0) returned 1
	[0180.420] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124109e0 | out: pbBuffer=0x124109e0) returned 1
	[0180.434] ReadFile (in: hFile=0x34c, lpBuffer=0x126d4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x126d4000*, lpNumberOfBytesRead=0x12769d1c*=0x192, lpOverlapped=0x0) returned 1
	[0180.437] GetFileType (hFile=0x34c) returned 0x1
	[0180.437] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0180.437] WriteFile (in: hFile=0x34c, lpBuffer=0x12780680*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12780680*, lpNumberOfBytesWritten=0x12769d00*=0x192, lpOverlapped=0x12769d0c) returned 1
	[0180.437] GetFileType (hFile=0x34c) returned 0x1
	[0180.437] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x192, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0180.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed801 | out: pbBuffer=0x124ed801) returned 1
	[0180.437] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ed901 | out: pbBuffer=0x124ed901) returned 1
	[0180.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124eda01 | out: pbBuffer=0x124eda01) returned 1
	[0180.438] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x12410ab8 | out: pbBuffer=0x12410ab8) returned 1
	[0180.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0180.438] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0180.438] WriteFile (in: hFile=0x1e4, lpBuffer=0x1287c500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x1287c500*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0180.438] CloseHandle (hObject=0x1e4) returned 1
	[0180.438] CloseHandle (hObject=0x34c) returned 1
	[0180.438] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0180.441] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0180.706] SetEvent (hEvent=0x2f4) returned 1
	[0180.706] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0180.791] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0183.106] SetEvent (hEvent=0x318) returned 1
	[0183.106] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0183.238] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0183.269] SetEvent (hEvent=0x2f4) returned 1
	[0183.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\JKys78Oq4yvPVJwsh.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\jkys78oq4yvpvjwsh.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0183.270] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0183.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\JKys78Oq4yvPVJwsh.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\jkys78oq4yvpvjwsh.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe35204c0, ftCreationTime.dwHighDateTime=0x1d5e0c5, ftLastAccessTime.dwLowDateTime=0x74479730, ftLastAccessTime.dwHighDateTime=0x1d5e308, ftLastWriteTime.dwLowDateTime=0x74479730, ftLastWriteTime.dwHighDateTime=0x1d5e308, nFileSizeHigh=0x0, nFileSizeLow=0x19b0)) returned 1
	[0183.270] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0183.270] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12410028 | out: pbBuffer=0x12410028) returned 1
	[0183.270] ReadFile (in: hFile=0x2dc, lpBuffer=0x127f8000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127f8000*, lpNumberOfBytesRead=0x1242bd1c*=0x19b0, lpOverlapped=0x0) returned 1
	[0183.288] GetFileType (hFile=0x2dc) returned 0x1
	[0183.288] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.289] WriteFile (in: hFile=0x2dc, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x19b0, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x1242bd00*=0x19b0, lpOverlapped=0x1242bd0c) returned 1
	[0183.289] GetFileType (hFile=0x2dc) returned 0x1
	[0183.289] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x19b0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0183.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0183.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0183.289] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124103c0 | out: pbBuffer=0x124103c0) returned 1
	[0183.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\JKys78Oq4yvPVJwsh.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\jkys78oq4yvpvjwsh.m4a"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0183.290] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0183.290] WriteFile (in: hFile=0x344, lpBuffer=0x127e2000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x127e2000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.290] CloseHandle (hObject=0x344) returned 1
	[0183.290] CloseHandle (hObject=0x2dc) returned 1
	[0183.290] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\JKys78Oq4yvPVJwsh.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\jkys78oq4yvpvjwsh.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\SQc4kjU_CjpgRTnHf\\JKys78Oq4yvPVJwsh.m4a.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\sqc4kju_cjpgrtnhf\\jkys78oq4yvpvjwsh.m4a.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.292] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0183.346] SetEvent (hEvent=0x318) returned 1
	[0183.346] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0183.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3f212d0, ftCreationTime.dwHighDateTime=0x1d5e240, ftLastAccessTime.dwLowDateTime=0x9a465a30, ftLastAccessTime.dwHighDateTime=0x1d5e5b9, ftLastWriteTime.dwLowDateTime=0x9a465a30, ftLastWriteTime.dwHighDateTime=0x1d5e5b9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1
	[0183.354] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0183.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff
	[0183.355] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\*", lpFindFileData=0x1276b9cc | out: lpFindFileData=0x1276b9cc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3f212d0, ftCreationTime.dwHighDateTime=0x1d5e240, ftLastAccessTime.dwLowDateTime=0x9a465a30, ftLastAccessTime.dwHighDateTime=0x1d5e5b9, ftLastWriteTime.dwLowDateTime=0x9a465a30, ftLastWriteTime.dwHighDateTime=0x1d5e5b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x336a6580
	[0183.355] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3f212d0, ftCreationTime.dwHighDateTime=0x1d5e240, ftLastAccessTime.dwLowDateTime=0x9a465a30, ftLastAccessTime.dwHighDateTime=0x1d5e5b9, ftLastWriteTime.dwLowDateTime=0x9a465a30, ftLastWriteTime.dwHighDateTime=0x1d5e5b9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0183.355] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5ea1c0, ftCreationTime.dwHighDateTime=0x1d5e590, ftLastAccessTime.dwLowDateTime=0x4b48c020, ftLastAccessTime.dwHighDateTime=0x1d5ddd1, ftLastWriteTime.dwLowDateTime=0x4b48c020, ftLastWriteTime.dwHighDateTime=0x1d5ddd1, nFileSizeHigh=0x0, nFileSizeLow=0x11f2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="-oZreAdEPM2NUuGwrAv.mp3", cAlternateFileName="-OZREA~1.MP3")) returned 1
	[0183.355] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd787920, ftCreationTime.dwHighDateTime=0x1d5e40b, ftLastAccessTime.dwLowDateTime=0xa0e652d0, ftLastAccessTime.dwHighDateTime=0x1d5dd32, ftLastWriteTime.dwLowDateTime=0xa0e652d0, ftLastWriteTime.dwHighDateTime=0x1d5dd32, nFileSizeHigh=0x0, nFileSizeLow=0xcca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="HNs37_UjDGV3b-6tLN.wav", cAlternateFileName="HNS37_~1.WAV")) returned 1
	[0183.355] FindNextFileW (in: hFindFile=0x336a6580, lpFindFileData=0x1276ba10 | out: lpFindFileData=0x1276ba10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0
	[0183.355] FindClose (in: hFindFile=0x336a6580 | out: hFindFile=0x336a6580) returned 1
	[0183.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\# m0rphine help #.hta"), fInfoLevelId=0x0, lpFileInformation=0x1276b694 | out: lpFileInformation=0x1276b694*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0
	[0183.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\# m0rphine help #.hta"), dwDesiredAccess=0x0, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0xffffffff
	[0183.356] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\# M0rphine Help #.hta" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\# m0rphine help #.hta"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.478] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276b8a4 | out: lpMode=0x1276b8a4) returned 0
	[0183.478] WriteFile (in: hFile=0x33c, lpBuffer=0x1263f300*, nNumberOfBytesToWrite=0x1180, lpNumberOfBytesWritten=0x1276b8a4, lpOverlapped=0x0 | out: lpBuffer=0x1263f300*, lpNumberOfBytesWritten=0x1276b8a4*=0x1180, lpOverlapped=0x0) returned 1
	[0183.480] CloseHandle (hObject=0x33c) returned 1
	[0183.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\-oZreAdEPM2NUuGwrAv.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\-ozreadepm2nuugwrav.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e5ea1c0, ftCreationTime.dwHighDateTime=0x1d5e590, ftLastAccessTime.dwLowDateTime=0x4b48c020, ftLastAccessTime.dwHighDateTime=0x1d5ddd1, ftLastWriteTime.dwLowDateTime=0x4b48c020, ftLastWriteTime.dwHighDateTime=0x1d5ddd1, nFileSizeHigh=0x0, nFileSizeLow=0x11f2b)) returned 1
	[0183.484] SetEvent (hEvent=0x2e8) returned 1
	[0183.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\ZMrxS ESO\\HNs37_UjDGV3b-6tLN.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\zmrxs eso\\hns37_ujdgv3b-6tln.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276ba90 | out: lpFileInformation=0x1276ba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd787920, ftCreationTime.dwHighDateTime=0x1d5e40b, ftLastAccessTime.dwLowDateTime=0xa0e652d0, ftLastAccessTime.dwHighDateTime=0x1d5dd32, ftLastWriteTime.dwLowDateTime=0xa0e652d0, ftLastWriteTime.dwHighDateTime=0x1d5dd32, nFileSizeHigh=0x0, nFileSizeLow=0xcca7)) returned 1
	[0183.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\aDmUv.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\admuv.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6ea6480, ftCreationTime.dwHighDateTime=0x1d5e3c3, ftLastAccessTime.dwLowDateTime=0xb9837510, ftLastAccessTime.dwHighDateTime=0x1d5d932, ftLastWriteTime.dwLowDateTime=0xb9837510, ftLastWriteTime.dwHighDateTime=0x1d5d932, nFileSizeHigh=0x0, nFileSizeLow=0xe293)) returned 1
	[0183.497] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\nclcKB.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\nclckb.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c40070, ftCreationTime.dwHighDateTime=0x1d5e170, ftLastAccessTime.dwLowDateTime=0xd3a71a00, ftLastAccessTime.dwHighDateTime=0x1d5dcb6, ftLastWriteTime.dwLowDateTime=0xd3a71a00, ftLastWriteTime.dwHighDateTime=0x1d5dcb6, nFileSizeHigh=0x0, nFileSizeLow=0xe570)) returned 1
	[0183.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\o zJSHAGklYWfvj-A.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\o zjshagklywfvj-a.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f9215d0, ftCreationTime.dwHighDateTime=0x1d5d9a2, ftLastAccessTime.dwLowDateTime=0x8f1b0130, ftLastAccessTime.dwHighDateTime=0x1d5e5e9, ftLastWriteTime.dwLowDateTime=0x8f1b0130, ftLastWriteTime.dwHighDateTime=0x1d5e5e9, nFileSizeHigh=0x0, nFileSizeLow=0x11563)) returned 1
	[0183.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\oiURl7eLwLiEF9t.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\oiurl7elwlief9t.wav"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b364f50, ftCreationTime.dwHighDateTime=0x1d5de7c, ftLastAccessTime.dwLowDateTime=0x84763880, ftLastAccessTime.dwHighDateTime=0x1d5dcb1, ftLastWriteTime.dwLowDateTime=0x84763880, ftLastWriteTime.dwHighDateTime=0x1d5dcb1, nFileSizeHigh=0x0, nFileSizeLow=0x10489)) returned 1
	[0183.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\o zJSHAGklYWfvj-A.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\o zjshagklywfvj-a.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0183.535] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0183.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\o zJSHAGklYWfvj-A.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\o zjshagklywfvj-a.wav"), fInfoLevelId=0x0, lpFileInformation=0x12429ad0 | out: lpFileInformation=0x12429ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f9215d0, ftCreationTime.dwHighDateTime=0x1d5d9a2, ftLastAccessTime.dwLowDateTime=0x8f1b0130, ftLastAccessTime.dwHighDateTime=0x1d5e5e9, ftLastWriteTime.dwLowDateTime=0x8f1b0130, ftLastWriteTime.dwHighDateTime=0x1d5e5e9, nFileSizeHigh=0x0, nFileSizeLow=0x11563)) returned 1
	[0183.535] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e440 | out: pbBuffer=0x1252e440) returned 1
	[0183.535] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e530 | out: pbBuffer=0x1251e530) returned 1
	[0183.535] ReadFile (in: hFile=0x34c, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12429d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12429d1c*=0x11563, lpOverlapped=0x0) returned 1
	[0183.644] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0183.677] GetFileType (hFile=0x34c) returned 0x1
	[0183.677] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.677] WriteFile (in: hFile=0x34c, lpBuffer=0x128fa000*, nNumberOfBytesToWrite=0x11563, lpNumberOfBytesWritten=0x12429d00, lpOverlapped=0x12429d0c | out: lpBuffer=0x128fa000*, lpNumberOfBytesWritten=0x12429d00*=0x11563, lpOverlapped=0x12429d0c) returned 1
	[0183.678] GetFileType (hFile=0x34c) returned 0x1
	[0183.678] SetFilePointerEx (in: hFile=0x34c, liDistanceToMove=0x11563, lpNewFilePointer=0x0, dwMoveMethod=0x12429ce4 | out: lpNewFilePointer=0x0) returned 1
	[0183.678] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401301 | out: pbBuffer=0x12401301) returned 1
	[0183.678] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401401 | out: pbBuffer=0x12401401) returned 1
	[0183.678] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401501 | out: pbBuffer=0x12401501) returned 1
	[0183.679] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445c0 | out: pbBuffer=0x127445c0) returned 1
	[0183.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\o zJSHAGklYWfvj-A.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\o zjshagklywfvj-a.wav"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0183.679] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12429d0c | out: lpMode=0x12429d0c) returned 0
	[0183.679] WriteFile (in: hFile=0x33c, lpBuffer=0x12743400*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12429d0c, lpOverlapped=0x0 | out: lpBuffer=0x12743400*, lpNumberOfBytesWritten=0x12429d0c*=0x276, lpOverlapped=0x0) returned 1
	[0183.679] CloseHandle (hObject=0x33c) returned 1
	[0183.679] CloseHandle (hObject=0x34c) returned 1
	[0183.679] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\o zJSHAGklYWfvj-A.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\o zjshagklywfvj-a.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4W OpAHh1eRq\\o zJSHAGklYWfvj-A.wav.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4w opahh1erq\\o zjshagklywfvj-a.wav.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0183.683] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0183.738] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0183.772] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0184.845] SetEvent (hEvent=0x68) returned 1
	[0184.845] SetEvent (hEvent=0x70) returned 1
	[0184.845] SetEvent (hEvent=0x2f4) returned 1
	[0184.845] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0185.607] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0185.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\VIzBq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vizbq.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.783] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0185.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\VIzBq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vizbq.jpg"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8504a310, ftCreationTime.dwHighDateTime=0x1d5d912, ftLastAccessTime.dwLowDateTime=0xfd81f0f0, ftLastAccessTime.dwHighDateTime=0x1d5e555, ftLastWriteTime.dwLowDateTime=0xfd81f0f0, ftLastWriteTime.dwHighDateTime=0x1d5e555, nFileSizeHigh=0x0, nFileSizeLow=0x2cbd)) returned 1
	[0185.783] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0185.783] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0185.783] ReadFile (in: hFile=0x2dc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12769d1c*=0x2cbd, lpOverlapped=0x0) returned 1
	[0185.846] GetFileType (hFile=0x2dc) returned 0x1
	[0185.847] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.847] WriteFile (in: hFile=0x2dc, lpBuffer=0x12628000*, nNumberOfBytesToWrite=0x2cbd, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12628000*, lpNumberOfBytesWritten=0x12769d00*=0x2cbd, lpOverlapped=0x12769d0c) returned 1
	[0185.847] GetFileType (hFile=0x2dc) returned 0x1
	[0185.847] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x2cbd, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.847] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb28, ulCount=0x10, ulNumEntriesRemoved=0x340ffb0c, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb28, ulNumEntriesRemoved=0x340ffb0c) returned 0
	[0185.847] SetEvent (hEvent=0x70) returned 1
	[0185.848] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0185.849] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0185.849] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0185.849] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0185.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\VIzBq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vizbq.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0185.849] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0185.849] WriteFile (in: hFile=0x1e4, lpBuffer=0x128de000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x128de000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.849] CloseHandle (hObject=0x1e4) returned 1
	[0185.850] CloseHandle (hObject=0x2dc) returned 1
	[0185.850] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\VIzBq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vizbq.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\VIzBq.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vizbq.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\iw-KpJ4CGM5D1Nr2-5J.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\iw-kpj4cgm5d1nr2-5j.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.858] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0185.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\iw-KpJ4CGM5D1Nr2-5J.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\iw-kpj4cgm5d1nr2-5j.png"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9464cd20, ftCreationTime.dwHighDateTime=0x1d5db48, ftLastAccessTime.dwLowDateTime=0x5f8c50b0, ftLastAccessTime.dwHighDateTime=0x1d5e560, ftLastWriteTime.dwLowDateTime=0x5f8c50b0, ftLastWriteTime.dwHighDateTime=0x1d5e560, nFileSizeHigh=0x0, nFileSizeLow=0xb37f)) returned 1
	[0185.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x127322c0 | out: pbBuffer=0x127322c0) returned 1
	[0185.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127880f8 | out: pbBuffer=0x127880f8) returned 1
	[0185.858] ReadFile (in: hFile=0x2dc, lpBuffer=0x1290a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1290a000*, lpNumberOfBytesRead=0x12769d1c*=0xb37f, lpOverlapped=0x0) returned 1
	[0185.898] GetFileType (hFile=0x2dc) returned 0x1
	[0185.898] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.898] WriteFile (in: hFile=0x2dc, lpBuffer=0x1255e000*, nNumberOfBytesToWrite=0xb37f, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x1255e000*, lpNumberOfBytesWritten=0x12769d00*=0xb37f, lpOverlapped=0x12769d0c) returned 1
	[0185.899] GetFileType (hFile=0x2dc) returned 0x1
	[0185.899] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0xb37f, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0185.899] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401601 | out: pbBuffer=0x12401601) returned 1
	[0185.899] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401701 | out: pbBuffer=0x12401701) returned 1
	[0185.899] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12401801 | out: pbBuffer=0x12401801) returned 1
	[0185.899] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127445b0 | out: pbBuffer=0x127445b0) returned 1
	[0185.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\iw-KpJ4CGM5D1Nr2-5J.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\iw-kpj4cgm5d1nr2-5j.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0185.900] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0185.900] WriteFile (in: hFile=0x33c, lpBuffer=0x12618000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12618000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0185.900] CloseHandle (hObject=0x33c) returned 1
	[0185.900] CloseHandle (hObject=0x2dc) returned 1
	[0185.900] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\iw-KpJ4CGM5D1Nr2-5J.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\iw-kpj4cgm5d1nr2-5j.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\iw-KpJ4CGM5D1Nr2-5J.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\iw-kpj4cgm5d1nr2-5j.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0185.904] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0185.939] SetEvent (hEvent=0x318) returned 1
	[0185.939] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0185.989] SetEvent (hEvent=0x318) returned 1
	[0185.989] SetEvent (hEvent=0x68) returned 1
	[0185.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\u6eTER.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\u6eter.png"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb88b6100, ftCreationTime.dwHighDateTime=0x1d5e318, ftLastAccessTime.dwLowDateTime=0xe77bbbe0, ftLastAccessTime.dwHighDateTime=0x1d5e273, ftLastWriteTime.dwLowDateTime=0xe77bbbe0, ftLastWriteTime.dwHighDateTime=0x1d5e273, nFileSizeHigh=0x0, nFileSizeLow=0x9285)) returned 1
	[0185.990] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\v-OFHGzr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\v-ofhgzr.png"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5edb80, ftCreationTime.dwHighDateTime=0x1d5e0cb, ftLastAccessTime.dwLowDateTime=0xf8c7fb70, ftLastAccessTime.dwHighDateTime=0x1d5e7ff, ftLastWriteTime.dwLowDateTime=0xf8c7fb70, ftLastWriteTime.dwHighDateTime=0x1d5e7ff, nFileSizeHigh=0x0, nFileSizeLow=0x380f)) returned 1
	[0185.991] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\vZtfgQE6NXgqZFh_Uj0T.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\vztfgqe6nxgqzfh_uj0t.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf5ec3d0, ftCreationTime.dwHighDateTime=0x1d5d91f, ftLastAccessTime.dwLowDateTime=0x53b89040, ftLastAccessTime.dwHighDateTime=0x1d5dbac, ftLastWriteTime.dwLowDateTime=0x53b89040, ftLastWriteTime.dwHighDateTime=0x1d5dbac, nFileSizeHigh=0x0, nFileSizeLow=0x10ca1)) returned 1
	[0185.991] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\v-OFHGzr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\v-ofhgzr.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0185.992] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0185.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\v-OFHGzr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\v-ofhgzr.png"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5edb80, ftCreationTime.dwHighDateTime=0x1d5e0cb, ftLastAccessTime.dwLowDateTime=0xf8c7fb70, ftLastAccessTime.dwHighDateTime=0x1d5e7ff, ftLastWriteTime.dwLowDateTime=0xf8c7fb70, ftLastWriteTime.dwHighDateTime=0x1d5e7ff, nFileSizeHigh=0x0, nFileSizeLow=0x380f)) returned 1
	[0185.993] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0185.993] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0185.993] ReadFile (in: hFile=0x2dc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x12769d1c*=0x380f, lpOverlapped=0x0) returned 1
	[0186.131] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0186.206] GetFileType (hFile=0x2dc) returned 0x1
	[0186.206] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.206] WriteFile (in: hFile=0x2dc, lpBuffer=0x12522000*, nNumberOfBytesToWrite=0x380f, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12522000*, lpNumberOfBytesWritten=0x12769d00*=0x380f, lpOverlapped=0x12769d0c) returned 1
	[0186.206] GetFileType (hFile=0x2dc) returned 0x1
	[0186.206] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x380f, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400581 | out: pbBuffer=0x12400581) returned 1
	[0186.206] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400701 | out: pbBuffer=0x12400701) returned 1
	[0186.207] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400881 | out: pbBuffer=0x12400881) returned 1
	[0186.207] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0186.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\v-OFHGzr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\v-ofhgzr.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.207] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0186.207] WriteFile (in: hFile=0x1e4, lpBuffer=0x1245c000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x1245c000*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.207] CloseHandle (hObject=0x1e4) returned 1
	[0186.272] CloseHandle (hObject=0x2dc) returned 1
	[0186.273] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\v-OFHGzr.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\v-ofhgzr.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-B2p1eoc\\v-OFHGzr.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-b2p1eoc\\v-ofhgzr.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.312] SetEvent (hEvent=0x2f4) returned 1
	[0186.312] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0186.318] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0186.327] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0186.327] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0186.328] SetEvent (hEvent=0x70) returned 1
	[0186.328] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0186.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ExV5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\exv5.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.345] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ExV5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\exv5.png"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f720840, ftCreationTime.dwHighDateTime=0x1d5d8d2, ftLastAccessTime.dwLowDateTime=0x55876140, ftLastAccessTime.dwHighDateTime=0x1d5d895, ftLastWriteTime.dwLowDateTime=0x55876140, ftLastWriteTime.dwHighDateTime=0x1d5d895, nFileSizeHigh=0x0, nFileSizeLow=0x1172a)) returned 1
	[0186.345] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0186.345] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0186.345] ReadFile (in: hFile=0x2dc, lpBuffer=0x12818000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12818000*, lpNumberOfBytesRead=0x1242bd1c*=0x1172a, lpOverlapped=0x0) returned 1
	[0186.357] GetFileType (hFile=0x2dc) returned 0x1
	[0186.357] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.357] WriteFile (in: hFile=0x2dc, lpBuffer=0x1255a000*, nNumberOfBytesToWrite=0x1172a, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x1255a000*, lpNumberOfBytesWritten=0x1242bd00*=0x1172a, lpOverlapped=0x1242bd0c) returned 1
	[0186.357] GetFileType (hFile=0x2dc) returned 0x1
	[0186.357] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x1172a, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0186.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0186.357] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0186.358] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0186.358] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ExV5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\exv5.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.358] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.358] WriteFile (in: hFile=0x1e4, lpBuffer=0x128ce000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128ce000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.358] CloseHandle (hObject=0x1e4) returned 1
	[0186.363] CloseHandle (hObject=0x2dc) returned 1
	[0186.364] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ExV5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\exv5.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\ExV5.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\exv5.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.395] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0186.397] SetEvent (hEvent=0x70) returned 1
	[0186.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dM0lseJn14p.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dm0lsejn14p.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.398] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.398] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dM0lseJn14p.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dm0lsejn14p.png"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54cb4f20, ftCreationTime.dwHighDateTime=0x1d5e4c8, ftLastAccessTime.dwLowDateTime=0x5394e220, ftLastAccessTime.dwHighDateTime=0x1d5e3f0, ftLastWriteTime.dwLowDateTime=0x5394e220, ftLastWriteTime.dwHighDateTime=0x1d5e3f0, nFileSizeHigh=0x0, nFileSizeLow=0xcfa5)) returned 1
	[0186.398] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0186.399] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103d8 | out: pbBuffer=0x124103d8) returned 1
	[0186.399] ReadFile (in: hFile=0x344, lpBuffer=0x12904000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x12904000*, lpNumberOfBytesRead=0x12727d1c*=0xcfa5, lpOverlapped=0x0) returned 1
	[0186.402] GetFileType (hFile=0x344) returned 0x1
	[0186.402] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.402] WriteFile (in: hFile=0x344, lpBuffer=0x125ec000*, nNumberOfBytesToWrite=0xcfa5, lpNumberOfBytesWritten=0x12727d00, lpOverlapped=0x12727d0c | out: lpBuffer=0x125ec000*, lpNumberOfBytesWritten=0x12727d00*=0xcfa5, lpOverlapped=0x12727d0c) returned 1
	[0186.403] GetFileType (hFile=0x344) returned 0x1
	[0186.403] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0xcfa5, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.403] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400b01 | out: pbBuffer=0x12400b01) returned 1
	[0186.403] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0186.403] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0186.403] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b0 | out: pbBuffer=0x124104b0) returned 1
	[0186.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dM0lseJn14p.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dm0lsejn14p.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.404] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.404] WriteFile (in: hFile=0x2dc, lpBuffer=0x128de500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12727d0c, lpOverlapped=0x0 | out: lpBuffer=0x128de500*, lpNumberOfBytesWritten=0x12727d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.404] CloseHandle (hObject=0x2dc) returned 1
	[0186.405] CloseHandle (hObject=0x344) returned 1
	[0186.406] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dM0lseJn14p.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dm0lsejn14p.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dM0lseJn14p.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dm0lsejn14p.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.423] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hBmyV.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hbmyv.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.424] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0186.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hBmyV.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hbmyv.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1276dad0 | out: lpFileInformation=0x1276dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f55c4f0, ftCreationTime.dwHighDateTime=0x1d5d9cf, ftLastAccessTime.dwLowDateTime=0x5ef5fd50, ftLastAccessTime.dwHighDateTime=0x1d5e0f0, ftLastWriteTime.dwLowDateTime=0x5ef5fd50, ftLastWriteTime.dwHighDateTime=0x1d5e0f0, nFileSizeHigh=0x0, nFileSizeLow=0x1396)) returned 1
	[0186.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x12732040 | out: pbBuffer=0x12732040) returned 1
	[0186.424] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12788018 | out: pbBuffer=0x12788018) returned 1
	[0186.424] ReadFile (in: hFile=0x344, lpBuffer=0x127c4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1276dd1c, lpOverlapped=0x0 | out: lpBuffer=0x127c4000*, lpNumberOfBytesRead=0x1276dd1c*=0x1396, lpOverlapped=0x0) returned 1
	[0186.427] GetFileType (hFile=0x344) returned 0x1
	[0186.427] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.427] WriteFile (in: hFile=0x344, lpBuffer=0x1250d500*, nNumberOfBytesToWrite=0x1396, lpNumberOfBytesWritten=0x1276dd00, lpOverlapped=0x1276dd0c | out: lpBuffer=0x1250d500*, lpNumberOfBytesWritten=0x1276dd00*=0x1396, lpOverlapped=0x1276dd0c) returned 1
	[0186.428] GetFileType (hFile=0x344) returned 0x1
	[0186.428] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x1396, lpNewFilePointer=0x0, dwMoveMethod=0x1276dce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434181 | out: pbBuffer=0x12434181) returned 1
	[0186.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434281 | out: pbBuffer=0x12434281) returned 1
	[0186.428] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12434381 | out: pbBuffer=0x12434381) returned 1
	[0186.429] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127880d0 | out: pbBuffer=0x127880d0) returned 1
	[0186.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hBmyV.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hbmyv.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x33c
	[0186.429] GetConsoleMode (in: hConsoleHandle=0x33c, lpMode=0x1276dd0c | out: lpMode=0x1276dd0c) returned 0
	[0186.429] WriteFile (in: hFile=0x33c, lpBuffer=0x12520a00*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1276dd0c, lpOverlapped=0x0 | out: lpBuffer=0x12520a00*, lpNumberOfBytesWritten=0x1276dd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.429] CloseHandle (hObject=0x33c) returned 1
	[0186.430] CloseHandle (hObject=0x344) returned 1
	[0186.431] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hBmyV.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hbmyv.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hBmyV.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hbmyv.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.454] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0186.457] SetEvent (hEvent=0x80) returned 1
	[0186.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oRq7IhOIsJvjWIQ1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\orq7ihoisjvjwiq1.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.458] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oRq7IhOIsJvjWIQ1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\orq7ihoisjvjwiq1.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bba91b0, ftCreationTime.dwHighDateTime=0x1d5e67e, ftLastAccessTime.dwLowDateTime=0xa5ec5c70, ftLastAccessTime.dwHighDateTime=0x1d5e34f, ftLastWriteTime.dwLowDateTime=0xa5ec5c70, ftLastWriteTime.dwHighDateTime=0x1d5e34f, nFileSizeHigh=0x0, nFileSizeLow=0x180b3)) returned 1
	[0186.458] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1240e620 | out: pbBuffer=0x1240e620) returned 1
	[0186.458] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e108 | out: pbBuffer=0x1251e108) returned 1
	[0186.458] ReadFile (in: hFile=0x2dc, lpBuffer=0x1253a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x1253a000*, lpNumberOfBytesRead=0x1242bd1c*=0x180b3, lpOverlapped=0x0) returned 1
	[0186.462] GetFileType (hFile=0x2dc) returned 0x1
	[0186.462] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.462] WriteFile (in: hFile=0x2dc, lpBuffer=0x125e2000*, nNumberOfBytesToWrite=0x180b3, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x125e2000*, lpNumberOfBytesWritten=0x1242bd00*=0x180b3, lpOverlapped=0x1242bd0c) returned 1
	[0186.462] GetFileType (hFile=0x2dc) returned 0x1
	[0186.462] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x180b3, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8701 | out: pbBuffer=0x127e8701) returned 1
	[0186.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8801 | out: pbBuffer=0x127e8801) returned 1
	[0186.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8901 | out: pbBuffer=0x127e8901) returned 1
	[0186.463] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e5d0 | out: pbBuffer=0x1251e5d0) returned 1
	[0186.463] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oRq7IhOIsJvjWIQ1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\orq7ihoisjvjwiq1.jpg"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.463] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.463] WriteFile (in: hFile=0x34c, lpBuffer=0x128d4500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128d4500*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.463] CloseHandle (hObject=0x34c) returned 1
	[0186.464] CloseHandle (hObject=0x2dc) returned 1
	[0186.465] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oRq7IhOIsJvjWIQ1.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\orq7ihoisjvjwiq1.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oRq7IhOIsJvjWIQ1.jpg.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\orq7ihoisjvjwiq1.jpg.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.497] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0186.499] SetEvent (hEvent=0x80) returned 1
	[0186.499] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vidbZBYUutx.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vidbzbyuutx.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x2dc
	[0186.500] GetConsoleMode (in: hConsoleHandle=0x2dc, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vidbZBYUutx.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vidbzbyuutx.png"), fInfoLevelId=0x0, lpFileInformation=0x12727ad0 | out: lpFileInformation=0x12727ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dba22c0, ftCreationTime.dwHighDateTime=0x1d5e52d, ftLastAccessTime.dwLowDateTime=0xa421e660, ftLastAccessTime.dwHighDateTime=0x1d5de51, ftLastWriteTime.dwLowDateTime=0xa421e660, ftLastWriteTime.dwHighDateTime=0x1d5de51, nFileSizeHigh=0x0, nFileSizeLow=0x13de8)) returned 1
	[0186.500] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e260 | out: pbBuffer=0x1252e260) returned 1
	[0186.500] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x124103e0 | out: pbBuffer=0x124103e0) returned 1
	[0186.500] ReadFile (in: hFile=0x2dc, lpBuffer=0x12686000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12727d1c, lpOverlapped=0x0 | out: lpBuffer=0x12686000*, lpNumberOfBytesRead=0x12727d1c*=0x13de8, lpOverlapped=0x0) returned 1
	[0186.507] GetFileType (hFile=0x2dc) returned 0x1
	[0186.507] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.507] WriteFile (in: hFile=0x2dc, lpBuffer=0x126c6000*, nNumberOfBytesToWrite=0x13de8, lpNumberOfBytesWritten=0x12727d00, lpOverlapped=0x12727d0c | out: lpBuffer=0x126c6000*, lpNumberOfBytesWritten=0x12727d00*=0x13de8, lpOverlapped=0x12727d0c) returned 1
	[0186.508] GetFileType (hFile=0x2dc) returned 0x1
	[0186.508] SetFilePointerEx (in: hFile=0x2dc, liDistanceToMove=0x13de8, lpNewFilePointer=0x0, dwMoveMethod=0x12727ce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.508] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400c01 | out: pbBuffer=0x12400c01) returned 1
	[0186.509] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400d01 | out: pbBuffer=0x12400d01) returned 1
	[0186.509] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x12400e01 | out: pbBuffer=0x12400e01) returned 1
	[0186.509] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x124104b8 | out: pbBuffer=0x124104b8) returned 1
	[0186.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vidbZBYUutx.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vidbzbyuutx.png"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x34c
	[0186.509] GetConsoleMode (in: hConsoleHandle=0x34c, lpMode=0x12727d0c | out: lpMode=0x12727d0c) returned 0
	[0186.509] WriteFile (in: hFile=0x34c, lpBuffer=0x125fe500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12727d0c, lpOverlapped=0x0 | out: lpBuffer=0x125fe500*, lpNumberOfBytesWritten=0x12727d0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.509] CloseHandle (hObject=0x34c) returned 1
	[0186.510] CloseHandle (hObject=0x2dc) returned 1
	[0186.511] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vidbZBYUutx.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vidbzbyuutx.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\vidbZBYUutx.png.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\vidbzbyuutx.png.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.561] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0186.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\qCVTujkIRlBIORf8zpLj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\qcvtujkirlbiorf8zplj.avi"), fInfoLevelId=0x0, lpFileInformation=0x1276baf4 | out: lpFileInformation=0x1276baf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x820f7d10, ftCreationTime.dwHighDateTime=0x1d5dc82, ftLastAccessTime.dwLowDateTime=0xcd57c3e0, ftLastAccessTime.dwHighDateTime=0x1d5e344, ftLastWriteTime.dwLowDateTime=0xcd57c3e0, ftLastWriteTime.dwHighDateTime=0x1d5e344, nFileSizeHigh=0x0, nFileSizeLow=0x11461)) returned 1
	[0186.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\_w4JzebHnf1R2Z0O8.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\_w4jzebhnf1r2z0o8.avi"), fInfoLevelId=0x0, lpFileInformation=0x1276bb58 | out: lpFileInformation=0x1276bb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96f8ff30, ftCreationTime.dwHighDateTime=0x1d5e06f, ftLastAccessTime.dwLowDateTime=0x2b23aa90, ftLastAccessTime.dwHighDateTime=0x1d5dfb5, ftLastWriteTime.dwLowDateTime=0x2b23aa90, ftLastWriteTime.dwHighDateTime=0x1d5dfb5, nFileSizeHigh=0x0, nFileSizeLow=0x2b6f)) returned 1
	[0186.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\qCVTujkIRlBIORf8zpLj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\qcvtujkirlbiorf8zplj.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.630] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12725d0c | out: lpMode=0x12725d0c) returned 0
	[0186.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\RSzkCrHqLW-\\qCVTujkIRlBIORf8zpLj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\rszkcrhqlw-\\qcvtujkirlbiorf8zplj.avi"), fInfoLevelId=0x0, lpFileInformation=0x12725ad0 | out: lpFileInformation=0x12725ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x820f7d10, ftCreationTime.dwHighDateTime=0x1d5dc82, ftLastAccessTime.dwLowDateTime=0xcd57c3e0, ftLastAccessTime.dwHighDateTime=0x1d5e344, ftLastWriteTime.dwLowDateTime=0xcd57c3e0, ftLastWriteTime.dwHighDateTime=0x1d5e344, nFileSizeHigh=0x0, nFileSizeLow=0x11461)) returned 1
	[0186.630] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0186.630] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0186.630] ReadFile (in: hFile=0x344, lpBuffer=0x128e4000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12725d1c, lpOverlapped=0x0 | out: lpBuffer=0x128e4000*, lpNumberOfBytesRead=0x12725d1c*=0x11461, lpOverlapped=0x0) returned 1
	[0186.736] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0186.759] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0186.797] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0186.827] SetEvent (hEvent=0x68) returned 1
	[0186.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\PP9qpgiot1fEIkxwqUd7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\pp9qpgiot1feikxwqud7.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.829] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\PP9qpgiot1fEIkxwqUd7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\pp9qpgiot1feikxwqud7.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7353b700, ftCreationTime.dwHighDateTime=0x1d5db15, ftLastAccessTime.dwLowDateTime=0xc3bddaf0, ftLastAccessTime.dwHighDateTime=0x1d5e361, ftLastWriteTime.dwLowDateTime=0xc3bddaf0, ftLastWriteTime.dwHighDateTime=0x1d5e361, nFileSizeHigh=0x0, nFileSizeLow=0x6d0a)) returned 1
	[0186.829] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e000 | out: pbBuffer=0x1252e000) returned 1
	[0186.829] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e008 | out: pbBuffer=0x1251e008) returned 1
	[0186.829] ReadFile (in: hFile=0x344, lpBuffer=0x127c2000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x127c2000*, lpNumberOfBytesRead=0x1242bd1c*=0x6d0a, lpOverlapped=0x0) returned 1
	[0186.854] GetFileType (hFile=0x344) returned 0x1
	[0186.854] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.854] WriteFile (in: hFile=0x344, lpBuffer=0x12838000*, nNumberOfBytesToWrite=0x6d0a, lpNumberOfBytesWritten=0x1242bd00, lpOverlapped=0x1242bd0c | out: lpBuffer=0x12838000*, lpNumberOfBytesWritten=0x1242bd00*=0x6d0a, lpOverlapped=0x1242bd0c) returned 1
	[0186.855] GetFileType (hFile=0x344) returned 0x1
	[0186.855] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x6d0a, lpNewFilePointer=0x0, dwMoveMethod=0x1242bce4 | out: lpNewFilePointer=0x0) returned 1
	[0186.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8181 | out: pbBuffer=0x127e8181) returned 1
	[0186.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8281 | out: pbBuffer=0x127e8281) returned 1
	[0186.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x127e8381 | out: pbBuffer=0x127e8381) returned 1
	[0186.855] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x1251e0e0 | out: pbBuffer=0x1251e0e0) returned 1
	[0186.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\PP9qpgiot1fEIkxwqUd7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\pp9qpgiot1feikxwqud7.mkv"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0186.855] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.855] WriteFile (in: hFile=0x1e4, lpBuffer=0x128e0000*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x1242bd0c, lpOverlapped=0x0 | out: lpBuffer=0x128e0000*, lpNumberOfBytesWritten=0x1242bd0c*=0x276, lpOverlapped=0x0) returned 1
	[0186.856] CloseHandle (hObject=0x1e4) returned 1
	[0186.856] CloseHandle (hObject=0x344) returned 1
	[0186.856] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\PP9qpgiot1fEIkxwqUd7.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\pp9qpgiot1feikxwqud7.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\G3fVokSH6bLz9tgSE\\PP9qpgiot1fEIkxwqUd7.mkv.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\g3fvoksh6blz9tgse\\pp9qpgiot1feikxwqud7.mkv.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0186.858] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X8JJ-VkxiBmN a8vFoL.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x8jj-vkxibmn a8vfol.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0186.858] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x1242bd0c | out: lpMode=0x1242bd0c) returned 0
	[0186.858] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\CPWfq7YEopr 36\\5ExL wrufLslfw\\YuxSihAu58_BQH_J\\X8JJ-VkxiBmN a8vFoL.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\cpwfq7yeopr 36\\5exl wruflslfw\\yuxsihau58_bqh_j\\x8jj-vkxibmn a8vfol.flv"), fInfoLevelId=0x0, lpFileInformation=0x1242bad0 | out: lpFileInformation=0x1242bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f8f810, ftCreationTime.dwHighDateTime=0x1d5e71f, ftLastAccessTime.dwLowDateTime=0xcceb5cb0, ftLastAccessTime.dwHighDateTime=0x1d5d7ef, ftLastWriteTime.dwLowDateTime=0xcceb5cb0, ftLastWriteTime.dwHighDateTime=0x1d5d7ef, nFileSizeHigh=0x0, nFileSizeLow=0x9194)) returned 1
	[0186.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1252e240 | out: pbBuffer=0x1252e240) returned 1
	[0186.858] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x1251e0f8 | out: pbBuffer=0x1251e0f8) returned 1
	[0186.858] ReadFile (in: hFile=0x344, lpBuffer=0x12924000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x1242bd1c, lpOverlapped=0x0 | out: lpBuffer=0x12924000*, lpNumberOfBytesRead=0x1242bd1c*=0x9194, lpOverlapped=0x0) returned 1
	[0186.881] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0186.984] SetEvent (hEvent=0x80) returned 1
	[0186.984] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0187.230] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0187.242] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0187.260] SetEvent (hEvent=0x2f4) returned 1
	[0187.260] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\41QMHT-8Hcn9Qj6U.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\41qmht-8hcn9qj6u.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0187.261] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0187.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\41QMHT-8Hcn9Qj6U.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\41qmht-8hcn9qj6u.avi"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce142bb0, ftCreationTime.dwHighDateTime=0x1d5e0f7, ftLastAccessTime.dwLowDateTime=0x30225b20, ftLastAccessTime.dwHighDateTime=0x1d5e467, ftLastWriteTime.dwLowDateTime=0x30225b20, ftLastWriteTime.dwHighDateTime=0x1d5e467, nFileSizeHigh=0x0, nFileSizeLow=0x16272)) returned 1
	[0187.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c000 | out: pbBuffer=0x1244c000) returned 1
	[0187.261] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x12744008 | out: pbBuffer=0x12744008) returned 1
	[0187.261] ReadFile (in: hFile=0x344, lpBuffer=0x1288a000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1288a000*, lpNumberOfBytesRead=0x12769d1c*=0x16272, lpOverlapped=0x0) returned 1
	[0187.286] GetFileType (hFile=0x344) returned 0x1
	[0187.287] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.287] WriteFile (in: hFile=0x344, lpBuffer=0x12924000*, nNumberOfBytesToWrite=0x16272, lpNumberOfBytesWritten=0x12769d00, lpOverlapped=0x12769d0c | out: lpBuffer=0x12924000*, lpNumberOfBytesWritten=0x12769d00*=0x16272, lpOverlapped=0x12769d0c) returned 1
	[0187.287] GetFileType (hFile=0x344) returned 0x1
	[0187.287] SetFilePointerEx (in: hFile=0x344, liDistanceToMove=0x16272, lpNewFilePointer=0x0, dwMoveMethod=0x12769ce4 | out: lpNewFilePointer=0x0) returned 1
	[0187.287] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec081 | out: pbBuffer=0x124ec081) returned 1
	[0187.288] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec181 | out: pbBuffer=0x124ec181) returned 1
	[0187.288] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x14, pbBuffer=0x124ec281 | out: pbBuffer=0x124ec281) returned 1
	[0187.288] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x4, pbBuffer=0x127440d0 | out: pbBuffer=0x127440d0) returned 1
	[0187.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\41QMHT-8Hcn9Qj6U.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\41qmht-8hcn9qj6u.avi"), dwDesiredAccess=0x4, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1e4
	[0187.288] GetConsoleMode (in: hConsoleHandle=0x1e4, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0187.288] WriteFile (in: hFile=0x1e4, lpBuffer=0x12718500*, nNumberOfBytesToWrite=0x276, lpNumberOfBytesWritten=0x12769d0c, lpOverlapped=0x0 | out: lpBuffer=0x12718500*, lpNumberOfBytesWritten=0x12769d0c*=0x276, lpOverlapped=0x0) returned 1
	[0187.288] CloseHandle (hObject=0x1e4) returned 1
	[0187.288] CloseHandle (hObject=0x344) returned 1
	[0187.289] MoveFileExW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\41QMHT-8Hcn9Qj6U.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\41qmht-8hcn9qj6u.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\Od1A4Nf8h\\41QMHT-8Hcn9Qj6U.avi.[ID-CA7DE56181B8586F2C9F409B1460DB6A]-[EMAIL-M0rphine@cock.li].M0rphine" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\od1a4nf8h\\41qmht-8hcn9qj6u.avi.[id-ca7de56181b8586f2c9f409b1460db6a]-[email-m0rphine@cock.li].m0rphine"), dwFlags=0x1) returned 1
	[0187.291] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\r3ICd_h.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\r3icd_h.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x344
	[0187.292] GetConsoleMode (in: hConsoleHandle=0x344, lpMode=0x12769d0c | out: lpMode=0x12769d0c) returned 0
	[0187.293] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\gnNi_MtzmvS0IEV\\r3ICd_h.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\gnni_mtzmvs0iev\\r3icd_h.avi"), fInfoLevelId=0x0, lpFileInformation=0x12769ad0 | out: lpFileInformation=0x12769ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6004efb0, ftCreationTime.dwHighDateTime=0x1d5e43a, ftLastAccessTime.dwLowDateTime=0xa40e2e80, ftLastAccessTime.dwHighDateTime=0x1d5d9f7, ftLastWriteTime.dwLowDateTime=0xa40e2e80, ftLastWriteTime.dwHighDateTime=0x1d5d9f7, nFileSizeHigh=0x0, nFileSizeLow=0x13fbb)) returned 1
	[0187.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x20, pbBuffer=0x1244c260 | out: pbBuffer=0x1244c260) returned 1
	[0187.293] CryptGenRandom (in: hProv=0xaadff0, dwLen=0x8, pbBuffer=0x127440f8 | out: pbBuffer=0x127440f8) returned 1
	[0187.293] ReadFile (in: hFile=0x344, lpBuffer=0x1293c000, nNumberOfBytesToRead=0x20000, lpNumberOfBytesRead=0x12769d1c, lpOverlapped=0x0 | out: lpBuffer=0x1293c000*, lpNumberOfBytesRead=0x12769d1c*=0x13fbb, lpOverlapped=0x0) returned 1
	[0187.329] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0190.118] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0190.350] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0190.367] SetEvent (hEvent=0x80) returned 1
	[0190.368] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0190.374] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0190.374] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x0
	[0190.374] GetQueuedCompletionStatusEx (in: CompletionPort=0x10c, lpCompletionPortEntries=0x340ffb30, ulCount=0x10, ulNumEntriesRemoved=0x340ffb14, dwMilliseconds=0x0, fAlertable=0 | out: lpCompletionPortEntries=0x340ffb30, ulNumEntriesRemoved=0x340ffb14) returned 0
	[0190.374] SetEvent (hEvent=0x70) returned 1
	[0190.374] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0x1) returned 0x102
	[0190.375] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0190.376] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) returned 0x0
	[0196.594] SetEvent (hEvent=0x2e8) returned 1
	[0196.594] WaitForSingleObject (hHandle=0x30c, dwMilliseconds=0xffffffff) 

Process:
	id = "2"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x971d000"
	os_pid = "0x370"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "rpc_server"
	parent_id = "1"
	os_parent_pid = "0x1d8"
	cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d057" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 11
	os_tid = 0x798


Thread:
	id = 12
	os_tid = 0x5c4


Thread:
	id = 13
	os_tid = 0x7dc


Thread:
	id = 14
	os_tid = 0xb0


Thread:
	id = 15
	os_tid = 0xa54


Thread:
	id = 16
	os_tid = 0xa58


Thread:
	id = 17
	os_tid = 0xa68


Thread:
	id = 18
	os_tid = 0x6cc


Thread:
	id = 19
	os_tid = 0x42c


Thread:
	id = 20
	os_tid = 0x1e4


Thread:
	id = 21
	os_tid = 0x760


Thread:
	id = 22
	os_tid = 0x75c


Thread:
	id = 23
	os_tid = 0x74c


Thread:
	id = 24
	os_tid = 0x710


Thread:
	id = 25
	os_tid = 0x6d0


Thread:
	id = 26
	os_tid = 0x6bc


Thread:
	id = 27
	os_tid = 0x6b8


Thread:
	id = 28
	os_tid = 0x6b0


Thread:
	id = 29
	os_tid = 0x69c


Thread:
	id = 30
	os_tid = 0x698


Thread:
	id = 31
	os_tid = 0x684


Thread:
	id = 32
	os_tid = 0x678


Thread:
	id = 33
	os_tid = 0x4a8


Thread:
	id = 34
	os_tid = 0x46c


Thread:
	id = 35
	os_tid = 0x44c


Thread:
	id = 36
	os_tid = 0x424


Thread:
	id = 37
	os_tid = 0x41c


Thread:
	id = 38
	os_tid = 0x404


Thread:
	id = 39
	os_tid = 0x14c


Thread:
	id = 40
	os_tid = 0x158


Thread:
	id = 41
	os_tid = 0x3fc


Thread:
	id = 42
	os_tid = 0x3f4


Thread:
	id = 43
	os_tid = 0x3e8


Thread:
	id = 44
	os_tid = 0x39c


Thread:
	id = 45
	os_tid = 0x390


Thread:
	id = 46
	os_tid = 0x38c


Thread:
	id = 47
	os_tid = 0x388


Thread:
	id = 48
	os_tid = 0x37c


Thread:
	id = 49
	os_tid = 0x374


Thread:
	id = 58
	os_tid = 0xa8c


Thread:
	id = 59
	os_tid = 0xa9c


Thread:
	id = 60
	os_tid = 0x674


Thread:
	id = 61
	os_tid = 0xaa0


Thread:
	id = 62
	os_tid = 0xac8


Thread:
	id = 63
	os_tid = 0x314


Thread:
	id = 64
	os_tid = 0x324


Thread:
	id = 65
	os_tid = 0xaa8


Thread:
	id = 66
	os_tid = 0xb08


Thread:
	id = 67
	os_tid = 0x270


Thread:
	id = 69
	os_tid = 0x7e8


Thread:
	id = 70
	os_tid = 0x120


Thread:
	id = 98
	os_tid = 0x8cc


Thread:
	id = 99
	os_tid = 0x99c


Thread:
	id = 100
	os_tid = 0x55c


Process:
	id = "3"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x7477b000"
	os_pid = "0x98c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xb3c"
	cmd_line = "cmd /c ver"
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 53
	os_tid = 0x99c

	[0108.919] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2efb04 | out: lpSystemTimeAsFileTime=0x2efb04*(dwLowDateTime=0x30ea88c0, dwHighDateTime=0x1d62440)) 
	[0108.919] GetCurrentProcessId () returned 0x98c
	[0108.919] GetCurrentThreadId () returned 0x99c
	[0108.919] GetTickCount () returned 0x1150290
	[0108.919] QueryPerformanceCounter (in: lpPerformanceCount=0x2efafc | out: lpPerformanceCount=0x2efafc*=22886776750) returned 1
	[0108.922] GetModuleHandleA (lpModuleName=0x0) returned 0x4a990000
	[0108.922] __set_app_type (_Type=0x1) 
	[0108.922] __p__fmode () returned 0x770331f4
	[0108.923] __p__commode () returned 0x770331fc
	[0108.923] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a9b21a6) returned 0x0
	[0108.924] __getmainargs (in: _Argc=0x4a9b4238, _Argv=0x4a9b4240, _Env=0x4a9b423c, _DoWildCard=0, _StartInfo=0x4a9b4140 | out: _Argc=0x4a9b4238, _Argv=0x4a9b4240, _Env=0x4a9b423c) returned 0
	[0108.924] GetCurrentThreadId () returned 0x99c
	[0108.924] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x99c) returned 0x60
	[0108.924] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76d30000
	[0108.924] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadUILanguage") returned 0x76d5a84f
	[0108.925] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0108.926] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0108.926] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2efa94 | out: phkResult=0x2efa94*=0x0) returned 0x2
	[0108.926] VirtualQuery (in: lpAddress=0x2efacb, lpBuffer=0x2efa64, dwLength=0x1c | out: lpBuffer=0x2efa64*(BaseAddress=0x2ef000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0108.926] VirtualQuery (in: lpAddress=0x1f0000, lpBuffer=0x2efa64, dwLength=0x1c | out: lpBuffer=0x2efa64*(BaseAddress=0x1f0000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0108.926] VirtualQuery (in: lpAddress=0x1f1000, lpBuffer=0x2efa64, dwLength=0x1c | out: lpBuffer=0x2efa64*(BaseAddress=0x1f1000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0108.926] VirtualQuery (in: lpAddress=0x1f3000, lpBuffer=0x2efa64, dwLength=0x1c | out: lpBuffer=0x2efa64*(BaseAddress=0x1f3000, AllocationBase=0x1f0000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0108.927] VirtualQuery (in: lpAddress=0x2f0000, lpBuffer=0x2efa64, dwLength=0x1c | out: lpBuffer=0x2efa64*(BaseAddress=0x2f0000, AllocationBase=0x2f0000, AllocationProtect=0x2, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000)) returned 0x1c
	[0108.927] GetConsoleOutputCP () returned 0x1b5
	[0108.927] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9b4260 | out: lpCPInfo=0x4a9b4260) returned 1
	[0108.927] SetConsoleCtrlHandler (HandlerRoutine=0x4a9ae72a, Add=1) returned 1
	[0108.927] _get_osfhandle (_FileHandle=1) returned 0x318
	[0108.927] SetConsoleMode (hConsoleHandle=0x318, dwMode=0x0) returned 0
	[0108.927] _get_osfhandle (_FileHandle=1) returned 0x318
	[0108.927] GetConsoleMode (in: hConsoleHandle=0x318, lpMode=0x4a9b41ac | out: lpMode=0x4a9b41ac) returned 0
	[0108.928] _get_osfhandle (_FileHandle=0) returned 0x314
	[0108.928] GetConsoleMode (in: hConsoleHandle=0x314, lpMode=0x4a9b41b0 | out: lpMode=0x4a9b41b0) returned 0
	[0108.928] GetEnvironmentStringsW () returned 0x741f90*
	[0108.928] GetProcessHeap () returned 0x730000
	[0108.928] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xaca) returned 0x742a68
	[0108.928] FreeEnvironmentStringsW (penv=0x741f90) returned 1
	[0108.929] GetProcessHeap () returned 0x730000
	[0108.929] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x4) returned 0x740bc8
	[0108.929] GetEnvironmentStringsW () returned 0x741f90*
	[0108.929] GetProcessHeap () returned 0x730000
	[0108.929] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xaca) returned 0x743540
	[0108.930] FreeEnvironmentStringsW (penv=0x741f90) returned 1
	[0108.930] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2eea04 | out: phkResult=0x2eea04*=0x68) returned 0x0
	[0108.930] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x0, lpData=0x2eea10*=0x0, lpcbData=0x2eea08*=0x1000) returned 0x2
	[0108.931] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x4, lpData=0x2eea10*=0x1, lpcbData=0x2eea08*=0x4) returned 0x0
	[0108.931] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x0, lpData=0x2eea10*=0x1, lpcbData=0x2eea08*=0x1000) returned 0x2
	[0108.931] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x4, lpData=0x2eea10*=0x0, lpcbData=0x2eea08*=0x4) returned 0x0
	[0108.931] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x4, lpData=0x2eea10*=0x40, lpcbData=0x2eea08*=0x4) returned 0x0
	[0108.931] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x4, lpData=0x2eea10*=0x40, lpcbData=0x2eea08*=0x4) returned 0x0
	[0108.931] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x0, lpData=0x2eea10*=0x40, lpcbData=0x2eea08*=0x1000) returned 0x2
	[0108.931] RegCloseKey (hKey=0x68) returned 0x0
	[0108.931] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2eea04 | out: phkResult=0x2eea04*=0x68) returned 0x0
	[0108.931] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x0, lpData=0x2eea10*=0x40, lpcbData=0x2eea08*=0x1000) returned 0x2
	[0108.932] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x4, lpData=0x2eea10*=0x1, lpcbData=0x2eea08*=0x4) returned 0x0
	[0108.932] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x0, lpData=0x2eea10*=0x1, lpcbData=0x2eea08*=0x1000) returned 0x2
	[0108.932] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x4, lpData=0x2eea10*=0x0, lpcbData=0x2eea08*=0x4) returned 0x0
	[0108.932] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x4, lpData=0x2eea10*=0x9, lpcbData=0x2eea08*=0x4) returned 0x0
	[0108.932] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x4, lpData=0x2eea10*=0x9, lpcbData=0x2eea08*=0x4) returned 0x0
	[0108.932] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2eea0c, lpData=0x2eea10, lpcbData=0x2eea08*=0x1000 | out: lpType=0x2eea0c*=0x0, lpData=0x2eea10*=0x9, lpcbData=0x2eea08*=0x1000) returned 0x2
	[0108.932] RegCloseKey (hKey=0x68) returned 0x0
	[0108.932] time (in: timer=0x0 | out: timer=0x0) returned 0x5eb3b715
	[0108.932] srand (_Seed=0x5eb3b715) 
	[0108.932] GetCommandLineW () returned="cmd /c ver"
	[0108.932] GetCommandLineW () returned="cmd /c ver"
	[0108.934] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a9b5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0108.935] GetProcessHeap () returned 0x730000
	[0108.935] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x210) returned 0x741f90
	[0108.935] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x741f98, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0108.939] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0108.939] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0108.939] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0108.939] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0108.939] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0108.939] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0108.939] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0108.939] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0108.939] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0108.939] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0108.939] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0108.941] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0108.941] GetProcessHeap () returned 0x730000
	[0108.941] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x742a68 | out: hHeap=0x730000) returned 1
	[0108.941] GetEnvironmentStringsW () returned 0x7421a8*
	[0108.942] GetProcessHeap () returned 0x730000
	[0108.942] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xae2) returned 0x744b08
	[0108.942] FreeEnvironmentStringsW (penv=0x7421a8) returned 1
	[0108.942] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0108.942] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a9c0640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0108.942] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0108.942] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0108.942] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0108.942] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0108.942] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0108.942] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0108.942] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0108.942] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0108.942] GetProcessHeap () returned 0x730000
	[0108.942] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x54) returned 0x7455f8
	[0108.942] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2ef7d0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0108.943] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x2ef7d0, lpFilePart=0x2ef7cc | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x2ef7cc*="Desktop") returned 0x25
	[0108.943] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0108.943] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x2ef54c | out: lpFindFileData=0x2ef54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x741e10
	[0108.943] FindClose (in: hFindFile=0x741e10 | out: hFindFile=0x741e10) returned 1
	[0108.943] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x2ef54c | out: lpFindFileData=0x2ef54c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x741e10
	[0108.944] FindClose (in: hFindFile=0x741e10 | out: hFindFile=0x741e10) returned 1
	[0108.944] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0108.944] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x2ef54c | out: lpFindFileData=0x2ef54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd235ac0, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0xd235ac0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x741e10
	[0108.944] FindClose (in: hFindFile=0x741e10 | out: hFindFile=0x741e10) returned 1
	[0108.944] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0108.944] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0108.944] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0108.944] GetProcessHeap () returned 0x730000
	[0108.944] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x744b08 | out: hHeap=0x730000) returned 1
	[0108.945] GetEnvironmentStringsW () returned 0x744018*
	[0108.945] GetProcessHeap () returned 0x730000
	[0108.945] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xb36) returned 0x745e58
	[0108.945] FreeEnvironmentStringsW (penv=0x744018) returned 1
	[0108.945] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a9b5260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0108.945] GetProcessHeap () returned 0x730000
	[0108.945] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x7455f8 | out: hHeap=0x730000) returned 1
	[0108.945] GetProcessHeap () returned 0x730000
	[0108.945] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x400e) returned 0x746998
	[0108.946] GetProcessHeap () returned 0x730000
	[0108.946] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x14) returned 0x741e10
	[0108.946] GetProcessHeap () returned 0x730000
	[0108.946] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x746998 | out: hHeap=0x730000) returned 1
	[0108.946] GetConsoleOutputCP () returned 0x1b5
	[0108.946] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9b4260 | out: lpCPInfo=0x4a9b4260) returned 1
	[0108.946] GetUserDefaultLCID () returned 0x409
	[0108.947] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a9b4950, cchData=8 | out: lpLCData=":") returned 2
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2ef910, cchData=128 | out: lpLCData="0") returned 2
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2ef910, cchData=128 | out: lpLCData="0") returned 2
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2ef910, cchData=128 | out: lpLCData="1") returned 2
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a9b4940, cchData=8 | out: lpLCData="/") returned 2
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a9b4d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a9b4d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a9b4d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a9b4cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a9b4c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a9b4c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a9b4c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a9b4930, cchData=8 | out: lpLCData=".") returned 2
	[0108.948] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a9b4920, cchData=8 | out: lpLCData=",") returned 2
	[0108.949] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0108.952] GetProcessHeap () returned 0x730000
	[0108.952] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x0, Size=0x20c) returned 0x742d20
	[0108.952] GetConsoleTitleW (in: lpConsoleTitle=0x742d20, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0108.952] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76d30000
	[0108.952] GetProcAddress (hModule=0x76d30000, lpProcName="CopyFileExW") returned 0x76d63b92
	[0108.953] GetProcAddress (hModule=0x76d30000, lpProcName="IsDebuggerPresent") returned 0x76d44a5d
	[0108.953] GetProcAddress (hModule=0x76d30000, lpProcName="SetConsoleInputExeNameW") returned 0x76d5a79d
	[0109.069] GetProcessHeap () returned 0x730000
	[0109.069] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x400a) returned 0x746998
	[0109.069] GetProcessHeap () returned 0x730000
	[0109.069] HeapFree (in: hHeap=0x730000, dwFlags=0x0, lpMem=0x746998 | out: hHeap=0x730000) returned 1
	[0109.069] _wcsicmp (_String1="ver", _String2=")") returned 77
	[0109.070] _wcsicmp (_String1="FOR", _String2="ver") returned -16
	[0109.070] _wcsicmp (_String1="FOR/?", _String2="ver") returned -16
	[0109.070] _wcsicmp (_String1="IF", _String2="ver") returned -13
	[0109.070] _wcsicmp (_String1="IF/?", _String2="ver") returned -13
	[0109.070] _wcsicmp (_String1="REM", _String2="ver") returned -4
	[0109.070] _wcsicmp (_String1="REM/?", _String2="ver") returned -4
	[0109.070] GetProcessHeap () returned 0x730000
	[0109.070] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x58) returned 0x742f38
	[0109.070] GetProcessHeap () returned 0x730000
	[0109.070] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x10) returned 0x73ecd8
	[0109.071] GetConsoleTitleW (in: lpConsoleTitle=0x2ef608, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0109.071] _wcsicmp (_String1="ver", _String2="DIR") returned 18
	[0109.071] _wcsicmp (_String1="ver", _String2="ERASE") returned 17
	[0109.071] _wcsicmp (_String1="ver", _String2="DEL") returned 18
	[0109.071] _wcsicmp (_String1="ver", _String2="TYPE") returned 2
	[0109.071] _wcsicmp (_String1="ver", _String2="COPY") returned 19
	[0109.071] _wcsicmp (_String1="ver", _String2="CD") returned 19
	[0109.071] _wcsicmp (_String1="ver", _String2="CHDIR") returned 19
	[0109.072] _wcsicmp (_String1="ver", _String2="RENAME") returned 4
	[0109.072] _wcsicmp (_String1="ver", _String2="REN") returned 4
	[0109.072] _wcsicmp (_String1="ver", _String2="ECHO") returned 17
	[0109.072] _wcsicmp (_String1="ver", _String2="SET") returned 3
	[0109.072] _wcsicmp (_String1="ver", _String2="PAUSE") returned 6
	[0109.072] _wcsicmp (_String1="ver", _String2="DATE") returned 18
	[0109.072] _wcsicmp (_String1="ver", _String2="TIME") returned 2
	[0109.072] _wcsicmp (_String1="ver", _String2="PROMPT") returned 6
	[0109.072] _wcsicmp (_String1="ver", _String2="MD") returned 9
	[0109.072] _wcsicmp (_String1="ver", _String2="MKDIR") returned 9
	[0109.072] _wcsicmp (_String1="ver", _String2="RD") returned 4
	[0109.072] _wcsicmp (_String1="ver", _String2="RMDIR") returned 4
	[0109.072] _wcsicmp (_String1="ver", _String2="PATH") returned 6
	[0109.072] _wcsicmp (_String1="ver", _String2="GOTO") returned 15
	[0109.072] _wcsicmp (_String1="ver", _String2="SHIFT") returned 3
	[0109.072] _wcsicmp (_String1="ver", _String2="CLS") returned 19
	[0109.072] _wcsicmp (_String1="ver", _String2="CALL") returned 19
	[0109.072] _wcsicmp (_String1="ver", _String2="VERIFY") returned -105
	[0109.072] _wcsicmp (_String1="ver", _String2="VER") returned 0
	[0109.072] GetProcessHeap () returned 0x730000
	[0109.072] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0xc) returned 0x73ecf0
	[0109.072] GetProcessHeap () returned 0x730000
	[0109.073] RtlAllocateHeap (HeapHandle=0x730000, Flags=0x8, Size=0x10) returned 0x73ed08
	[0109.073] GetVersion () returned 0x1db10106
	[0109.073] _vsnwprintf (in: _Buffer=0x2ef598, _BufferCount=0x1f, _Format="%d.%d.%04d", _ArgList=0x2ef578 | out: _Buffer="6.1.7601") returned 8
	[0109.073] _vsnwprintf (in: _Buffer=0x4a9c4640, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x2ef594 | out: _Buffer="\r\n") returned 2
	[0109.074] _get_osfhandle (_FileHandle=1) returned 0x318
	[0109.074] GetFileType (hFile=0x318) returned 0x3
	[0109.074] _get_osfhandle (_FileHandle=1) returned 0x318
	[0109.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a9b6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0109.074] WriteFile (in: hFile=0x318, lpBuffer=0x4a9b6640*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x2ef580, lpOverlapped=0x0 | out: lpBuffer=0x4a9b6640*, lpNumberOfBytesWritten=0x2ef580*=0x2, lpOverlapped=0x0) returned 1
	[0109.076] _get_osfhandle (_FileHandle=1) returned 0x318
	[0109.076] GetFileType (hFile=0x318) returned 0x3
	[0109.076] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x4a9c4640, nSize=0x2000, Arguments=0x0 | out: lpBuffer="Microsoft Windows [Version %1]") returned 0x1e
	[0109.076] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x2350, dwLanguageId=0x0, lpBuffer=0x4a9c4640, nSize=0x2000, Arguments=0x2ef57c | out: lpBuffer="Microsoft Windows [Version 6.1.7601]") returned 0x24
	[0109.076] _get_osfhandle (_FileHandle=1) returned 0x318
	[0109.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Windows [Version 6.1.7601]", cchWideChar=-1, lpMultiByteStr=0x4a9b6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Windows [Version 6.1.7601]", lpUsedDefaultChar=0x0) returned 37
	[0109.076] WriteFile (in: hFile=0x318, lpBuffer=0x4a9b6640*, nNumberOfBytesToWrite=0x24, lpNumberOfBytesWritten=0x2ef554, lpOverlapped=0x0 | out: lpBuffer=0x4a9b6640*, lpNumberOfBytesWritten=0x2ef554*=0x24, lpOverlapped=0x0) returned 1
	[0109.076] _vsnwprintf (in: _Buffer=0x4a9c4640, _BufferCount=0x1fff, _Format="\r\n", _ArgList=0x2ef594 | out: _Buffer="\r\n") returned 2
	[0109.076] _get_osfhandle (_FileHandle=1) returned 0x318
	[0109.076] GetFileType (hFile=0x318) returned 0x3
	[0109.076] _get_osfhandle (_FileHandle=1) returned 0x318
	[0109.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\r\n", cchWideChar=-1, lpMultiByteStr=0x4a9b6640, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\n", lpUsedDefaultChar=0x0) returned 3
	[0109.077] WriteFile (in: hFile=0x318, lpBuffer=0x4a9b6640*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x2ef580, lpOverlapped=0x0 | out: lpBuffer=0x4a9b6640*, lpNumberOfBytesWritten=0x2ef580*=0x2, lpOverlapped=0x0) returned 1
	[0109.077] _get_osfhandle (_FileHandle=1) returned 0x318
	[0109.077] SetConsoleMode (hConsoleHandle=0x318, dwMode=0x0) returned 0
	[0109.077] _get_osfhandle (_FileHandle=1) returned 0x318
	[0109.077] GetConsoleMode (in: hConsoleHandle=0x318, lpMode=0x4a9b41ac | out: lpMode=0x4a9b41ac) returned 0
	[0109.077] _get_osfhandle (_FileHandle=0) returned 0x314
	[0109.077] GetConsoleMode (in: hConsoleHandle=0x314, lpMode=0x4a9b41b0 | out: lpMode=0x4a9b41b0) returned 0
	[0109.077] GetConsoleOutputCP () returned 0x1b5
	[0109.077] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9b4260 | out: lpCPInfo=0x4a9b4260) returned 1
	[0109.077] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0109.078] exit (_Code=0) 

Process:
	id = "4"
	image_name = "cmd.exe"
	filename = "c:\\windows\\syswow64\\cmd.exe"
	page_root = "0x3c5ed000"
	os_pid = "0xa64"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0xb3c"
	cmd_line = "C:\\Windows\\system32\\cmd.exe /C del C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mor.exe"
	cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\"
	os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz"
	bitness = "32"
	os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000eb41" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 68
	os_tid = 0xa08

	[0212.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x34fd0c | out: lpSystemTimeAsFileTime=0x34fd0c*(dwLowDateTime=0x69252830, dwHighDateTime=0x1d62440)) 
	[0212.042] GetCurrentProcessId () returned 0xa64
	[0212.042] GetCurrentThreadId () returned 0xa08
	[0212.042] GetTickCount () returned 0x116731e
	[0212.042] QueryPerformanceCounter (in: lpPerformanceCount=0x34fd04 | out: lpPerformanceCount=0x34fd04*=33199107963) returned 1
	[0212.045] GetModuleHandleA (lpModuleName=0x0) returned 0x49d60000
	[0212.045] __set_app_type (_Type=0x1) 
	[0212.045] __p__fmode () returned 0x770331f4
	[0212.045] __p__commode () returned 0x770331fc
	[0212.046] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49d821a6) returned 0x0
	[0212.046] __getmainargs (in: _Argc=0x49d84238, _Argv=0x49d84240, _Env=0x49d8423c, _DoWildCard=0, _StartInfo=0x49d84140 | out: _Argc=0x49d84238, _Argv=0x49d84240, _Env=0x49d8423c) returned 0
	[0212.046] GetCurrentThreadId () returned 0xa08
	[0212.046] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa08) returned 0x60
	[0212.047] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76d30000
	[0212.047] GetProcAddress (hModule=0x76d30000, lpProcName="SetThreadUILanguage") returned 0x76d5a84f
	[0212.047] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0212.047] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1
	[0212.047] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x34fc9c | out: phkResult=0x34fc9c*=0x0) returned 0x2
	[0212.048] VirtualQuery (in: lpAddress=0x34fcd3, lpBuffer=0x34fc6c, dwLength=0x1c | out: lpBuffer=0x34fc6c*(BaseAddress=0x34f000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0212.048] VirtualQuery (in: lpAddress=0x250000, lpBuffer=0x34fc6c, dwLength=0x1c | out: lpBuffer=0x34fc6c*(BaseAddress=0x250000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000)) returned 0x1c
	[0212.048] VirtualQuery (in: lpAddress=0x251000, lpBuffer=0x34fc6c, dwLength=0x1c | out: lpBuffer=0x34fc6c*(BaseAddress=0x251000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0x2000, State=0x1000, Protect=0x104, Type=0x20000)) returned 0x1c
	[0212.048] VirtualQuery (in: lpAddress=0x253000, lpBuffer=0x34fc6c, dwLength=0x1c | out: lpBuffer=0x34fc6c*(BaseAddress=0x253000, AllocationBase=0x250000, AllocationProtect=0x4, RegionSize=0xfd000, State=0x1000, Protect=0x4, Type=0x20000)) returned 0x1c
	[0212.048] VirtualQuery (in: lpAddress=0x350000, lpBuffer=0x34fc6c, dwLength=0x1c | out: lpBuffer=0x34fc6c*(BaseAddress=0x350000, AllocationBase=0x0, AllocationProtect=0x0, RegionSize=0x80000, State=0x10000, Protect=0x1, Type=0x0)) returned 0x1c
	[0212.048] GetConsoleOutputCP () returned 0x1b5
	[0212.048] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49d84260 | out: lpCPInfo=0x49d84260) returned 1
	[0212.048] SetConsoleCtrlHandler (HandlerRoutine=0x49d7e72a, Add=1) returned 1
	[0212.048] _get_osfhandle (_FileHandle=1) returned 0x7
	[0212.048] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1
	[0212.049] _get_osfhandle (_FileHandle=1) returned 0x7
	[0212.049] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49d841ac | out: lpMode=0x49d841ac) returned 1
	[0212.049] _get_osfhandle (_FileHandle=1) returned 0x7
	[0212.049] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
	[0212.049] _get_osfhandle (_FileHandle=0) returned 0x3
	[0212.049] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49d841b0 | out: lpMode=0x49d841b0) returned 1
	[0212.050] _get_osfhandle (_FileHandle=0) returned 0x3
	[0212.050] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1
	[0212.050] GetEnvironmentStringsW () returned 0x3e2080*
	[0212.050] GetProcessHeap () returned 0x3d0000
	[0212.050] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xaca) returned 0x3e2b58
	[0212.050] FreeEnvironmentStringsW (penv=0x3e2080) returned 1
	[0212.050] GetProcessHeap () returned 0x3d0000
	[0212.050] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x4) returned 0x3e0cb8
	[0212.050] GetEnvironmentStringsW () returned 0x3e2080*
	[0212.051] GetProcessHeap () returned 0x3d0000
	[0212.051] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xaca) returned 0x3e3630
	[0212.051] FreeEnvironmentStringsW (penv=0x3e2080) returned 1
	[0212.051] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x34ec0c | out: phkResult=0x34ec0c*=0x68) returned 0x0
	[0212.051] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x0, lpData=0x34ec18*=0x0, lpcbData=0x34ec10*=0x1000) returned 0x2
	[0212.051] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x4, lpData=0x34ec18*=0x1, lpcbData=0x34ec10*=0x4) returned 0x0
	[0212.051] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x0, lpData=0x34ec18*=0x1, lpcbData=0x34ec10*=0x1000) returned 0x2
	[0212.051] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x4, lpData=0x34ec18*=0x0, lpcbData=0x34ec10*=0x4) returned 0x0
	[0212.051] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x4, lpData=0x34ec18*=0x40, lpcbData=0x34ec10*=0x4) returned 0x0
	[0212.051] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x4, lpData=0x34ec18*=0x40, lpcbData=0x34ec10*=0x4) returned 0x0
	[0212.051] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x0, lpData=0x34ec18*=0x40, lpcbData=0x34ec10*=0x1000) returned 0x2
	[0212.051] RegCloseKey (hKey=0x68) returned 0x0
	[0212.052] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x34ec0c | out: phkResult=0x34ec0c*=0x68) returned 0x0
	[0212.052] RegQueryValueExW (in: hKey=0x68, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x0, lpData=0x34ec18*=0x40, lpcbData=0x34ec10*=0x1000) returned 0x2
	[0212.052] RegQueryValueExW (in: hKey=0x68, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x4, lpData=0x34ec18*=0x1, lpcbData=0x34ec10*=0x4) returned 0x0
	[0212.052] RegQueryValueExW (in: hKey=0x68, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x0, lpData=0x34ec18*=0x1, lpcbData=0x34ec10*=0x1000) returned 0x2
	[0212.052] RegQueryValueExW (in: hKey=0x68, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x4, lpData=0x34ec18*=0x0, lpcbData=0x34ec10*=0x4) returned 0x0
	[0212.052] RegQueryValueExW (in: hKey=0x68, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x4, lpData=0x34ec18*=0x9, lpcbData=0x34ec10*=0x4) returned 0x0
	[0212.052] RegQueryValueExW (in: hKey=0x68, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x4, lpData=0x34ec18*=0x9, lpcbData=0x34ec10*=0x4) returned 0x0
	[0212.052] RegQueryValueExW (in: hKey=0x68, lpValueName="AutoRun", lpReserved=0x0, lpType=0x34ec14, lpData=0x34ec18, lpcbData=0x34ec10*=0x1000 | out: lpType=0x34ec14*=0x0, lpData=0x34ec18*=0x9, lpcbData=0x34ec10*=0x1000) returned 0x2
	[0212.052] RegCloseKey (hKey=0x68) returned 0x0
	[0212.052] time (in: timer=0x0 | out: timer=0x0) returned 0x5eb3b773
	[0212.052] srand (_Seed=0x5eb3b773) 
	[0212.052] GetCommandLineW () returned="C:\\Windows\\system32\\cmd.exe /C del C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mor.exe"
	[0212.052] GetCommandLineW () returned="C:\\Windows\\system32\\cmd.exe /C del C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mor.exe"
	[0212.053] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49d85260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0212.054] GetProcessHeap () returned 0x3d0000
	[0212.054] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x210) returned 0x3e2080
	[0212.054] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3e2088, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\cmd.exe" (normalized: "c:\\windows\\syswow64\\cmd.exe")) returned 0x1b
	[0212.054] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49d90640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63
	[0212.054] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49d90640, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35
	[0212.054] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49d90640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0212.054] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13
	[0212.054] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11
	[0212.054] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13
	[0212.054] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13
	[0212.055] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12
	[0212.055] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4
	[0212.055] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2
	[0212.055] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8
	[0212.055] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1
	[0212.055] GetProcessHeap () returned 0x3d0000
	[0212.055] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e2b58 | out: hHeap=0x3d0000) returned 1
	[0212.055] GetEnvironmentStringsW () returned 0x3e2298*
	[0212.055] GetProcessHeap () returned 0x3d0000
	[0212.055] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xae2) returned 0x3e4bf8
	[0212.055] FreeEnvironmentStringsW (penv=0x3e2298) returned 1
	[0212.055] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49d90640, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0212.055] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49d90640, nSize=0x2000 | out: lpBuffer="") returned 0x0
	[0212.055] _wcsicmp (_String1="KEYS", _String2="CD") returned 8
	[0212.055] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6
	[0212.055] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8
	[0212.055] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8
	[0212.055] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7
	[0212.055] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9
	[0212.055] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7
	[0212.056] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3
	[0212.056] GetProcessHeap () returned 0x3d0000
	[0212.056] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x54) returned 0x3e56e8
	[0212.056] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x34f9d8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0212.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x104, lpBuffer=0x34f9d8, lpFilePart=0x34f9d4 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x34f9d4*="Desktop") returned 0x25
	[0212.056] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0212.056] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0x34f754 | out: lpFindFileData=0x34f754*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x6014b120, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x6014b120, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x3e1f00
	[0212.056] FindClose (in: hFindFile=0x3e1f00 | out: hFindFile=0x3e1f00) returned 1
	[0212.056] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz", lpFindFileData=0x34f754 | out: lpFindFileData=0x34f754*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x5b4eebb0, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x5b4eebb0, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 0x3e1f00
	[0212.056] FindClose (in: hFindFile=0x3e1f00 | out: hFindFile=0x3e1f00) returned 1
	[0212.057] _wcsnicmp (_String1="5P5NRG~1", _String2="5p5NrGJn0jS HALPmcxz", _MaxCount=0x14) returned 20
	[0212.057] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFindFileData=0x34f754 | out: lpFindFileData=0x34f754*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x54a5df80, ftLastAccessTime.dwHighDateTime=0x1d62440, ftLastWriteTime.dwLowDateTime=0x54a5df80, ftLastWriteTime.dwHighDateTime=0x1d62440, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x3e1f00
	[0212.057] FindClose (in: hFindFile=0x3e1f00 | out: hFindFile=0x3e1f00) returned 1
	[0212.057] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 0x11
	[0212.057] SetCurrentDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop")) returned 1
	[0212.057] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1
	[0212.057] GetProcessHeap () returned 0x3d0000
	[0212.057] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e4bf8 | out: hHeap=0x3d0000) returned 1
	[0212.057] GetEnvironmentStringsW () returned 0x3e4108*
	[0212.057] GetProcessHeap () returned 0x3d0000
	[0212.057] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xb36) returned 0x3e5f48
	[0212.057] FreeEnvironmentStringsW (penv=0x3e4108) returned 1
	[0212.058] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49d85260 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0212.058] GetProcessHeap () returned 0x3d0000
	[0212.058] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e56e8 | out: hHeap=0x3d0000) returned 1
	[0212.058] GetProcessHeap () returned 0x3d0000
	[0212.058] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x400e) returned 0x3e6a88
	[0212.058] GetProcessHeap () returned 0x3d0000
	[0212.058] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x70) returned 0x3e2dd8
	[0212.058] GetProcessHeap () returned 0x3d0000
	[0212.058] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e6a88 | out: hHeap=0x3d0000) returned 1
	[0212.058] GetConsoleOutputCP () returned 0x1b5
	[0212.059] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49d84260 | out: lpCPInfo=0x49d84260) returned 1
	[0212.059] GetUserDefaultLCID () returned 0x409
	[0212.059] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49d84950, cchData=8 | out: lpLCData=":") returned 2
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x34fb18, cchData=128 | out: lpLCData="0") returned 2
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x34fb18, cchData=128 | out: lpLCData="0") returned 2
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x34fb18, cchData=128 | out: lpLCData="1") returned 2
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49d84940, cchData=8 | out: lpLCData="/") returned 2
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49d84d80, cchData=32 | out: lpLCData="Mon") returned 4
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49d84d40, cchData=32 | out: lpLCData="Tue") returned 4
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49d84d00, cchData=32 | out: lpLCData="Wed") returned 4
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49d84cc0, cchData=32 | out: lpLCData="Thu") returned 4
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49d84c80, cchData=32 | out: lpLCData="Fri") returned 4
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49d84c40, cchData=32 | out: lpLCData="Sat") returned 4
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49d84c00, cchData=32 | out: lpLCData="Sun") returned 4
	[0212.060] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49d84930, cchData=8 | out: lpLCData=".") returned 2
	[0212.061] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49d84920, cchData=8 | out: lpLCData=",") returned 2
	[0212.061] setlocale (category=0, locale=".OCP") returned="English_United States.437"
	[0212.062] GetProcessHeap () returned 0x3d0000
	[0212.062] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x0, Size=0x20c) returned 0x3e2e50
	[0212.063] GetConsoleTitleW (in: lpConsoleTitle=0x3e2e50, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0212.063] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x76d30000
	[0212.063] GetProcAddress (hModule=0x76d30000, lpProcName="CopyFileExW") returned 0x76d63b92
	[0212.063] GetProcAddress (hModule=0x76d30000, lpProcName="IsDebuggerPresent") returned 0x76d44a5d
	[0212.063] GetProcAddress (hModule=0x76d30000, lpProcName="SetConsoleInputExeNameW") returned 0x76d5a79d
	[0212.064] GetProcessHeap () returned 0x3d0000
	[0212.064] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x400a) returned 0x3e6a88
	[0212.064] GetProcessHeap () returned 0x3d0000
	[0212.064] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e6a88 | out: hHeap=0x3d0000) returned 1
	[0212.065] _wcsicmp (_String1="del", _String2=")") returned 59
	[0212.065] _wcsicmp (_String1="FOR", _String2="del") returned 2
	[0212.065] _wcsicmp (_String1="FOR/?", _String2="del") returned 2
	[0212.065] _wcsicmp (_String1="IF", _String2="del") returned 5
	[0212.065] _wcsicmp (_String1="IF/?", _String2="del") returned 5
	[0212.065] _wcsicmp (_String1="REM", _String2="del") returned 14
	[0212.065] _wcsicmp (_String1="REM/?", _String2="del") returned 14
	[0212.065] GetProcessHeap () returned 0x3d0000
	[0212.065] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x58) returned 0x3e3068
	[0212.066] GetProcessHeap () returned 0x3d0000
	[0212.066] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x10) returned 0x3dff58
	[0212.067] GetProcessHeap () returned 0x3d0000
	[0212.067] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x66) returned 0x3e30c8
	[0212.068] GetConsoleTitleW (in: lpConsoleTitle=0x34f810, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b
	[0212.068] _wcsicmp (_String1="del", _String2="DIR") returned -4
	[0212.068] _wcsicmp (_String1="del", _String2="ERASE") returned -1
	[0212.068] _wcsicmp (_String1="del", _String2="DEL") returned 0
	[0212.069] GetProcessHeap () returned 0x3d0000
	[0212.069] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xc4) returned 0x3e3138
	[0212.072] GetProcessHeap () returned 0x3d0000
	[0212.072] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3e3138, Size=0x66) returned 0x3e3138
	[0212.072] GetProcessHeap () returned 0x3d0000
	[0212.072] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3e3138) returned 0x66
	[0212.073] GetProcessHeap () returned 0x3d0000
	[0212.073] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x6e) returned 0x3e31a8
	[0212.074] GetProcessHeap () returned 0x3d0000
	[0212.074] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0xc4) returned 0x3e3220
	[0212.078] GetProcessHeap () returned 0x3d0000
	[0212.078] RtlReAllocateHeap (Heap=0x3d0000, Flags=0x0, Ptr=0x3e3220, Size=0x66) returned 0x3e3220
	[0212.078] GetProcessHeap () returned 0x3d0000
	[0212.078] RtlSizeHeap (HeapHandle=0x3d0000, Flags=0x0, MemoryPointer=0x3e3220) returned 0x66
	[0212.078] GetProcessHeap () returned 0x3d0000
	[0212.078] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x32) returned 0x3e3290
	[0212.079] GetProcessHeap () returned 0x3d0000
	[0212.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x18) returned 0x3e32d0
	[0212.079] GetProcessHeap () returned 0x3d0000
	[0212.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x3a) returned 0x3e32f0
	[0212.079] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x34f5c8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0212.079] GetProcessHeap () returned 0x3d0000
	[0212.079] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x38) returned 0x3e3338
	[0212.079] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x34e658 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0212.080] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x34e888, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x34e88c, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x34e888*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1
	[0212.245] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8
	[0212.245] GetProcessHeap () returned 0x3d0000
	[0212.245] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x2c) returned 0x3e3378
	[0212.245] GetProcessHeap () returned 0x3d0000
	[0212.245] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x258) returned 0x3e33b0
	[0212.245] _wcsicmp (_String1="5p5NrGJn0jS", _String2=".") returned 7
	[0212.245] _wcsicmp (_String1="5p5NrGJn0jS", _String2="..") returned 7
	[0212.245] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS" (normalized: "c:\\users\\5p5nrgjn0js")) returned 0xffffffff
	[0212.245] GetLastError () returned 0x2
	[0212.246] GetProcessHeap () returned 0x3d0000
	[0212.246] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x210) returned 0x3d07f0
	[0212.246] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3d07f8 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0212.247] SetErrorMode (uMode=0x0) returned 0x8003
	[0212.247] SetErrorMode (uMode=0x1) returned 0x0
	[0212.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS", nBufferLength=0x104, lpBuffer=0x34ecac, lpFilePart=0x34ec94 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS", lpFilePart=0x34ec94*="5p5NrGJn0jS") returned 0x14
	[0212.247] SetErrorMode (uMode=0x8003) returned 0x1
	[0212.248] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11
	[0212.248] GetProcessHeap () returned 0x3d0000
	[0212.248] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x258) returned 0x3d0a08
	[0212.248] _wcsicmp (_String1="5p5NrGJn0jS", _String2=".") returned 7
	[0212.248] _wcsicmp (_String1="5p5NrGJn0jS", _String2="..") returned 7
	[0212.248] GetFileAttributesW (lpFileName="C:\\Users\\5p5NrGJn0jS" (normalized: "c:\\users\\5p5nrgjn0js")) returned 0xffffffff
	[0212.248] GetLastError () returned 0x2
	[0212.248] GetProcessHeap () returned 0x3d0000
	[0212.248] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x20) returned 0x3e5788
	[0212.248] GetProcessHeap () returned 0x3d0000
	[0212.248] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x1a) returned 0x3e57b0
	[0212.248] GetProcessHeap () returned 0x3d0000
	[0212.248] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x1a) returned 0x3e57d8
	[0212.248] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x34e658 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0212.248] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x34e888, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x34e88c, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x34e888*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1
	[0212.248] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8
	[0212.248] GetProcessHeap () returned 0x3d0000
	[0212.248] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x2c) returned 0x3d0c68
	[0212.249] GetProcessHeap () returned 0x3d0000
	[0212.249] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x258) returned 0x3d0ca0
	[0212.249] _wcsicmp (_String1="mor.exe", _String2=".") returned 63
	[0212.249] _wcsicmp (_String1="mor.exe", _String2="..") returned 63
	[0212.249] GetFileAttributesW (lpFileName="HALPmcxz\\Desktop\\mor.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\halpmcxz\\desktop\\mor.exe")) returned 0xffffffff
	[0212.249] GetLastError () returned 0x3
	[0212.249] GetProcessHeap () returned 0x3d0000
	[0212.249] RtlAllocateHeap (HeapHandle=0x3d0000, Flags=0x8, Size=0x210) returned 0x3d0f00
	[0212.249] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x3d0f08 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x25
	[0212.249] SetErrorMode (uMode=0x0) returned 0x8003
	[0212.249] SetErrorMode (uMode=0x1) returned 0x0
	[0212.249] GetFullPathNameW (in: lpFileName="HALPmcxz\\Desktop\\mor.exe", nBufferLength=0x104, lpBuffer=0x34ecac, lpFilePart=0x34ec94 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HALPmcxz\\Desktop\\mor.exe", lpFilePart=0x34ec94*="mor.exe") returned 0x3e
	[0212.249] SetErrorMode (uMode=0x8003) returned 0x1
	[0212.249] GetFileAttributesW (lpFileName="HALPmcxz\\Desktop" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\halpmcxz\\desktop")) returned 0xffffffff
	[0212.250] GetLastError () returned 0x3
	[0212.250] _get_osfhandle (_FileHandle=2) returned 0xb
	[0212.250] GetFileType (hFile=0xb) returned 0x2
	[0212.250] GetStdHandle (nStdHandle=0xfffffff4) returned 0xb
	[0212.250] GetConsoleMode (in: hConsoleHandle=0xb, lpMode=0x34ee3c | out: lpMode=0x34ee3c) returned 1
	[0212.251] _get_osfhandle (_FileHandle=2) returned 0xb
	[0212.251] GetConsoleScreenBufferInfo (in: hConsoleOutput=0xb, lpConsoleScreenBufferInfo=0x34ee70 | out: lpConsoleScreenBufferInfo=0x34ee70) returned 1
	[0212.251] FormatMessageW (in: dwFlags=0x1a00, lpSource=0x0, dwMessageId=0x3, dwLanguageId=0x0, lpBuffer=0x49d94640, nSize=0x2000, Arguments=0x0 | out: lpBuffer="The system cannot find the path specified.\r\n") returned 0x2c
	[0213.005] FormatMessageW (in: dwFlags=0x1800, lpSource=0x0, dwMessageId=0x3, dwLanguageId=0x0, lpBuffer=0x49d94640, nSize=0x2000, Arguments=0x34eeb0 | out: lpBuffer="The system cannot find the path specified.\r\n") returned 0x2c
	[0213.005] WriteConsoleW (in: hConsoleOutput=0xb, lpBuffer=0x49d94640*, nNumberOfCharsToWrite=0x2c, lpNumberOfCharsWritten=0x34ee94, lpReserved=0x0 | out: lpBuffer=0x49d94640*, lpNumberOfCharsWritten=0x34ee94*=0x2c) returned 1
	[0213.190] GetProcessHeap () returned 0x3d0000
	[0213.190] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3d0f00 | out: hHeap=0x3d0000) returned 1
	[0213.190] GetProcessHeap () returned 0x3d0000
	[0213.190] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3d0ca0 | out: hHeap=0x3d0000) returned 1
	[0213.190] GetProcessHeap () returned 0x3d0000
	[0213.190] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3d0c68 | out: hHeap=0x3d0000) returned 1
	[0213.190] GetProcessHeap () returned 0x3d0000
	[0213.190] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e57d8 | out: hHeap=0x3d0000) returned 1
	[0213.190] GetProcessHeap () returned 0x3d0000
	[0213.190] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e57b0 | out: hHeap=0x3d0000) returned 1
	[0213.190] GetProcessHeap () returned 0x3d0000
	[0213.190] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e5788 | out: hHeap=0x3d0000) returned 1
	[0213.190] GetProcessHeap () returned 0x3d0000
	[0213.191] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3d0a08 | out: hHeap=0x3d0000) returned 1
	[0213.191] GetProcessHeap () returned 0x3d0000
	[0213.191] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3d07f0 | out: hHeap=0x3d0000) returned 1
	[0213.191] GetProcessHeap () returned 0x3d0000
	[0213.191] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e33b0 | out: hHeap=0x3d0000) returned 1
	[0213.191] GetProcessHeap () returned 0x3d0000
	[0213.191] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e3378 | out: hHeap=0x3d0000) returned 1
	[0213.191] GetProcessHeap () returned 0x3d0000
	[0213.191] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e3338 | out: hHeap=0x3d0000) returned 1
	[0213.191] GetProcessHeap () returned 0x3d0000
	[0213.191] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e32f0 | out: hHeap=0x3d0000) returned 1
	[0213.191] GetProcessHeap () returned 0x3d0000
	[0213.191] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e32d0 | out: hHeap=0x3d0000) returned 1
	[0213.191] GetProcessHeap () returned 0x3d0000
	[0213.191] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e3290 | out: hHeap=0x3d0000) returned 1
	[0213.191] GetProcessHeap () returned 0x3d0000
	[0213.191] HeapFree (in: hHeap=0x3d0000, dwFlags=0x0, lpMem=0x3e3220 | out: hHeap=0x3d0000) returned 1
	[0213.191] _get_osfhandle (_FileHandle=1) returned 0x7
	[0213.191] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1
	[0213.298] _get_osfhandle (_FileHandle=1) returned 0x7
	[0213.298] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49d841ac | out: lpMode=0x49d841ac) returned 1
	[0213.299] _get_osfhandle (_FileHandle=0) returned 0x3
	[0213.299] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49d841b0 | out: lpMode=0x49d841b0) returned 1
	[0213.299] SetConsoleInputExeNameW () returned 0x1
	[0213.299] GetConsoleOutputCP () returned 0x1b5
	[0213.299] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49d84260 | out: lpCPInfo=0x49d84260) returned 1
	[0213.299] SetThreadUILanguage (LangId=0x0) returned 0x409
	[0213.300] exit (_Code=1) 

Process:
	id = "5"
	image_name = "wmiadap.exe"
	filename = "c:\\windows\\system32\\wbem\\wmiadap.exe"
	page_root = "0x3475e000"
	os_pid = "0x5d8"
	os_integrity_level = "0x4000"
	os_privileges = "0xe60b1e890"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0x370"
	cmd_line = "wmiadap.exe /F /T /R"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\SYSTEM"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d057" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe]


Thread:
	id = 71
	os_tid = 0x54c


Thread:
	id = 72
	os_tid = 0x85c


Thread:
	id = 73
	os_tid = 0x694


Thread:
	id = 74
	os_tid = 0x248


Thread:
	id = 75
	os_tid = 0x754


Thread:
	id = 76
	os_tid = 0x7b4


Process:
	id = "6"
	image_name = "svchost.exe"
	filename = "c:\\windows\\system32\\svchost.exe"
	page_root = "0x24f0e000"
	os_pid = "0x2c8"
	os_integrity_level = "0x4000"
	os_privileges = "0x60800000"
	monitor_reason = "rpc_server"
	parent_id = "2"
	os_parent_pid = "0x1d8"
	cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted"
	cur_dir = "C:\\Windows\\system32\\"
	os_username = "NT AUTHORITY\\Local Service"
	bitness = "32"
	os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b7a5" [0xc000000f], "LOCAL" [0x7]


Thread:
	id = 77
	os_tid = 0xacc


Thread:
	id = 78
	os_tid = 0x82c


Thread:
	id = 79
	os_tid = 0x7d4


Thread:
	id = 80
	os_tid = 0x568


Thread:
	id = 81
	os_tid = 0xa50


Thread:
	id = 82
	os_tid = 0x40c


Thread:
	id = 83
	os_tid = 0x138


Thread:
	id = 84
	os_tid = 0x5f8


Thread:
	id = 85
	os_tid = 0x5f0


Thread:
	id = 86
	os_tid = 0x5ec


Thread:
	id = 87
	os_tid = 0x5d0


Thread:
	id = 88
	os_tid = 0x12c


Thread:
	id = 89
	os_tid = 0x170


Thread:
	id = 90
	os_tid = 0x3c0


Thread:
	id = 91
	os_tid = 0x3b8


Thread:
	id = 92
	os_tid = 0x3a8


Thread:
	id = 93
	os_tid = 0x2fc


Thread:
	id = 94
	os_tid = 0x2f8


Thread:
	id = 95
	os_tid = 0x2dc


Thread:
	id = 96
	os_tid = 0x2d4


Thread:
	id = 97
	os_tid = 0x2cc


Thread:
	id = 101
	os_tid = 0x710